Title: Adaptive Hierarchical Cyber Attack Detection and Localization in Active Distribution Systems

Journal Article · · IEEE Transactions on Smart Grid

Development of a cyber security strategy for the active distribution systems is challenging due to the inclusion of distributed renewable energy generations. Here this paper proposes an adaptive hierarchical cyber attack detection and localization framework for distributed active distribution systems via analyzing electrical waveforms. Cyber attack detection is based on a sequential deep learning model, via which even minor cyber attacks can be identified. The two-stage cyber attack localization algorithm first estimates the cyber attack sub-region, and then localize the specified cyber attack within the estimated subregion. We propose a modified spectral clustering-based network partitioning method for the hierarchical cyber attack ‘coarse’ localization. Next, to further narrow down the cyber attack location, a normalized impact score based on waveform statistical metrics is proposed to obtain a ‘fine’ cyber attack location by characterizing different waveform properties. Finally, compared with classical and state-of-art methods, a comprehensive quantitative evaluation with two case studies shows promising estimation results of the proposed framework.

Research Organization:
University of Arkansas, Fayetteville, AR (United States); University of Georgia, Athens, GA (United States)
Sponsoring Organization:
National Science Foundation (NSF); USDOE Office of Energy Efficiency and Renewable Energy (EERE), Renewable Power Office. Solar Energy Technologies Office
Grant/Contract Number:
EE0009026
OSTI ID:
1980586
Journal Information:
IEEE Transactions on Smart Grid, Journal Name: IEEE Transactions on Smart Grid Journal Issue: 3 Vol. 13; ISSN 1949-3053
Publisher:
IEEECopyright Statement
Country of Publication:
United States
Language:
English

References (43)

A tutorial on spectral clustering journal August 2007
An interactive smart grid communication approach for big data traffic journal April 2018
A PMU-data-driven disruptive event classification in distribution systems journal April 2018
Cause identification of electromagnetic transient events using spatiotemporal feature learning journal December 2020
Cyber attacks in smart grid – dynamic impacts, analyses and recommendations journal October 2020
A Note on Multivariate CUSUM Procedures journal November 1987
Holistic modeling and analysis of multistage manufacturing processes with sparse effective inputs and mixed profile outputs journal August 2020
Normalized cuts and image segmentation journal January 2000
Event Location Identification in Distribution Networks Using Waveform Measurement Units conference October 2020
Detection and Identification of Cyber and Physical Attacks on Distribution Power Grids With PVs: An Online High-Dimensional Data-Driven Approach journal February 2022
Fault Detection and Protection Strategy for Islanded Inverter-Based Microgrids journal February 2021
Cyber–Physical Security of Powertrain Systems in Modern Electric Vehicles: Vulnerabilities, Challenges, and Future Visions journal August 2021
System Statistics Learning-Based IoT Security: Feasibility and Suitability journal August 2019
Enhanced Cyber-Physical Security in Internet of Things Through Energy Auditing journal June 2019
Online Distributed IoT Security Monitoring With Multidimensional Streaming Big Data journal May 2020
Locational Detection of the False Data Injection Attack in a Smart Grid: A Multilabel Classification Approach journal September 2020
Phasor Measurement Units Optimal Placement and Performance Limits for Fault Localization journal January 2020
Short-term distribution system state forecast based on optimal synchrophasor sensor placement and extreme learning machine conference July 2016
SynchroWaveform Measurement Units and Applications conference August 2019
Analysis of Moving Target Defense in Unbalanced and Multiphase Distribution Systems Considering Voltage Stability conference October 2021
Optimal Partial Feedback Attacks in Cyber-Physical Power Systems journal September 2020
Rule-Based Data-Driven Analytics for Wide-Area Fault Detection Using Synchrophasor Data journal May 2017
Novel Fault Detection and Localization Algorithm for Low-Voltage DC Microgrid journal July 2020
Survey of Clustering Algorithms journal May 2005
Detection and Diagnosis of Data Integrity Attacks in Solar Farms Based on Multilayer Long Short-Term Memory Network journal March 2021
Mitigating Concurrent False Data Injection Attacks in Cooperative DC Microgrids journal August 2021
Transmission-Line Fault Analysis Using Synchronized Sampling journal April 2014
Waveform-Based Method for Fast and Accurate Identification of Subsynchronous Resonance Events journal September 2019
A Real Time Event Detection, Classification and Localization Using Synchrophasor Data journal November 2020
The Compression of Electric Signal Waveforms for Smart Grids: State of the Art and Future Trends journal January 2014
Contactless Measurement of Substation Busbars Voltages and Waveforms Reconstruction Using Electric Field Sensors and Artificial Neural Network journal May 2015
Fault Location in Distribution Networks Through Graph Marking journal March 2018
Transient Monitoring Function-Based Fault Detection for Inverter-Interfaced Microgrids journal January 2016
Real-Time Detection of False Data Injection Attacks in Smart Grid: A Deep Learning-Based Intelligent Mechanism journal September 2017
False Data Injection Attacks Against State Estimation in Power Distribution Systems journal May 2019
False Data Injection Attacks Against State Estimation in Multiphase and Unbalanced Smart Distribution Systems journal November 2019
Automated Identification of Electrical Disturbance Waveforms Within an Operational Smart Power Grid journal September 2020
Synchronous Waveform Measurements to Locate Transient Events and Incipient Faults in Power Distribution Networks journal September 2021
DBSCAN Revisited, Revisited: Why and How You Should (Still) Use DBSCAN journal August 2017
Data processing of high-rate low-voltage distribution grid recordings for smart grid monitoring and analysis journal February 2015
A data-driven method to detect and localize the single-phase grounding fault in distribution network based on synchronized phasor measurement journal August 2019
A Note on Multivariate CUSUM Procedures journal November 1987
A Case Study of an Industrial Power Plant under Cyberattack: Simulation and Analysis journal April 2021

Similar Records

Hybrid Cyber-attack Detection in Photovoltaic Farms
Journal Article · 2023 · IEEE Energy Conversion Congress and Exposition (ECCE) · OSTI ID:2341857

Hybrid Cyber-attack Detection in Photovoltaic Farms
Conference · 2023 · OSTI ID:2311312

A distributed voltage inference framework for cyber-physical attacks detection and localization in active distribution grids
Journal Article · 2025 · Sustainable Energy, Grids and Networks · OSTI ID:3015748