Detecting smart meter false data attacks using hierarchical feature clustering and incentive weighted anomaly detection

Higgins, Martin and Stephen, Bruce and Wallom, David (2023) Detecting smart meter false data attacks using hierarchical feature clustering and incentive weighted anomaly detection. IET Cyber-Physical Systems: Theory & Applications, 8 (4). pp. 257-271. ISSN 2398-3396 (https://doi.org/10.1049/cps2.12057)

[thumbnail of Higgins-etal-IET-CPSTA-2023-Detecting-smart-meter-false-data-attacks-using-hierarchical-feature-clustering]
Preview
 Text. Filename: Higgins_etal_IET_CPSTA_2023_Detecting_smart_meter_false_data_attacks_using_hierarchical_feature_clustering.pdf
Final Published Version
License: Creative Commons Attribution 4.0 logo
Download (3MB)| Preview

Abstract

Spot pricing is often suggested as a method of increasing demand-side flexibility in electrical power load. However, few works have considered the vulnerability of spot pricing to financial fraud via false data injection (FDI) style attacks. The authors consider attacks which aim to alter the consumer load profile to exploit intraday price dips. The authors examine an anomaly detection protocol for cyber-attacks that seek to leverage spot prices for financial gain. In this way the authors outline a methodology for detecting attacks on industrial load smart meters. The authors first create a feature clustering model of the underlying business, segregated by business type. The authors then use these clusters to create an incentive-weighted anomaly detection protocol for false data attacks against load profiles. This clustering-based methodology incorporates both the load profile and spot pricing considerations for the detection of injected load profiles. To reduce false positives, the authors model incentive-based detection, which includes knowledge of spot prices, into the anomaly tracking, enabling the methodology to account for changes in the load profile which are unlikely to be attacks.

ORCID iDs

Higgins, Martin, Stephen, Bruce ORCID logoORCID: https://orcid.org/0000-0001-7502-8129 and Wallom, David;
CORE (COnnecting REpositories)