False Data Injection Research Articles

Tensor-Completion-Enabled Stealthy False Data Injection Attacks on IoT-Based Smart Grid

Tensor-Completion-Enabled Stealthy False Data Injection Attacks on IoT-Based Smart Grid

False Data Injection Attacks Detection Based on Stacking and MIC-DCXGB

False Data Injection Attacks Detection Based on Stacking and MIC-DCXGB

An approach for real-time implementation of cyber security in power system network

Abstract In this era of Web World-3, usage of the Internet of Things (IoT) in power system networks has attained scalable altitude. By using this technology, data can be transferred and monitored from the far end. Further, the suggested corrective actions are also executed. However, recently, many cyber-attacks have been observed on the power system in which activities such as injection of false data, unwanted switching operations, formation of sub-system layers, and false indication of failure of cyber-physical components (CpC) are experienced. In the worst case, it leads to invite cascade tripping of the power system. Utmost care is taken for the selection of CpC for the power system. However, it is observed that the cyber attackers mostly take entry into the network using the CpC of the power system. Cyber attackers perform false switching operations and false data injection. This article suggests a cyber security concept to minimize the false switching operations and false data injection in the power system network. A hardware model is prepared and the working scheme is implemented using IoT technology. The hardware result suggests that the un-authentic attempt/cyber-attack has been identified and the alarm is generated. It also does not permit the un-authentic person to access the real-time data. A wide range of applicability of the suggested scheme has been verified by hardware results. In addition to this, the power factor correction algorithm also works satisfactorily in the hardware along with the cyber security constraints. In order to prove wide range of applicability of the suggested scheme, additional features such as controlling of multiple switching devices and interlock between CB and earthing switch has been successfully implemented in developed hardware.

Attack Reconstruction and Attack-Resilient Consensus Control for Fuzzy Markovian Jump Multi-Agent Systems

Driven by the rapid development of modern industrial applications, multi-agent systems (MASs), integrating computational and physical resources, have become increasingly important in recent years. However, the performance of MASs can be easily compromised by malicious false data injection attacks (FDIAs) due to the inherent vulnerability of the cyber layer. This work focuses on an event-triggered framework for secure reconstruction and consensus control in MASs subject to both sensor and actuator attacks. First, we introduce a class of Takagi–Sugeno fuzzy multi-agent systems that relax the traditional Lipschitz condition and incorporate realistic system dynamics by considering parameter variations governed by Markovian jump principles. Second, an adaptive fuzzy estimator is developed for the simultaneous reconstruction of states and attacks in MASs. The derived estimates are utilized to design an attack-resilient consensus control strategy that compensates for the effects of FDIAs on the closed-loop consensus error dynamics. Meanwhile, the sufficient conditions for the convergence of both estimation and consensus errors are presented and rigorously proved. Finally, evaluation results on an experimental platform through multiple truck-trailer systems are provided to demonstrate the effectiveness and performance of the proposed approach.

Observer‐Based Attack Detection and Data‐Driven Resilient Control for Heterogeneous Nonlinear Nonaffine Mass Under FDI Attacks

ABSTRACTThe attack detection and data‐driven resilient control problem for heterogeneous nonlinear nonaffine multi‐agent systems (MASs) in the presence of intermittent false data injection (FDI) attacks is investigated in this article. First, an attack detection and isolation mechanism based on the distributed observer are designed to determine the attack signals and isolate the attacked communication links in time. Then, in order to solve the problem of the unknown system model, the dynamic linearization method is used to convert the nonlinear nonaffine MASs into an equivalent linear data model. Further, based on the linear data model, the data‐driven resilient controller with the attack isolation mechanism is designed to achieve the leader‐following tracking control objective. Finally, the simulation result illustrates the performance of the proposed scheme with comparisons.

Consensus-Based Power System State Estimation Algorithm Under Collaborative Attack.

