Deep Autoencoder-Based Anomaly Detection of Electricity Theft Cyberattacks in Smart Grids

• Published in: IEEE systems journal Vol. 16; no. 3; pp. 4106 - 4117
• Main Authors: Takiddin, Abdulrahman, Ismail, Muhammad, Zafar, Usman, Serpedin, Erchin
• Format: Journal Article
• Language: English
• Published: New York IEEE 01.09.2022; The Institute of Electrical and Electronics Engineers, Inc. (IEEE)
• Subjects: Advanced metering infrastructure; Anomalies; Anomaly detection; Autoencoders; Computer crime; Datasets; deep machine learning; Detectors; Electricity consumption; electricity stealth; Energy consumption; False alarms; hyperparameter optimization; Sensors; sequence to sequence (seq2seq); Smart grid; Smart meters; Support vector machines; Theft; Training
• ISSN: 1932-8184; 1937-9234
• DOI: 10.1109/JSYST.2021.3136683

Designing an electricity theft cyberattack detector for the advanced metering infrastructures (AMIs) is challenging due to the limited availability of electricity theft datasets (i.e., malicious datasets). Anomaly detectors, which are trained solely on honest customers' energy consumption profiles (i.e., benign datasets), could potentially overcome this challenge. Unfortunately, existing anomaly detectors in AMIs present shallow architectures and are incapable of capturing the temporal correlations as well as the sophisticated patterns present in the electricity consumption data, which impact their detection performance negatively. This article proposes the adoption of deep (stacked) autoencoders with a long-short-term-memory (LSTM)-based sequence-to-sequence (seq2seq) structure. The depth of the autoencoders' structure helps capture the sophisticated patterns of the data and the seq2seq LSTM model enables exploitation of the time-series nature of data. We investigate the performance of simple autoencoder, variational autoencoder, and autoencoder with attention (AEA), in which improved detection performance is observed when seq2seq structures are adopted compared to fully connected ones. Based on the simulation results, the AEA detector offers an enhancement of <inline-formula><tex-math notation="LaTeX">4\!-\!21\%</tex-math></inline-formula> and <inline-formula><tex-math notation="LaTeX">4\!-\!13\%</tex-math></inline-formula> in terms of detection rate and false alarm rate, respectively, compared to existing state-of-the-art detectors