Anomaly detection of power grid dispatching platform based on Isolation Forest and K-means fusion algorithm

Abstract

It is very important to detect abnormal Access IP of power grid dispatching platform accurately and rapidly to ensure the safety of power production. An Isolation Forest and K-means fusion algorithm is proposed, which not only solves the deficiency of Isolation Forest only being able to detect anomalies in binary classification, but also solves the defect of Isolation Forest threshold setting based on artificial experience or prior assumptions by designing a threshold setting strategy for Isolation Forest anomalies. The Access IP data of the southern power grid dispatching platform is taken as an example to evaluate the proposed algorithm and model. Through control experiments, the effectiveness and advancedness of the algorithm are illustrated in terms of AUC-ROC curve, accuracy, recall, and F1 score.