Open AccessAdversarial attack and defense methods for neural network based state estimation in smart grid
Author(s) -
Tian Jiwei,
Wang Buhong,
Li Jing,
Konstantinou Charalambos
Publication year - 2021
Publication title -
iet renewable power generation
Language(s) - English
Resource type - Journals
SCImago Journal Rank - 1.005
H-Index - 76
eISSN - 1752-1424
pISSN - 1752-1416
DOI - 10.1049/rpg2.12334
Subject(s) - adversarial system , computer science , artificial neural network , smart grid , computer security , artificial intelligence , estimation , state (computer science) , grid , deep learning , machine learning , engineering , algorithm , mathematics , geometry , systems engineering , electrical engineering
Deep learning has been recently used in safety‐critical cyber‐physical systems (CPS) such as the smart grid. The security assessment of such learning‐based methods within CPS algorithms, however, is still an open problem. Despite existing research on adversarial attacks against deep learning models, only few works are concerned about safety‐critical energy CPS, especially the state estimation routine. This paper investigates security issues of neural network based state estimation in the smart grid. Specifically, the problem of adversarial attacks against neural network based state estimation is analysed and an efficient adversarial attack method is proposed. To thwart this attack, two defense methods based on protection and adversarial training, respectively, are proposed further. The experiments demonstrate that the proposed attack method poses a major threat to neural network based state estimation models. In addition, our results present that defense methods can improve the ability of neural network models to defend against such adversarial attacks.