Due to its vulnerability to a variety of cyber attacks, research on cyber security for power systems has become especially crucial. In order to maintain the safe and stable operation of power systems, it is worthwhile to gain insight into the complex characteristics and behaviors of cyber attacks from the attacker's perspective. The consensus-based distributed state estimation problem is investigated for power systems subject to collaborative attacks. In order to describe such attack behaviors, the denial of service (DoS) attack model for hybrid remote terminal unit (RTU) and phasor measurement unit (PMU) measurements, and the false data injection (FDI) attack model for neighboring estimation information, are constructed. By integrating these two types of attack models, a different consensus-based distributed estimator is designed to accurately estimate the state of the power system under collaborative attacks. Then, through Lyapunov stability analysis theory, a sufficient condition is provided to ensure that the proposed distributed estimator is stable, and a suitable consensus gain matrix is devised. Finally, to confirm the viability and efficacy of the suggested algorithm, a simulation experiment on an IEEE benchmark 14-bus power system is carried out.

Federated Deep Learning Model for False Data Injection Attack Detection in Cyber Physical Power Systems

Cyber-physical power systems (CPPS) integrate information and communication technology into conventional electric power systems to facilitate bidirectional communication of information and electric power between users and power grids. Despite its benefits, the open communication environment of CPPS is vulnerable to various security attacks. This paper proposes a federated deep learning-based architecture to detect false data injection attacks (FDIAs) in CPPS. The proposed work offers a strong, decentralized alternative with the ability to boost detection accuracy while maintaining data privacy, presenting a significant opportunity for real-world applications in the smart grid. This framework combines state-of-the-art machine learning and deep learning models, which are used in both centralized and federated learning configurations, to boost the detection of false data injection attacks in cyber-physical power systems. In particular, the research uses a multi-stage detection framework that combines several models, including classic machine learning classifiers like Random Forest and ExtraTrees Classifiers, and deep learning architectures such as Long Short-Term Memory (LSTM) and Gated Recurrent Unit (GRU). The results demonstrate that Bidirectional GRU and LSTM models with attention layers in a federated learning setup achieve superior performance, with accuracy approaching 99.8%. This approach enhances both detection accuracy and data privacy, offering a robust solution for FDIA detection in real-world smart grid applications.

Finite-time bounded security control of networked switched stochastic systems

This paper is dedicated to discussing stochastic finite-time bounded control of switched stochastic systems with feedback information sampled by an event-triggered mechanism and transmitted by network. Besides the incomplete information because of sample, data loss and corruption during information transmission caused by hybrid cyber attacks including DoS attacks and false-data injection attacks, are also taken into consideration. Based on the above incomplete information, state feedback controllers are established to fulfil stochastic finite-time boundedness of switched stochastic systems and make it have a certain disturbance attenuation capability, i.e. have a finite-time L 2 -gain, successfully. Sufficient conditions are cast into a convex optimisation problem which can be easily solved by fixing some parameters. Simulation results are employed to verify the validity of results.

On adaptive resilient secondary control for DC microgrids under false data injection attacks

AbstractDistributed cooperative control strategies for DC microgrids have been rapidly evolving in recent years. However, introducing a cyber layer to enhance robustness, scalability, and reliability also exposes the system to potential cyber‐attacks. The damage inflicted by such attacks on the system performance can be catastrophic, reaching a point where it may devastate the system normal operation. By using model reference adaptive control (MRAC), this article proposes a resilient approach that does not require an accurate model of the system and despite the uncertainties for detecting false data injections into the reference DC voltage and simultaneously mitigating their adverse effects on the system stability and performance. The proposed technique employs an observer to detect possible false data injections in an online manner. By emulating the behavior of an ideal reference model, the MRAC ensures adaptive adjustments of the control parameters over time to mitigate the negative effects of potential attacks effectively and despite non‐idealities such as measurement noise, parameter variations, and environmental changes in DC microgrids, the MRAC effectively manages false data injection attacks. Simulation studies are conducted using diverse scenarios involving a three‐node DC microgrid to show the effectiveness of the proposed method.

