Machine Learning to detect cyber-attacks and discriminating the types of power system disturbances

TL;DR

This paper presents a machine learning-based model for detecting cyber-attacks and classifying power system disturbances in smart grids, utilizing PMU data to improve security and operational decision-making.

Contribution

It introduces a novel approach combining multiple ML models with PMU data for effective attack detection and disturbance classification in power systems.

Findings

Random Forest achieved 90.56% accuracy in detection

Model effectively discriminates between attack types and disturbances

Supports operator decision-making in smart grid security

Abstract

This research proposes a machine learning-based attack detection model for power systems, specifically targeting smart grids. By utilizing data and logs collected from Phasor Measuring Devices (PMUs), the model aims to learn system behaviors and effectively identify potential security boundaries. The proposed approach involves crucial stages including dataset pre-processing, feature selection, model creation, and evaluation. To validate our approach, we used a dataset used, consist of 15 separate datasets obtained from different PMUs, relay snort alarms and logs. Three machine learning models: Random Forest, Logistic Regression, and K-Nearest Neighbour were built and evaluated using various performance metrics. The findings indicate that the Random Forest model achieves the highest performance with an accuracy of 90.56% in detecting power system disturbances and has the potential in assisting operators in decision-making processes.