论文标题
检测AMI净计数系统中的错误阅读攻击
Detection of False-Reading Attacks in the AMI Net-Metering System
论文作者
论文摘要
在智能电网中,恶意客户可能会损害其智能电表(SMS)以报告虚假读数以非法实现财务收益。报告虚假读数不仅会给公用事业带来巨大的财务损失,而且可能会降低网格性能,因为报告的读数用于能源管理。本文是在净计数系统中研究此问题的第一项工作,其中一种SM用于报告消耗的功率与生成的功率之间的差异。首先,我们通过处理实际功耗和生成数据集来为净计数系统准备良性数据集。然后,我们提出了一套针对网络计量系统量身定制的攻击,以创建恶意数据集。之后,我们分析了数据,并发现净表读数与读数之间的相关性与从太阳辐照度和温度等值得信赖的来源获得的相关数据之间的相关性。基于数据分析,我们提出了一个一般的多DATA源深度混合学习检测器,以识别错误阅读攻击。除了来自值得信赖的资源的数据外,我们的探测器对所有客户的净表读数进行了培训,以通过学习之间的相关性来增强检测器性能。这里的理由是,尽管攻击者可以报告错误的读数,但他不能操纵太阳辐照度和温度值,因为它们无法控制。已经进行了广泛的实验,结果表明我们的检测器可以识别出高检测率和低误报的错误阅读攻击。
In smart grid, malicious customers may compromise their smart meters (SMs) to report false readings to achieve financial gains illegally. Reporting false readings not only causes hefty financial losses to the utility but may also degrade the grid performance because the reported readings are used for energy management. This paper is the first work that investigates this problem in the net-metering system, in which one SM is used to report the difference between the power consumed and the power generated. First, we prepare a benign dataset for the net-metering system by processing a real power consumption and generation dataset. Then, we propose a new set of attacks tailored for the net-metering system to create malicious dataset. After that, we analyze the data and we found time correlations between the net meter readings and correlations between the readings and relevant data obtained from trustworthy sources such as the solar irradiance and temperature. Based on the data analysis, we propose a general multi-data-source deep hybrid learning-based detector to identify the false-reading attacks. Our detector is trained on net meter readings of all customers besides data from the trustworthy sources to enhance the detector performance by learning the correlations between them. The rationale here is that although an attacker can report false readings, he cannot manipulate the solar irradiance and temperature values because they are beyond his control. Extensive experiments have been conducted, and the results indicate that our detector can identify the false-reading attacks with high detection rate and low false alarm.