Anomaly detection and classification in power system state estimation: Combining model-based and data-driven methods

• Published in: Sustainable Energy, Grids and Networks Grids and Networks, 2023-09, Vol.35, p.101116, Article 101116
• Main Authors: Asefi, Sajjad, Mitrovic, Mile, Ćetenović, Dragan, Levi, Victor, Gryazina, Elena, Terzija, Vladimir
• Format: Article
• Language: English
• Subjects: Cyber security; False data injection attack; Machine learning; State estimation; Sudden load change
• ISSN: 2352-4677; 2352-4677
• DOI: 10.1016/j.segan.2023.101116

Power system state estimation is being faced with different types of anomalies. These might include bad data caused by gross measurement errors or communication system failures. Sudden changes in load or generation can be considered as anomaly depending on the implemented state estimation method. Additionally, considering power grid as a cyber physical system, state estimation becomes vulnerable to false data injection attacks. The existing methods for anomaly classification cannot accurately classify (discriminate between) the above mentioned three types of anomalies, especially when it comes to discrimination between sudden load changes and false data injection attacks. This paper presents a new algorithm for detecting anomaly presence, classifying the anomaly type and identifying the origin of the anomaly, i.e., measurements that contain gross errors in case of bad data, or buses associated with loads experiencing a sudden change, or state variables targeted by false data injection attack. The algorithm combines analytical and machine learning (ML) approaches. The first stage exploits an analytical approach to detect anomaly presence by combining χ2-test and anomaly detection index. The second stage utilizes ML for classification of anomaly type and identification of its origin, with particular reference to discrimination between sudden load changes and false data injection attacks. The proposed ML based method is trained to be independent of the network configuration which eliminates retraining of the algorithm after network topology changes. The results obtained by implementing the proposed algorithm on IEEE 14 bus test system demonstrate the accuracy and effectiveness of the proposed algorithm.