Detecting Stealthy False Data Injection Using Machine Learning in Smart Grid

• Published in: IEEE systems journal Vol. 11; no. 3; pp. 1644 - 1652
• Main Authors: Esmalifalak, Mohammad, Liu, Lanchao, Nguyen, Nam, Zheng, Rong, Han, Zhu
• Format: Journal Article
• Language: English
• Published: New York IEEE 01.09.2017; The Institute of Electrical and Electronics Engineers, Inc. (IEEE)
• Subjects: Anomaly detection; bad data detection (BDD); Boolean functions; Cybersecurity; Data structures; Machine learning; Measurement methods; power system state estimation; Principal component analysis; Principal components analysis; Residential energy; Smart grid; Smart grids; State estimation; Support vector machines; support vector machines (SVMs); System effectiveness; Training; Transmission line measurements
• DOI: 10.1109/JSYST.2014.2341597
• ISSN: 1932-8184

Aging power industries, together with the increase in demand from industrial and residential customers, are the main incentive for policy makers to define a road map to the next-generation power system called the smart grid. In the smart grid, the overall monitoring costs will be decreased, but at the same time, the risk of cyber attacks might be increased. Recently, a new type of attacks (called the stealth attack) has been introduced, which cannot be detected by the traditional bad data detection using state estimation. In this paper, we show how normal operations of power networks can be statistically distinguished from the case under stealthy attacks. We propose two machine-learning-based techniques for stealthy attack detection. The first method utilizes supervised learning over labeled data and trains a distributed support vector machine (SVM). The design of the distributed SVM is based on the alternating direction method of multipliers, which offers provable optimality and convergence rate. The second method requires no training data and detects the deviation in measurements. In both methods, principal component analysis is used to reduce the dimensionality of the data to be processed, which leads to lower computation complexities. The results of the proposed detection methods on IEEE standard test systems demonstrate the effectiveness of both schemes.