Probability‐Based Finite‐Time Security Control for Switched Stochastic Systems via a Novel Event‐Triggered Mechanism and Its Application

ABSTRACTThis article discusses the finite‐time boundedness (FTB) issue and ‐gain analysis for switched stochastic systems, particularly under the dual influence of DoS attacks and false data injection attacks, by employing a novel event‐triggered mechanism. Different from the moment calculation method, a probability‐based FTB is studied which offers more pertinence. To obtain a less conservative condition of FTB, a switched Lyapunov function is constructed. Additionally, a memory‐based dynamic event‐triggered mechanism is designed to reduce the amounts of triggering and mitigate the state response fluctuations. Based on the incomplete information above, state feedback controllers are devised to satisfy stochastic FTB, ensuring the successful attainment of finite‐time ‐gain. Sufficient conditions are cast into a convex optimization problem by LMIs which can be solved easily. Finally, a compared numerical example and an RLC series circuit are adopted to demonstrate the availability of the theoretical results.

Event‐Triggered Secure Control of Positive Networked Control Systems Under Multi‐Channels Attacks

ABSTRACTThis paper focuses on the secure control of positive networked control systems under multi‐channel attacks characterized by a Bernoulli distribution. Specifically, the sensor‐to‐controller channel suffers from false data injection (FDI) attacks, whereas the controller‐to‐actuator channel suffers from denial of service (DoS) attacks. The objective is to design a static output feedback controller that guarantees the positivity and stochastic stability of the closed‐loop system in the presence of DoS and FDI attacks. To conserve communication resources, we employ an event‐triggered scheme to reduce the frequency of information transmission. Due to the positivity of the system, the proposed event‐triggering mechanism employs the 1‐norm form instead of the 2‐norm form, which allows that the controller parameter is determined via linear programming rather than LMI technique. Finally, two simulation examples are provided to verify the effectiveness of our methods.

A Real-Time and Online Dynamic Reconfiguration against Cyber-Attacks to Enhance Security and Cost-Efficiency in Smart Power Microgrids Using Deep Learning

Ensuring the secure and cost-effective operation of smart power microgrids has become a significant concern for managers and operators due to the escalating damage caused by natural phenomena and cyber-attacks. This paper presents a novel framework focused on the dynamic reconfiguration of multi-microgrids to enhance system’s security index, including stability, reliability, and operation costs. The framework incorporates distributed generation (DG) to address cyber-attacks that can lead to line outages or generation failures within the network. Additionally, this work considers the uncertainties and accessibility factors of power networks through a modified point prediction method, which was previously overlooked. To achieve the secure and cost-effective operation of smart power multi-microgrids, an optimization framework is developed as a multi-objective problem, where the states of switches and DG serve as independent parameters, while the dependent parameters consist of the operation cost and techno-security indexes. The multi-objective problem employs deep learning (DL) techniques, specifically based on long short-term memory (LSTM) and prediction intervals, to effectively detect false data injection attacks (FDIAs) on advanced metering infrastructures (AMIs). By incorporating a modified point prediction method, LSTM-based deep learning, and consideration of technical indexes and FDIA cyber-attacks, this framework aims to advance the security and reliability of smart power multi-microgrids. The effectiveness of this method was validated on a network of 118 buses. The results of the proposed approach demonstrate remarkable improvements over PSO, MOGA, ICA, and HHO algorithms in both technical and economic indicators.

