A Survey of Machine Learning Methods for Detecting False Data Injection Attacks in Power Systems

Abstract

Over the last decade, the number of cyberattacks targeting power systems and causing physical and economic damages has increased rapidly. Among them, False Data Injection Attacks (FDIAs) is a class of cyberattacks against power grid monitoring systems. Adversaries can successfully perform FDIAs in order to manipulate the power system State Estimation (SE) by compromising sensors or modifying system data. SE is an essential process performed by the Energy Management System (EMS) towards estimating unknown state variables based on system redundant measurements and network topology. SE routines include Bad Data Detection (BDD) algorithms to eliminate errors from the acquired measurements, e.g., in case of sensor failures. FDIAs can bypass BDD modules to inject malicious data vectors into a subset of measurements without being detected, and thus manipulate the results of the SE process. In order to overcome the limitations of traditional residual-based BDD approaches, datadriven solutions based on machine learning algorithms have been widely adopted for detecting malicious manipulation of sensor data due to their fast execution times and accurate results. This paper provides a comprehensive review of the most up-to-date machine learning methods for detecting FDIAs against power system SE algorithms.

A two-stage cyber attack detection and classification system for smart grids

“…Several research lines have been proposed to devise attack detectors and mitigation approaches for SGs. Early research has focused mainly on FDIA identification [20,21], though some work has addressed different types of attacks that may be carried out on a SG system, such as DoS, DDoS and GPS spoofing attacks [17]. In the following, we present the most relevant previous works, where each paragraph outlines a different case.…”