The DOI matches its Crossref record; 29 of the 29 references it cites were found in a registry or an index.
Classification of Disturbances and Cyber-Attacks in Power Systems Using Heterogeneous Time-Synchronized Data
Abstract
Visualization and situational awareness are of vital importance for power systems, as the earlier a power-system event such as a transmission line fault or cyber-attack is identified, the quicker operators can react to avoid unnecessary loss. Accurate time-synchronized data, such as system measurements and device status, provide benefits for system state monitoring. However, the time-domain analysis of such heterogeneous data to extract patterns is difficult due to the existence of transient phenomena in the analyzed measurement waveforms. This paper proposes a sequential pattern mining approach to accurately extract patterns of power-system disturbances and cyber-attacks from heterogeneous time-synchronized data, including synchrophasor measurements, relay logs, and network event monitor logs. The term common path is introduced. A common path is a sequence of critical system states in temporal order that represent individual types of disturbances and cyber-attacks. Common paths are unique signatures for each observed event type. They can be compared to observed system states for classification. In this paper, the process of automatically discovering common paths from labeled data logs is introduced. An included case study uses the common path-mining algorithm to learn common paths from a fusion of heterogeneous synchrophasor data and system logs for three types of disturbances (in terms of faults) and three types of cyber-attacks, which are similar to or mimic faults. The case study demonstrates the algorithm's effectiveness at identifying unique paths for each type of event and the accompanying classifier's ability to accurately discern each type of event.
Overview
Integrity signals
Registry
Cites
Statistics
Verification
Claims the paper makes
Claims other papers make about this one
Each is checked against this paper’s own text: does it say what the citing paper says it does?
In the citing paper
“First, many approaches explicitly synchronize cyber-layer events with physical-layer behavior on a common time axis to detect cyber-physical inconsistencies that single-domain detectors would miss [122-129].”
From AI-Based Anomaly Detection in Industrial Control and Cyber–Physical Systems: A Data-Type-Oriented Systematic Review (2025) · cites this paper as [125]
Citations
Cites
Data mining: concepts and techniques
Sharma, R., Shah, K., Shirahatti, Y., Patel, S., Sharma, R., Shah, K., Patel, S., Sharma, R., & Han, J. (2012) · Choice Reviews Online · doi:10.5860/choice.49-3305 · Cited by 28,665
Agrawal, R., & Srikant, R. (2002) · IEEE International Conference on Data Engineering (ICDE) · doi:10.1109/icde.1995.380415 · Cited by 5,150
Mining Frequent Patterns without Candidate Generation: A Frequent-Pattern Tree Approach
Han, J., Pei, J., Yin, Y., & Mao, R. (2003) · Data Mining and Knowledge Discovery · doi:10.1023/b:dami.0000005258.31418.83 · Cited by 2,656
Wide-Area Monitoring, Protection, and Control of Future Electric Power Networks
Terzija, V. V., Valverde, G., Cai, D., Regulski, P., Madani, V., Fitch, J., Skok, S., Begovic, M. M., & PHADKE, A. G. (2010) · Proceedings of the IEEE · doi:10.1109/jproc.2010.2060450 · Cited by 769
Smart Transmission Grid Applications and Their Supporting Infrastructure
Bose, A. (2010) · IEEE Transactions on Smart Grid · doi:10.1109/tsg.2010.2044899 · Cited by 474
Analysis of faulted power systems,
Magnusson, P. C. (1974) · Journal of the Franklin Institute · doi:10.1016/0016-0032(74)90099-4 · Cited by 413
Fault Detection and Classification in Transmission Lines Based on Wavelet Transform and ANN
Silva, K. M., Souza, B. A., & Brito, N. S. D. (2006) · IEEE Transactions on Power Delivery · doi:10.1109/tpwrd.2006.876659 · Cited by 413
Machine learning for power system disturbance and cyber-attack discrimination
