The Wisdom of the Crowd: High-Fidelity Classification of Cyber-Attacks and Faults in Power Systems Using Ensemble and Machine Learning

Fuente: arXiv
Gespeichert in:
Bibliographische Detailangaben
Hauptverfasser: Abukhousa, Emad, Afroz, Syed Sohail Feroz Syed, Alsaeed, Fahad, Qwbaiban, Abdulaziz, Zonouz, Saman, Meliopoulos, A. P. Sakis
Format: Preprint
Veröffentlicht: 2025
Schlagworte:
Online-Zugang:
Tags: Tag hinzufügen
Keine Tags, Fügen Sie den ersten Tag hinzu!
_version_ 1866916023589928960
author Abukhousa, Emad
Afroz, Syed Sohail Feroz Syed
Alsaeed, Fahad
Qwbaiban, Abdulaziz
Zonouz, Saman
Meliopoulos, A. P. Sakis
author_facet Abukhousa, Emad
Afroz, Syed Sohail Feroz Syed
Alsaeed, Fahad
Qwbaiban, Abdulaziz
Zonouz, Saman
Meliopoulos, A. P. Sakis
contents This paper presents a high-fidelity evaluation framework for machine learning (ML)-based classification of cyber-attacks and physical faults using electromagnetic transient simulations with digital substation emulation at 4.8 kHz. Twelve ML models, including ensemble algorithms and a multi-layer perceptron (MLP), were trained on labeled time-domain measurements and evaluated in a real-time streaming environment designed for sub-cycle responsiveness. The architecture incorporates a cycle-length smoothing filter and confidence threshold to stabilize decisions. Results show that while several models achieved near-perfect offline accuracies (up to 99.9%), only the MLP sustained robust coverage (98-99%) under streaming, whereas ensembles preserved perfect anomaly precision but abstained frequently (10-49% coverage). These findings demonstrate that offline accuracy alone is an unreliable indicator of field readiness and underscore the need for realistic testing and inference pipelines to ensure dependable classification in inverter-based resources (IBR)-rich networks.
format Preprint
id arxiv_https___arxiv_org_abs_2511_06714
institution arXiv
publishDate 2025
record_format arxiv
spellingShingle The Wisdom of the Crowd: High-Fidelity Classification of Cyber-Attacks and Faults in Power Systems Using Ensemble and Machine Learning
Abukhousa, Emad
Afroz, Syed Sohail Feroz Syed
Alsaeed, Fahad
Qwbaiban, Abdulaziz
Zonouz, Saman
Meliopoulos, A. P. Sakis
Systems and Control
Machine Learning
This paper presents a high-fidelity evaluation framework for machine learning (ML)-based classification of cyber-attacks and physical faults using electromagnetic transient simulations with digital substation emulation at 4.8 kHz. Twelve ML models, including ensemble algorithms and a multi-layer perceptron (MLP), were trained on labeled time-domain measurements and evaluated in a real-time streaming environment designed for sub-cycle responsiveness. The architecture incorporates a cycle-length smoothing filter and confidence threshold to stabilize decisions. Results show that while several models achieved near-perfect offline accuracies (up to 99.9%), only the MLP sustained robust coverage (98-99%) under streaming, whereas ensembles preserved perfect anomaly precision but abstained frequently (10-49% coverage). These findings demonstrate that offline accuracy alone is an unreliable indicator of field readiness and underscore the need for realistic testing and inference pipelines to ensure dependable classification in inverter-based resources (IBR)-rich networks.
title The Wisdom of the Crowd: High-Fidelity Classification of Cyber-Attacks and Faults in Power Systems Using Ensemble and Machine Learning
topic Systems and Control
Machine Learning
url https://arxiv.org/abs/2511.06714