Zero-Trust Zero-Communication Defence against Hybrid Cyberattacks in Distributed Energy Resources Using Mean Field Reinforcement Leaning

As the evolution of smart grids accelerates, distributed energy resources (DERs) emerge as key elements in the transformation of global energy systems. However, the integration of these technologies introduces significant cybersecurity vulnerabilities, notably false data injection (FDI) and a direct load-altering attack (DLAA). Traditional load-altering attacks require a huge attack load and, thus, are not practical to implement. In contrast, in modern DER environments where households become “prosumers” with high-power energy generation, the implications of such attacks are substantially amplified. This paper considers a hybrid cyberattack that includes both FDI and a DLAA, and presents a hierarchical, optimal load adjustment framework that addresses these security concerns. A centralized optimizer first calculates the ideal load-shedding strategies for each substation, which are then securely broadcast to households. To address the complexities at the individual household level, we introduce a novel reinforcement learning algorithm termed Mean Field Deep Deterministic Policy Gradients (MF-DDPG). This algorithm employs mean-field game theory to enable decentrally coordinated decision-making among each household, making it particularly effective in zero-trust scenarios. Through this multifaceted approach, we offer a robust countermeasure against load-altering attacks, thereby enhancing the resilience and stability of advanced smart grids.

A PCA-based algorithm for online false data injection and jamming attacks detection in cyber-physical systems

Cyber-physical systems face cyberattacks that hinder performance, increase cost, or even collapse the system. Thus, rapid and accurate attack detection is crucial for quick activation of defense mechanisms. Model-based attack detection approaches are known for their precision; however, the unavailability of the exact system model poses a challenge. In response, model-free approaches have gained increased attention as a practical alternative. In this paper, an online model-free algorithm for detecting false data injection and jamming attacks on CPSs is proposed. The method leverages principal component analysis to reconstruct the expected observations in a reduced dimension space, emphasizing the most effective principal components. Then, deciding on attacked or normal operation relies on analyzing either the Euclidean distance or the cosine similarity of the discrepancy between the expected and actual observations. The proposed metrics effectively expose subtle deviations from expected behavior, as any alteration in these components augments the distance between the observed and reconstructed values. The proposed method was compared with the conventional cumulative sum discriminator and Kalman-based algorithm, using an IEEE-14, IEEE-30, and IEEE-118 bus systems. The results demonstrate the superiority of the proposed algorithm in terms of various evaluation metrics, including F-score, precision, recall, and miss detection ratio.

Modeling and detection of false data injection attacks in cyber-physical distribution system with load aggregator interaction

With the increasing number of users and multi-type loads accessing the cyber–physical distribution system (CPDS), the bidirectional interaction between the system becomes more and more frequent. The Load aggregator (LA) also plays an increasingly important role in the interaction process. However, the LA’s high dependence on information and lack of security measures make it vulnerable to attacks, so this paper analyzes the interactive security of the LAs from two points. Considering the game process between the LAs and users from the attacker’s point of view, this paper puts forward an attack strategy aiming cost function of the LAs, establishes a bi-level multi-objective programming attack model of false data injection attacks(FDIAs), and proposes an attack detection method based on the multi-state matching method and improved similar daily data preprocessing generative adversarial network (P-GAN) from the defender’s point of view to defend against the above attack strategy. Furthermore, a hybrid detection mechanism combining event triggering and periodic detection is proposed to ensure response speed and adaptability of detection. The effectiveness of the proposed attack model and the detection method is verified by simulation analysis.

Cluster partition-fuzzy broad learning-based fast detection and localization framework for false data injection attack in smart distribution networks

The distributed renewable energy generations, as accessible and easily targets for attackers, introduce an extra false data injection attack (FDIA) threat in the smart distribution networks. Scattered attack points and complex attack features hinder the elimination of potential threats. In this context, an FDIA fast detection and pinpoint localization framework is proposed. This framework identifies abnormal signals and attacked nodes from the unique topology structure and status contiguity of smart distribution networks, namely, spatial-temporal correlations of power grids, by using a cluster partition-fuzzy broad learning system (CP-FBLS). Unlike most existing FDIA detection methods, which are dedicated to high accuracy but neglect the urgent need for rapid detection in smart distribution networks, the proposed CP-FBLS framework maintains the fast computational nature of a fuzzy broad learning system (FBLS), while avoiding the accuracy degradation caused by high-dimension of data in large-scale smart distribution networks. Moreover, the multi-layer structure of the proposed framework recognizes the location of FDIA, bridging the research gap of attack localization. To comprehensively evaluate the proposed strategy, datasets containing various FDIA types are constructed. Numerical simulations based on the above datasets in modified IEEE 34-bus and 123-bus distribution systems are implemented. The results of the case studies showed that the proposed method can achieve 98.43 % accuracy with 0.34 ms detection time, realizing rapid detection and localization of various FDIAs with satisfactory accuracy.

