{"id":"https://openalex.org/W7127575612","doi":"https://doi.org/10.1109/ccnc65079.2026.11366309","title":"Cyber-Physical Windowed Feature Learning for Unsupervised Anomaly Detection in Smart Grid Substations","display_name":"Cyber-Physical Windowed Feature Learning for Unsupervised Anomaly Detection in Smart Grid Substations","publication_year":2026,"publication_date":"2026-01-09","ids":{"openalex":"https://openalex.org/W7127575612","doi":"https://doi.org/10.1109/ccnc65079.2026.11366309"},"language":null,"primary_location":{"id":"doi:10.1109/ccnc65079.2026.11366309","is_oa":false,"landing_page_url":"https://doi.org/10.1109/ccnc65079.2026.11366309","pdf_url":null,"source":null,"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"2026 IEEE 23rd Consumer Communications & Networking Conference (CCNC)","raw_type":"proceedings-article"},"type":"article","indexed_in":["crossref"],"open_access":{"is_oa":false,"oa_status":"closed","oa_url":null,"any_repository_has_fulltext":false},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5125067400","display_name":"Momodou Lamin Barrow","orcid":null},"institutions":[{"id":"https://openalex.org/I87208437","display_name":"University of Tulsa","ror":"https://ror.org/04wn28048","country_code":"US","type":"education","lineage":["https://openalex.org/I87208437"]}],"countries":["US"],"is_corresponding":true,"raw_author_name":"Momodou Lamin Barrow","raw_affiliation_strings":["The University of Tulsa,School of Electrical and Computer Science, Tandy School of Computer Science,Tulsa,Oklahoma,USA"],"affiliations":[{"raw_affiliation_string":"The University of Tulsa,School of Electrical and Computer Science, Tandy School of Computer Science,Tulsa,Oklahoma,USA","institution_ids":["https://openalex.org/I87208437"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5125065947","display_name":"Arafat Asim","orcid":null},"institutions":[{"id":"https://openalex.org/I87208437","display_name":"University of Tulsa","ror":"https://ror.org/04wn28048","country_code":"US","type":"education","lineage":["https://openalex.org/I87208437"]}],"countries":["US"],"is_corresponding":false,"raw_author_name":"Arafat Asim","raw_affiliation_strings":["The University of Tulsa,School of Electrical and Computer Science, Tandy School of Computer Science,Tulsa,Oklahoma,USA"],"affiliations":[{"raw_affiliation_string":"The University of Tulsa,School of Electrical and Computer Science, Tandy School of Computer Science,Tulsa,Oklahoma,USA","institution_ids":["https://openalex.org/I87208437"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5108339847","display_name":"Alex Howe","orcid":"https://orcid.org/0009-0007-4673-0905"},"institutions":[{"id":"https://openalex.org/I87208437","display_name":"University of Tulsa","ror":"https://ror.org/04wn28048","country_code":"US","type":"education","lineage":["https://openalex.org/I87208437"]}],"countries":["US"],"is_corresponding":false,"raw_author_name":"Alex Howe","raw_affiliation_strings":["The University of Tulsa,School of Electrical and Computer Science, Tandy School of Computer Science,Tulsa,Oklahoma,USA"],"affiliations":[{"raw_affiliation_string":"The University of Tulsa,School of Electrical and Computer Science, Tandy School of Computer Science,Tulsa,Oklahoma,USA","institution_ids":["https://openalex.org/I87208437"]}]},{"author_position":"last","author":{"id":"https://openalex.org/A5022613150","display_name":"Mauricio Papa","orcid":"https://orcid.org/0009-0000-5628-0548"},"institutions":[{"id":"https://openalex.org/I87208437","display_name":"University of Tulsa","ror":"https://ror.org/04wn28048","country_code":"US","type":"education","lineage":["https://openalex.org/I87208437"]}],"countries":["US"],"is_corresponding":false,"raw_author_name":"Mauricio Papa","raw_affiliation_strings":["The University of Tulsa,School of Electrical and Computer Science, Tandy School of Computer Science,Tulsa,Oklahoma,USA"],"affiliations":[{"raw_affiliation_string":"The University of Tulsa,School of Electrical and Computer Science, Tandy School of Computer Science,Tulsa,Oklahoma,USA","institution_ids":["https://openalex.org/I87208437"]}]}],"institutions":[],"countries_distinct_count":1,"institutions_distinct_count":4,"corresponding_author_ids":["https://openalex.org/A5125067400"],"corresponding_institution_ids":["https://openalex.org/I87208437"],"apc_list":null,"apc_paid":null,"fwci":0.0,"has_fulltext":false,"cited_by_count":0,"citation_normalized_percentile":{"value":0.58791276,"is_in_top_1_percent":false,"is_in_top_10_percent":false},"cited_by_percentile_year":null,"biblio":{"volume":null,"issue":null,"first_page":"1","last_page":"6"},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T10917","display_name":"Smart