Hink, R. B., Beaver, J. M., Buckner, M. A., Morris, T., Adhikari, U., & Pan, S. (2014) · International Symposium on Resilient Control Systems (ISRCS) · doi:10.1109/isrcs.2014.6900095 · Cited by 336
Self-citationLi, W., Monti, A., & Ponci, F. (2014) · IEEE Transactions on Instrumentation and Measurement · doi:10.1109/tim.2014.2313035 · Cited by 293
A Multidimensional Critical State Analysis for Detecting Intrusions in SCADA Systems
Carcano, A., Coletta, A., Guglielmi, M., Masera, M., Nai Fovino, I., & Trombetta, A. (2011) · IEEE Transactions on Industrial Informatics · doi:10.1109/tii.2010.2099234 · Cited by 259
Research works printed but not linked: 3
- saadat, 2010, Power System Analysis
- ferrer, 2010, Modern Solutions for Protection Control and Monitoring of Electric Power Systems, 57
- polzin, 2012, Arizona Southern California Outage on September 8 2011
Cited by
Sorted by citations
Deep learning for cyber security intrusion detection: Approaches, datasets, and comparative study
Ferrag, M. A., Maglaras, L. A., Moschoyiannis, S., & Janicke, H. (2019) · Journal of Information Security and Applications · doi:10.1016/j.jisa.2019.102419 · Cited by 1,386
A Survey on the Detection Algorithms for False Data Injection Attacks in Smart Grids
Musleh, A. S., Chen, G., & Dong, Z. Y. (2019) · IEEE Transactions on Smart Grid · doi:10.1109/tsg.2019.2949998 · Cited by 729
DeepCoin: A Novel Deep Learning and Blockchain-Based Energy Exchange Framework for Smart Grids
Ferrag, M. A., & Maglaras, L. (2020) · IEEE Transactions on Engineering Management · doi:10.1109/tem.2019.2922936 · Cited by 358
Distributed Control and Communication Strategies in Networked Microgrids
Zhou, Q., Shahidehpour, M., Paaso, E. A., Bahramirad, S., Alabdulwahab, A., & Abusorrah, A. M. (2020) · IEEE Communications Surveys & Tutorials · doi:10.1109/comst.2020.3023963 · Cited by 313
A Survey on Industrial Control System Testbeds and Datasets for Security Research
Conti, M., Donadel, D., & Turrin, F. (2021) · IEEE Communications Surveys & Tutorials · doi:10.1109/comst.2021.3094360 · Cited by 284
Metadata
- Authors
- Pan, S., Morris, T., & Adhikari, U.
- Affiliations
- Mississippi State University (US)
- Venue
- IEEE Transactions on Industrial Informatics
- Published
- 2015-06
- Volume
- 11
- Issue
- 3
- Pages
- 650-662
- ISSN
- 1551-3203 (ISSN-L)
- 1941-0050
- OpenAlex
- W2020524857
- Cited by
- 180
- References
- 29
- Citations by year
- 2026: 19 · 2025: 16 · 2024: 17 · 2023: 30 · 2022: 17 · 2021: 16 · 2020: 17 · 2019: 19 · 2018: 7 · 2017: 16 · 2016: 4 · 2015: 2
- FWCI
- 4.66
- Type
- journal article
- Language
- en
- Open access
- closed
- Locations
- IEEE Transactions on Industrial Informatics (publishedVersion)
- Funders
- Division of Undergraduate Education (1315726)
- Topics
- Physical Sciences › Engineering › Electrical and Electronic Engineering › Power System Optimization and Stability
- Physical Sciences › Engineering › Control and Systems Engineering › Smart Grid Security and Resilience
- Physical Sciences › Engineering › Control and Systems Engineering › Power Systems Fault Detection
- Keywords
- cyberattack detection, sequential pattern mining, synchrophasor measurements, fault classification, situational awareness
About these checks
Registry, retraction, Cites and statistics results are computed, not judged, with one exception: a printed reference that no index lists is read once by a model before it counts as a citation error. Claims are extracted by a model and kept only when their quote appears verbatim in the text; each cited source is then checked, with a model’s help, for whether it says what the claim relies on. Those verdicts can be wrong — read the claim’s quote and the cited source before relying on one.
Statistics and arithmetic are recomputed, not judged.
Confidence bands are shown only for fields calibrated on our annotated test set. None is calibrated yet, so no band is shown.
What counts as a claim ›How we measure confidence ›How we check this ›
Are you an author, or do you see a problem with this page? Request a review
