Data-driven Detection of Stealth Cyber-attacks in DC Microgrids

Abdulrahman Takiddin*, Suman Rath, Muhammad Ismail, Subham Sahoo

*Corresponding author for this work

Research output: Contribution to journalJournal articleResearchpeer-review

117 Downloads (Pure)


Cyber-physical systems such as microgrids contain numerous attack surfaces in communication links, sensors, and actuators forms. Manipulating the communication links and sensors is done to inject anomalous data that can be transmitted through the cyber layer along with the original data stream. The presence of malicious, anomalous data packets in the cyber layer of a dc microgrid can create hindrances in fulfilling the control objectives, leading to voltage instability and affecting load dispatch patterns. Hence, detecting anomalous data is essential for the restoration of system stability. This article answers two important research questions: 1) Which data-driven detection scheme offers the best detection performance against stealth cyber-attacks in dc microgrids? 2) What is the detection performance improvement when fusing two features (i.e., current and voltage data) for training compared with using a single feature (i.e., current)? Our investigations revealed that 1) adopting an unsupervised deep recurrent autoencoder anomaly detection scheme in dc microgrids offers superior detection performance compared with other benchmarks. The autoencoder is trained on benign data generated from a multisource dc microgrid model. 2) Fusing current and voltage data for training offers a 14.7% improvement. The efficacy of the results is verified using experimental data collected from a dc microgrid testbed when subjected to stealth cyber-attacks.

Original languageEnglish
JournalI E E E Systems Journal
Pages (from-to)1-10
Number of pages10
Publication statusAccepted/In press - 11 Jun 2022


  • Power Electronics
  • Power electronics control
  • Cybersecurity
  • Microgrids
  • Artificial intelligence
  • Machine Learning
  • Anomaly detection
  • LSTM
  • Encoder
  • DC microgrids
  • cybersecurity
  • Voltage control
  • Training
  • Distributed databases
  • long short-term memory (LSTM)-autoencoder
  • Detectors
  • Feature extraction
  • dc microgrids


Dive into the research topics of 'Data-driven Detection of Stealth Cyber-attacks in DC Microgrids'. Together they form a unique fingerprint.

Cite this