Resilient distributed secondary control for islanded AC microgrids under FDI attacks

For islanded AC microgrids under bounded and time-varying false data injection (FDI) attacks on actuators and communication links, a resilient distributed secondary control strategy is proposed to stabilize frequency and voltage at the reference values, and to achieve the optimal active power sharing. To mitigate the impact of FDI attacks on the stability of the islanded microgrid, extended-state observers are introduced to estimate the impact. Compared with the currently presented resilient distributed control strategies, which ensure the bounded stability of microgrids, the control objective that the synchronization of every distributed generator’s voltage and frequency to the reference values and the achievement of the optimal active power sharing is maintained by the proposed resilient control strategy. An example of an islanded AC microgrid is given to verify the proposed method.

Random subspace ensemble-based detection of false data injection attacks in automatic generation control systems

Automatic Generation Control (AGC) systems in smart grids are increasingly vulnerable to cyber-attacks, particularly False Data Injection (FDI) attacks, due to their reliance on information and communication technologies. These vulnerabilities pose significant threats to the reliable operation of power systems. To address this challenge, this research paper introduces the machine learning (ML) based cyberattack detection technique designed to identify FDI attacks with the highest accuracy proficiently. The study involves a comprehensive analysis of three features: the original discrete signal feature, the cycle-to-cycle-based feature, and the sample-to-sample-based feature. These features are utilized for detecting FDI attacks and distinguishing them from normal load variations. The research meticulously collects data by simulating diverse FDI attacks, including step attacks, pulse attacks, random attacks, and normal load variation cases on an AGC power system. Four ML classifiers are selected and compared for the classification task. The simulation results reveal that the sample-to-sample-based feature proves highly effective in distinguishing FDI attacks compared to the original signal and cycle-to-cycle-based features. Notably, the results indicate that the random subspace ensemble (RaSE) classifier, utilizing sample-to-sample-based features, effectively identifies and classifies all normal and FDI attacks. This research provides valuable insights into the potential of ML techniques for enhancing FDI attack detection in the AGC of power systems. It provides a potential pathway for overcoming the limitations associated with traditional model-based FDI detection methods.

A detection model for false data injection attacks in smart grids based on graph spatial features using temporal convolutional neural networks

Due to the intelligence and opening of future generation cyber–physical power systems, smart grids are vulnerable to the emergency of cyber-attacks aiming at the cyber–physical systems. Among these attacks, false data injection (FDI) attacks are particularly concerning in smart grids due to their stealthiness. Attackers can tamper with data transmitted through communication networks, influencing the analysis results of the control center, leading it to make wrong decisions and thereby undermining the stability of smart grids. The inability of traditional bad data detection models to detect false data injection attacks poses huge security risks to smart grids. For this reason, a new attack detection model using spatial–temporal features is proposed. The proposed detection model includes the following two parts: spatial features extraction and temporal convolutional network. First, graph convolutional operations are employed to disentangle the interactions among buses and extract spatial features of measurement; Then, the temporal convolutional network model is used to extract the temporal features. Through these processes, the proposed detection model can effectively identify the injected false data injection attacks in smart grids. The detection performance and robustness of the proposed FDI attack detection model are tested through simulations on IEEE 14-bus and 118-bus grid systems.

Event-Triggered Path Following of Autonomous Vehicles Under False Data Injection Attacks: A Try-Once-Discard Protocol-Based Transmission Scheme

Event-Triggered Path Following of Autonomous Vehicles Under False Data Injection Attacks: A Try-Once-Discard Protocol-Based Transmission Scheme