Abstract:The emergence of novel the dummy data injection attack (DDIA) poses a severe threat to the secure and stable operation of power systems. These attacks are particularly perilous due to the minimal Euclidean spatial separation between the injected malicious data and legitimate data, rendering their precise detection challenging using conventional distance-based methods. Furthermore, existing research predominantly focuses on various machine learning techniques, often analyzing the temporal data sequences post-attack or relying solely on Euclidean spatial characteristics. Unfortunately, this approach tends to overlook the inherent topological correlations within the non-Euclidean spatial attributes of power grid data, consequently leading to diminished accuracy in attack localization. To address this issue, this study takes a comprehensive approach. Initially, it examines the underlying principles of these new DDIAs on power systems. Here, an intricate mathematical model of the DDIA is designed, accounting for incomplete topological knowledge and alternating current (AC) state estimation from an attacker's perspective. This model aims to mitigate the vulnerabilities associated with direct current (DC) flow-based attack data generation methods that can be readily detected. Subsequently, by integrating a priori knowledge of grid topology and considering the temporal correlations within measurement data and the topology-dependent attributes of the power grid, this study introduces temporal and spatial attention matrices. These matrices adaptively capture the spatio-temporal correlations within the attacks. Leveraging gated stacked causal convolution and graph wavelet sparse convolution, the study jointly extracts spatio-temporal DDIA features. This methodology significantly enhances the dynamic correlation mining capability while improving computational efficiency in the neighborhood. Finally, the research proposes a DDIA localization method based on spatio-temporal graph neural networks, allowing for adaptation to changing power system topologies. The accuracy and effectiveness of the DDIA model are rigorously demonstrated through comprehensive analytical cases. It is unequivocally verified that the proposed localization method rapidly and effectively detects and locates DDIA while exhibiting superior accuracy, robustness, and generalization capabilities.

Attack detection for spoofed synchrophasor measurements using segmentation network

Attack Detection for Distributed Photovoltaic Generation Systems Leveraging Cyber and Power Side Channel Data

Robust and Secure Time-Synchronization Against Sybil Attacks for Sensor Networks

Square Wave Attack Detection Based on PCA with Cosine Similarity and SVM

Sensor Attacks on Grid-Tie Photovoltaic Inverters: Synthetic Analysis and Real-Time Robust Detection

Fast Sequence Component Analysis for Attack Detection in Synchrophasor Networks

Model-free based Real-time Authentication Framework for Distributed Synchrophasors

Observer-based Cyber Attack Detection and Isolation in Smart Grids

Defending Water Treatment Networks: Exploiting Spatio-temporal Effects for Cyber Attack Detection

Data Source Authentication of Synchrophasor Measurement Devices Based on 1D-CNN and GRU

Localizing False Data Injection Attacks in Smart Grid: A Spectrum-Based Neural Network Approach

Distributed denial-of-service attack detection for smart grid wide area measurement system: A hybrid machine learning technique

Data-Driven Attack Detection and Identification for Cyber-Physical Systems under Sparse Sensor Attacks

Data Source Authentication for Wide-Area Synchrophasor Measurements Based on Spatial Signature Extraction and Quadratic Kernel SVM

A Method for Detecting LDoS Attacks in SDWSN Based on Compressed Hilbert–Huang Transform and Convolutional Neural Networks

An Efficient Separation and Identification Algorithm for Mixed Threatening Events Applied in Fiber-Optic Distributed Acoustic Sensor

Intrusion Detection of NSM Based DoS Attacks Using Data Mining in Smart Grid

Identification of Successive "Unobservable" Cyber Data Attacks in Power Systems Through Matrix Decomposition

Localization of dummy data injection attacks in power systems considering incomplete topological information: A spatio-temporal graph wavelet convolutional neural network approach

Online Parallel Attack Detection Method for Industrial Control based on Multi-bandpass Filter

Spatial-Temporal Data-Driven Model for Load Altering Attack Detection in Smart Power Distribution Networks