Abstract:Presently, Supervisory Control and Data Acquisition (SCADA) systems are broadly adopted in remote monitoring large-scale production systems and modern power grids. However, SCADA systems are continuously exposed to various heterogeneous cyberattacks, making the detection task using the conventional intrusion detection systems (IDSs) very challenging. Furthermore, conventional security solutions, such as firewalls, and antivirus software, are not appropriate for fully protecting SCADA systems because they have distinct specifications. Thus, accurately detecting cyber-attacks in critical SCADA systems is undoubtedly indispensable to enhance their resilience, ensure safe operations, and avoid costly maintenance. The overarching goal of this paper is to detect malicious intrusions that already detoured traditional IDS and firewalls. In this paper, a stacked deep learning method is introduced to identify malicious attacks targeting SCADA systems. Specifically, we investigate the feasibility of a deep learning approach for intrusion detection in SCADA systems. Real data sets from two laboratory-scale SCADA systems, a two-line three-bus power transmission system and a gas pipeline are used to evaluate the proposed method's performance. The results of this investigation show the satisfying detection performance of the proposed stacked deep learning approach. This study also showed that the proposed approach outperformed the standalone deep learning models and the state-of-the-art algorithms, including Nearest neighbor, Random forests, Naive Bayes, Adaboost, Support Vector Machine, and oneR. Besides detecting the malicious attacks, we also investigate the feature importance of the cyber-attacks detection process using the Random Forest procedure, which helps design more parsimonious models.

Attack Detection in Automatic Generation Control Systems using LSTM-Based Stacked Autoencoders

A Reinforcement Learning-Based Detection Method for False Data Injection Attack in Distributed Smart Grid

A Reinforcement Learning Approach to Undetectable Attacks against Automatic Generation Control

A data-driven algorithm to detect false data injections targeting both frequency regulation and market operation in power systems

A Deep Learning based Detection Method for Combined Integrity-Availability Cyber Attacks in Power System

Cyberattack detection for electricity theft in smart grids via stacking ensemble GRU optimization algorithm using federated learning framework

Detecting False Data Injection Attacks in Smart Grids: A Semi-Supervised Deep Learning Approach

False data injection attack detection in dynamic power grid: A recurrent neural network-based method

Multivariate time-series cyberattack detection in the distributed secondary control of AC microgrids with convolutional neural network autoencoder ensemble

False Data Injection Attack Detection in Smart Grid Using Energy Consumption Forecasting

A stacked deep learning approach to cyber-attacks detection in industrial systems: application to power system and gas pipeline systems

An Unsupervised Adversarial Autoencoder for Cyber Attack Detection in Power Distribution Grids

Evaluation of Reinforcement Learning-Based False Data Injection Attack to Automatic Voltage Control

Anomaly Detection in Automatic Generation Control Systems Based on Traffic Pattern Analysis and Deep Transfer Learning

LSTM-Based False Data Injection Attack Detection in Smart Grids

Artificial Intelligence based Approach for Identification and Mitigation of Cyber-Attacks in Wide-Area Control of Power Systems

Physical model learning based false data injection attack on power system state estimation

DRL2FC: An Attack-Resilient Controller for Automatic Generation Control Based on Deep Reinforcement Learning

Extreme Learning Machine-Based State Reconstruction for Automatic Attack Filtering in Cyber Physical Power System

Temporal false data injection attack and detection on cyber‐physical power system based on deep reinforcement learning