Hasnain Ahmad, Ghulam Mustafa, Muhammad Majid Gulzar, Ijaz Ahmed, Muhammad Khalid
{"title":"Ai-enabled framework for anomaly detection in power distribution networks under false data injection attacks","authors":"Hasnain Ahmad, Ghulam Mustafa, Muhammad Majid Gulzar, Ijaz Ahmed, Muhammad Khalid","doi":"10.1007/s10462-025-11318-3","DOIUrl":null,"url":null,"abstract":"<div><p>Modern power distribution networks are becoming cyber physical systems due to the addition of more advanced metering infrastructure (AMI). This has introduced new vulnerabilities to cyber threats, particularly false data injection (FDI) attacks. These attacks compromise the integrity of power consumption data, leading to financial losses, operational inefficiencies, and grid instability. Rule-based techniques and traditional machine learning models are two examples of traditional anomaly detection methods that often have problems. Often, these methods generate an excessive number of false alarms, struggle to adapt to new attack patterns, and perform poorly in large-scale deployments. This research suggests a robust anomaly identification framework (AIF) that uses an autoencoder (AE) for feature transformation and a multi-layer perceptron (MLP) to identify anomalies in AMI integrated with smart grids. The proposed approach first applies synthetic features extraction inspired by real-world smart meter capabilities and transforms the dataset using a denoising AE. MLP assisted in the classification to detect multiple FDI attack types with improved accuracy and reliability. Numerous experiments have been performed, and the results indicate that the suggested method works better than popular methods like correlation analysis, techniques based on clustering, and standard outlier identification algorithms. Compared to baseline methods, the proposed technique improves detection accuracy by up to approximately 25%, reduces false positives, and enhances the system’s ability to generalize across different cyberattack strategies. The proposed work computes seven different types of criterion matrices to verify the effectiveness of finding anomalies. The overall average results include mean squared error (0.0793), accuracy (92%), F1-Score (92%), recall (91%), specificity (94%), area under the curve (97%), and mean average precision (96%). These findings accentuate the potential of the proposed AIF performance in fortifying smart grid cybersecurity.</p></div>","PeriodicalId":8449,"journal":{"name":"Artificial Intelligence Review","volume":"58 11","pages":""},"PeriodicalIF":13.9000,"publicationDate":"2025-08-27","publicationTypes":"Journal Article","fieldsOfStudy":null,"isOpenAccess":false,"openAccessPdf":"https://link.springer.com/content/pdf/10.1007/s10462-025-11318-3.pdf","citationCount":"0","resultStr":null,"platform":"Semanticscholar","paperid":null,"PeriodicalName":"Artificial Intelligence Review","FirstCategoryId":"94","ListUrlMain":"https://link.springer.com/article/10.1007/s10462-025-11318-3","RegionNum":2,"RegionCategory":"计算机科学","ArticlePicture":[],"TitleCN":null,"AbstractTextCN":null,"PMCID":null,"EPubDate":"","PubModel":"","JCR":"Q1","JCRName":"COMPUTER SCIENCE, ARTIFICIAL INTELLIGENCE","Score":null,"Total":0}
引用次数: 0
Abstract
Modern power distribution networks are becoming cyber physical systems due to the addition of more advanced metering infrastructure (AMI). This has introduced new vulnerabilities to cyber threats, particularly false data injection (FDI) attacks. These attacks compromise the integrity of power consumption data, leading to financial losses, operational inefficiencies, and grid instability. Rule-based techniques and traditional machine learning models are two examples of traditional anomaly detection methods that often have problems. Often, these methods generate an excessive number of false alarms, struggle to adapt to new attack patterns, and perform poorly in large-scale deployments. This research suggests a robust anomaly identification framework (AIF) that uses an autoencoder (AE) for feature transformation and a multi-layer perceptron (MLP) to identify anomalies in AMI integrated with smart grids. The proposed approach first applies synthetic features extraction inspired by real-world smart meter capabilities and transforms the dataset using a denoising AE. MLP assisted in the classification to detect multiple FDI attack types with improved accuracy and reliability. Numerous experiments have been performed, and the results indicate that the suggested method works better than popular methods like correlation analysis, techniques based on clustering, and standard outlier identification algorithms. Compared to baseline methods, the proposed technique improves detection accuracy by up to approximately 25%, reduces false positives, and enhances the system’s ability to generalize across different cyberattack strategies. The proposed work computes seven different types of criterion matrices to verify the effectiveness of finding anomalies. The overall average results include mean squared error (0.0793), accuracy (92%), F1-Score (92%), recall (91%), specificity (94%), area under the curve (97%), and mean average precision (96%). These findings accentuate the potential of the proposed AIF performance in fortifying smart grid cybersecurity.
期刊介绍:
Artificial Intelligence Review, a fully open access journal, publishes cutting-edge research in artificial intelligence and cognitive science. It features critical evaluations of applications, techniques, and algorithms, providing a platform for both researchers and application developers. The journal includes refereed survey and tutorial articles, along with reviews and commentary on significant developments in the field.