Cyberattack Detection in Large-Scale Smart Grids using Chebyshev Graph Convolutional Networks
Cyberattack Detection in Large-Scale Smart Grids using Chebyshev Graph Convolutional Networks
复制标题
DOI：
10.1109/iceee55327.2022.9772523
复制
发表时间：
2021-12
期刊：
影响因子：
--
通讯作者：
Osman Boyaci;M. Narimani;K. Davis;E. Serpedin
中科院分区：
文献类型：
--
作者：
Osman Boyaci;M. Narimani;K. Davis;E. Serpedin
作为一个高度复杂和集成的网络物理系统，现代电网面临着网络攻击。虚假数据注入攻击（FDIA），特别是，代表了一个主要类别的网络威胁，以智能电网为目标的测量数据的完整性。尽管已经提出了各种解决方案来检测这些网络攻击，但绝大多数工作都忽略了电网测量的固有图形结构，并且仅针对具有不到几百个总线的小型测试系统验证了它们的检测器。为了更好地利用智能电网测量的空间相关性，本文提出了一种使用Chebyshev Graph Convolutional Networks（CGCN）进行大规模AC电网网络攻击检测的深度学习模型。通过降低谱图滤波器的复杂性并使其局部化，CGCN提供了一种快速有效的卷积运算来建模图结构智能电网数据。我们数值验证，建议CGCN为基础的检测器超过国家的最先进的模型的检测率为7.86%，误报率为9.67%的大规模电网2848总线。值得注意的是，所提出的方法可以在4毫秒内检测到2848总线系统的网络攻击，这使其成为大型系统中实时检测网络攻击的良好候选者。
As a highly complex and integrated cyber-physical system, modern power grids are exposed to cyberattacks. False data injection attacks (FDIAs), specifically, represent a major class of cyber threats to smart grids by targeting the measurement data's integrity. Although various solutions have been proposed to detect those cyberattacks, the vast majority of the works have ignored the inherent graph structure of the power grid measurements and validated their detectors only for small test systems with less than a few hundred buses. To better exploit the spatial correlations of smart grid measurements, this paper proposes a deep learning model for cyberattack detection in large-scale AC power grids using Chebyshev Graph Convolutional Networks (CGCN). By reducing the complexity of spectral graph filters and making them localized, CGCN provides a fast and efficient convolution operation to model the graph structural smart grid data. We numerically verify that the proposed CGCN based detector surpasses the state-of-the-art model by 7.86% in detection rate and 9.67% in false alarm rate for a large-scale power grid with 2848 buses. It is notable that the proposed approach detects cyberattacks under 4 milliseconds for a 2848-bus system, which makes it a good candidate for real-time detection of cyberattacks in large systems.