Search

Digital substations have adopted a high amount of information and communication technology (ICT) and cyber–physical systems (CPSs) for monitoring and control. As a result, cyber attacks on substations have been increasing and have become a major concern. An intrusion-detection system (IDS) could be a solution to detect and identify the abnormal behaviors of hackers. In this paper, a Deep Neural Network (DNN)-based IDS is proposed to detect malicious generic object-oriented substation event (GOOSE) communication over the process and station bus network, followed by the multiclassification of the cyber attacks. For training, both the abnormal and the normal substation networks are monitored, captured, and logged, and then the proposed algorithm is applied for distinguishing normal events from abnormal ones within the network communication packets. The designed system is implemented and tested with a real-time IEC 61850 GOOSE message dataset using two different approaches. The experimental results show that the proposed system can successfully detect intrusions with an accuracy of 98%. In addition, a comparison is performed in which the proposed IDS outperforms the support vector machine (SVM)-based IDS.

The identification of fault types and their locations is crucial for power system protection/operation when a fault occurs in the lines. In general, this involves a human-in-the-loop analysis to capture the transient voltage and current signals using a common format for transient data exchange for power systems (COMTRADE) file. Then, protection engineers can identify the fault types and the line locations after the incident. This paper proposes intelligent and novel methods of faulty line and location detection based on convolutional neural networks in the power system. The three-phase fault information contained in the COMTRADE file is converted to an image file and extracted adaptively by the proposed CNN, which is trained by a large number of images under various kinds of fault conditions and factors. A 500 kV power system is simulated to generate different types of electromagnetic fault transients. The test results show that the proposed CNN-based analyzer can classify the fault types and locations under various conditions and reduce the fault analysis efforts.