Dynamic load altering attack detection in cyber physical power system based on improved Kalman/H∞ co-filtering.
Jian Li1, Yunfeng Wang1, He Ren2
1School of Automation Engineering, Northeast Electric Power University, 132012, Jilin, China.
ISA Transactions
|October 8, 2025
Summary
This study introduces a new detection scheme for Dynamic Load Altering Attacks (DLAA) in Cyber Physical Power Systems (CPPSs). The proposed method enhances state estimation accuracy and improves attack detection against cyberattacks and noise disturbances.
Area of Science:
- Cyber Physical Power Systems (CPPSs)
- Control Systems Engineering
- Network Security
Background:
- Cyber Physical Power Systems (CPPSs) are vulnerable to Dynamic Load Altering Attacks (DLAA).
- Accurate state estimation and robust attack detection are crucial for CPPSs' stability and security.
- Existing methods struggle with unknown-statistics noise and non-Gaussian disturbances.
Purpose of the Study:
- To propose an advanced attack detection scheme for closed-loop DLAA in CPPSs.
- To enhance the accuracy of state estimation and attack detection capabilities.
- To address challenges posed by DLAA and noise disturbances in CPPSs.
Main Methods:
- Developed a discrete-time CPPS model incorporating DLAA and unknown-statistics noise.
- Proposed an improved Kalman/H∞ co-filter for state estimation, utilizing MFAKF for Gaussian noise and H∞ filter for non-Gaussian disturbances.
- Designed a cosine similarity matching algorithm for anomaly detection based on state estimation deviations.
Main Results:
- The proposed MFAKF-HF significantly reduced RMSE by 75% compared to MFAKF and 62% compared to H∞ filtering for state ω1 in the IEEE 3-machine 6-bus system.
- Demonstrated improved accuracy in state estimation under DLAA and noise conditions.
- Validated the robustness and effectiveness of the integrated estimation and detection scheme.
Conclusions:
- The developed scheme offers superior performance in state estimation and DLAA detection within CPPSs.
- The combination of MFAKF and H∞ filtering effectively handles diverse noise characteristics.
- The cosine similarity matching provides a reliable method for identifying cyberattacks in power systems.
Related Concept Videos
Fast Decoupled and DC Powerflow
726
The fast decoupled power flow method addresses contingencies in power system operations, such as generator outages or transmission line failures. This method provides quick power flow solutions, essential for real-time system adjustments. Fast decoupled power flow algorithms simplify the Jacobian matrix by neglecting certain elements, leading to two sets of decoupled equations:
726
Load-frequency control
620
Load-frequency control (LFC) is vital for maintaining power system stability, ensuring that frequency and power flows remain within acceptable limits during load changes. Turbine-governor control eliminates rotor accelerations and decelerations following load changes. However, a steady-state frequency error persists when the change in the turbine-governor reference setting is zero. In an interconnected power system, each area agrees to export or import a scheduled amount of power through...
620
Multimachine Stability
544
Multimachine stability analysis is crucial for understanding the dynamics and stability of power systems with multiple synchronous machines. The objective is to solve the swing equations for a network of M machines connected to an N-bus power system.
In analyzing the system, the nodal equations represent the relationship between bus voltages, machine voltages, and machine currents. The nodal equation is given by:
In analyzing the system, the nodal equations represent the relationship between bus voltages, machine voltages, and machine currents. The nodal equation is given by:
544
Distributed Loads: Problem Solving
1.1K
Beams are structural elements commonly employed in engineering applications requiring different load-carrying capacities. The first step in analyzing a beam under a distributed load is to simplify the problem by dividing the load into smaller regions, which allows one to consider each region separately and calculate the magnitude of the equivalent resultant load acting on each portion of the beam. The magnitude of the equivalent resultant load for each region can be determined by calculating...
1.1K
The Power Flow Problem and Solution
836
Power flow problem analysis is fundamental for determining real and reactive power flows in network components, such as transmission lines, transformers, and loads. The power system's single-line diagram provides data on the bus, transmission line, and transformer. Each bus k in the system is characterized by four key variables: voltage magnitude Vk, phase angle δk, real power Pk, and reactive power Qk. Two of these four variables are inputs, while the power flow program computes...
836
Feedback control systems
685
Feedback control systems are categorized in various ways based on their design, analysis, and signal types.
Linear feedback systems are theoretical models that simplify analysis and design. These systems operate under the principle that their output is directly proportional to their input within certain ranges. For instance, an amplifier in a control system behaves linearly as long as the input signal remains within a specific range. However, most physical systems exhibit inherent nonlinearity...
Linear feedback systems are theoretical models that simplify analysis and design. These systems operate under the principle that their output is directly proportional to their input within certain ranges. For instance, an amplifier in a control system behaves linearly as long as the input signal remains within a specific range. However, most physical systems exhibit inherent nonlinearity...
685

