{"title":"能源社区基于异常的隐私保护入侵检测研究","authors":"Zeeshan Afzal, Giovanni Gaggero, Mikael Asplund","doi":"10.1186/s42162-025-00565-x","DOIUrl":null,"url":null,"abstract":"<div><p>Energy communities consist of decentralized energy production, storage, consumption, and distribution and are gaining traction in modern power systems. However, these communities may increase the vulnerability of the grid to cyber threats. We propose an anomaly-based intrusion detection system to enhance the security of energy communities. The system leverages LSTM autoencoders to detect deviations from normal operational patterns in order to identify anomalies induced by attacks or faults. Operational data for training and evaluation are derived from a Simulink-based model of an energy community. The results show that the autoencoder-based intrusion detection system achieves good detection performance across multiple attack scenarios, up to 0.9270 and 0.9735 in precision and recall respectively. We also demonstrate potential for real-world application of the system by training a federated model that enables distributed intrusion detection while preserving data privacy.</p></div>","PeriodicalId":538,"journal":{"name":"Energy Informatics","volume":"8 1","pages":""},"PeriodicalIF":0.0000,"publicationDate":"2025-08-26","publicationTypes":"Journal Article","fieldsOfStudy":null,"isOpenAccess":false,"openAccessPdf":"https://energyinformatics.springeropen.com/counter/pdf/10.1186/s42162-025-00565-x","citationCount":"0","resultStr":"{\"title\":\"Towards privacy-preserving anomaly-based intrusion detection in energy communities\",\"authors\":\"Zeeshan Afzal, Giovanni Gaggero, Mikael Asplund\",\"doi\":\"10.1186/s42162-025-00565-x\",\"DOIUrl\":null,\"url\":null,\"abstract\":\"<div><p>Energy communities consist of decentralized energy production, storage, consumption, and distribution and are gaining traction in modern power systems. However, these communities may increase the vulnerability of the grid to cyber threats. We propose an anomaly-based intrusion detection system to enhance the security of energy communities. The system leverages LSTM autoencoders to detect deviations from normal operational patterns in order to identify anomalies induced by attacks or faults. Operational data for training and evaluation are derived from a Simulink-based model of an energy community. The results show that the autoencoder-based intrusion detection system achieves good detection performance across multiple attack scenarios, up to 0.9270 and 0.9735 in precision and recall respectively. We also demonstrate potential for real-world application of the system by training a federated model that enables distributed intrusion detection while preserving data privacy.</p></div>\",\"PeriodicalId\":538,\"journal\":{\"name\":\"Energy Informatics\",\"volume\":\"8 1\",\"pages\":\"\"},\"PeriodicalIF\":0.0000,\"publicationDate\":\"2025-08-26\",\"publicationTypes\":\"Journal Article\",\"fieldsOfStudy\":null,\"isOpenAccess\":false,\"openAccessPdf\":\"https://energyinformatics.springeropen.com/counter/pdf/10.1186/s42162-025-00565-x\",\"citationCount\":\"0\",\"resultStr\":null,\"platform\":\"Semanticscholar\",\"paperid\":null,\"PeriodicalName\":\"Energy Informatics\",\"FirstCategoryId\":\"1085\",\"ListUrlMain\":\"https://link.springer.com/article/10.1186/s42162-025-00565-x\",\"RegionNum\":0,\"RegionCategory\":null,\"ArticlePicture\":[],\"TitleCN\":null,\"AbstractTextCN\":null,\"PMCID\":null,\"EPubDate\":\"\",\"PubModel\":\"\",\"JCR\":\"Q2\",\"JCRName\":\"Energy\",\"Score\":null,\"Total\":0}","platform":"Semanticscholar","paperid":null,"PeriodicalName":"Energy Informatics","FirstCategoryId":"1085","ListUrlMain":"https://link.springer.com/article/10.1186/s42162-025-00565-x","RegionNum":0,"RegionCategory":null,"ArticlePicture":[],"TitleCN":null,"AbstractTextCN":null,"PMCID":null,"EPubDate":"","PubModel":"","JCR":"Q2","JCRName":"Energy","Score":null,"Total":0}
Towards privacy-preserving anomaly-based intrusion detection in energy communities
Energy communities consist of decentralized energy production, storage, consumption, and distribution and are gaining traction in modern power systems. However, these communities may increase the vulnerability of the grid to cyber threats. We propose an anomaly-based intrusion detection system to enhance the security of energy communities. The system leverages LSTM autoencoders to detect deviations from normal operational patterns in order to identify anomalies induced by attacks or faults. Operational data for training and evaluation are derived from a Simulink-based model of an energy community. The results show that the autoencoder-based intrusion detection system achieves good detection performance across multiple attack scenarios, up to 0.9270 and 0.9735 in precision and recall respectively. We also demonstrate potential for real-world application of the system by training a federated model that enables distributed intrusion detection while preserving data privacy.