Grid Security and Resilience","score":0.5214999914169312,"subfield":{"id":"https://openalex.org/subfields/2207","display_name":"Control and Systems Engineering"},"field":{"id":"https://openalex.org/fields/22","display_name":"Engineering"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T10917","display_name":"Smart Grid Security and Resilience","score":0.5214999914169312,"subfield":{"id":"https://openalex.org/subfields/2207","display_name":"Control and Systems Engineering"},"field":{"id":"https://openalex.org/fields/22","display_name":"Engineering"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T11512","display_name":"Anomaly Detection Techniques and Applications","score":0.24629999697208405,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T13429","display_name":"Electricity Theft Detection Techniques","score":0.09359999746084213,"subfield":{"id":"https://openalex.org/subfields/2208","display_name":"Electrical and Electronic Engineering"},"field":{"id":"https://openalex.org/fields/22","display_name":"Engineering"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/anomaly-detection","display_name":"Anomaly detection","score":0.7271000146865845},{"id":"https://openalex.org/keywords/constant-false-alarm-rate","display_name":"Constant false alarm rate","score":0.5825999975204468},{"id":"https://openalex.org/keywords/sliding-window-protocol","display_name":"Sliding window protocol","score":0.566100001335144},{"id":"https://openalex.org/keywords/granularity","display_name":"Granularity","score":0.5595999956130981},{"id":"https://openalex.org/keywords/sensitivity","display_name":"Sensitivity (control systems)","score":0.45320001244544983},{"id":"https://openalex.org/keywords/fault-detection-and-isolation","display_name":"Fault detection and isolation","score":0.4456999897956848},{"id":"https://openalex.org/keywords/feature-extraction","display_name":"Feature extraction","score":0.3968999981880188},{"id":"https://openalex.org/keywords/pattern-recognition","display_name":"Pattern recognition (psychology)","score":0.39089998602867126},{"id":"https://openalex.org/keywords/unsupervised-learning","display_name":"Unsupervised learning","score":0.3815999925136566}],"concepts":[{"id":"https://openalex.org/C739882","wikidata":"https://www.wikidata.org/wiki/Q3560506","display_name":"Anomaly detection","level":2,"score":0.7271000146865845},{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.6055999994277954},{"id":"https://openalex.org/C77052588","wikidata":"https://www.wikidata.org/wiki/Q644307","display_name":"Constant false alarm rate","level":2,"score":0.5825999975204468},{"id":"https://openalex.org/C102392041","wikidata":"https://www.wikidata.org/wiki/Q592860","display_name":"Sliding window protocol","level":3,"score":0.566100001335144},{"id":"https://openalex.org/C177774035","wikidata":"https://www.wikidata.org/wiki/Q1246948","display_name":"Granularity","level":2,"score":0.5595999956130981},{"id":"https://openalex.org/C79403827","wikidata":"https://www.wikidata.org/wiki/Q3988","display_name":"Real-time computing","level":1,"score":0.46939998865127563},{"id":"https://openalex.org/C21200559","wikidata":"https://www.wikidata.org/wiki/Q7451068","display_name":"Sensitivity (control systems)","level":2,"score":0.45320001244544983},{"id":"https://openalex.org/C152745839","wikidata":"https://www.wikidata.org/wiki/Q5438153","display_name":"Fault detection and isolation","level":3,"score":0.4456999897956848},{"id":"https://openalex.org/C154945302","wikidata":"https://www.wikidata.org/wiki/Q11660","display_name":"Artificial intelligence","level":1,"score":0.43290001153945923},{"id":"https://openalex.org/C52622490","wikidata":"https://www.wikidata.org/wiki/Q1026626","display_name":"Feature extraction","level":2,"score":0.3968999981880188},{"id":"https://openalex.org/C124101348","wikidata":"https://www.wikidata.org/wiki/Q172491","display_name":"Data mining","level":1,"score":0.39340001344680786},{"id":"https://openalex.org/C153180895","wikidata":"https://www.wikidata.org/wiki/Q7148389","display_name":"Pattern recognition (psychology)","level":2,"score":0.39089998602867126},{"id":"https://openalex.org/C8038995","wikidata":"https://www.wikidata.org/wiki/Q1152135","display_name":"Unsupervised learning","level":2,"score":0.3815999925136566},{"id":"https://openalex.org/C10558101","wikidata":"https://www.wikidata.org/wiki/Q689855","display_name":"Smart grid","level":2,"score":0.3779999911785126},{"id":"https://openalex.org/C2776401178","wikidata":"https://www.wikidata.org/wiki/Q12050496","display_name":"Feature (linguistics)","level":2,"score":0.3725999891757965},{"id":"https://openalex.org/C12997251","wikidata":"https://www.wikidata.org/wiki/Q567560","display_name":"Anomaly (physics)","level":2,"score":0.36730000376701355},{"id":"https://openalex.org/C79337645","wikidata":"https://www.wikidata.org/wiki/Q779824","display_name":"Outlier","level":2,"score":0.3621000051498413},{"id":"https://openalex.org/C169029474","wikidata":"https://www.wikidata.org/wiki/Q387942","display_name":"Local outlier factor","level":3,"score":0.3483999967575073},{"id":"https://openalex.org/C65155139","wikidata":"https://www.wikidata.org/wiki/Q5380912","display_name":"Envelope (radar)","level":3,"score":0.34209999442100525},{"id":"https://openalex.org/C127413603","wikidata":"https://www.wikidata.org/wiki/Q11023","display_name":"Engineering","level":0,"score":0.33320000767707825},{"id":"https://openalex.org/C2776836416","wikidata":"https://www.wikidata.org/wiki/Q1364844","display_name":"False alarm","level":2,"score":0.3165000081062317},{"id":"https://openalex.org/C2775941552","wikidata":"https://www.wikidata.org/wiki/Q25212305","display_name":"Isolation (microbiology)","level":2,"score":0.3158999979496002},{"id":"https://openalex.org/C2778751112","wikidata":"https://www.wikidata.org/wiki/Q835016","display_name":"Window (computing)","level":2,"score":0.30790001153945923},{"id":"https://openalex.org/C2779119184","wikidata":"https://www.wikidata.org/wiki/Q294350","display_name":"ALARM","level":2,"score":0.30640000104904175},{"id":"https://openalex.org/C2779696439","wikidata":"https://www.wikidata.org/wiki/Q7512811","display_name":"Signature (topology)","level":2,"score":0.30300000309944153},{"id":"https://openalex.org/C179768478","wikidata":"https://www.wikidata.org/wiki/Q1120057","display_name":"Cyber-physical system","level":2,"score":0.29589998722076416},{"id":"https://openalex.org/C35525427","wikidata":"https://www.wikidata.org/wiki/Q745881","display_name":"Intrusion detection system","level":2,"score":0.29170000553131104},{"id":"https://openalex.org/C118463975","wikidata":"https://www.wikidata.org/wiki/Q220849","display_name":"Digital signature","level":3,"score":0.2833000123500824},{"id":"https://openalex.org/C83665646","wikidata":"https://www.wikidata.org/wiki/Q42139305","display_name":"Feature vector","level":2,"score":0.27300000190734863},{"id":"https://openalex.org/C66322947","wikidata":"https://www.wikidata.org/wiki/Q11658","display_name":"Transformer","level":3,"score":0.25870001316070557}],"mesh":[],"locations_count":1,"locations":[{"id":"doi:10.1109/ccnc65079.2026.11366309","is_oa":false,"landing_page_url":"https://doi.org/10.1109/ccnc65079.2026.11366309","pdf_url":null,"source":null,"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"2026 IEEE 23rd Consumer Communications & Networking Conference (CCNC)","raw_type":"proceedings-article"}],"best_oa_location":null,"sustainable_development_goals":[],"awards":[],"funders":[],"has_content":{"pdf":false,"grobid_xml":false},"content_urls":null,"referenced_works_count":16,"referenced_works":["https://openalex.org/W1550654601","https://openalex.org/W2901830446","https://openalex.org/W3020666338","https://openalex.org/W3161403725","https://openalex.org/W4211037587","https://openalex.org/W4226057156","https://openalex.org/W4316658087","https://openalex.org/W4360993886","https://openalex.org/W4362709129","https://openalex.org/W4385626203","https://openalex.org/W4391857672","https://openalex.org/W4392910468","https://openalex.org/W4406014685","https://openalex.org/W4408183417","https://openalex.org/W4409724212","https://openalex.org/W4411409503"],"related_works":[],"abstract_inverted_index":{"Advances":[0],"in":[1,97,196],"monitoring":[2],"and":[3,28,38,54,81,89,117,135,149,160,167,172,203],"control":[4],"technologies":[5],"have":[6],"made":[7],"modern":[8],"electric":[9],"substations":[10],"more":[11,15],"efficient":[12],"but":[13],"also":[14],"vulnerable":[16],"to":[17,91],"cyber\u2013physical":[18],"threats.":[19],"This":[20],"study":[21],"investigates":[22],"anomaly":[23,98],"detection":[24,125,147],"by":[25],"fusing":[26],"network":[27],"load":[29,40,51,64],"signatures":[30],"on":[31,124,146],"an":[32],"automated":[33],"substation":[34],"testbed.":[35],"Network":[36],"traffic":[37],"electrical":[39],"variations":[41],"were":[42,75,121,175],"captured":[43],"under":[44],"three":[45],"regimes:":[46],"normal":[47],"(no":[48],"load),":[49],"reasonable":[50],"(1\u201310":[52],"A),":[53],"overload":[55],"(11\u201314":[56],"A)":[57],"using":[58,200],"a":[59,143],"Chroma":[60],"programmable":[61],"AC":[62],"electronic":[63],"device.":[65],"Cyber":[66],"features":[67],"extracted":[68],"from":[69],"Common":[70],"Industrial":[71],"Protocol":[72],"(CIP)":[73],"communications":[74],"integrated":[76],"with":[77],"physical":[78,204],"current":[79],"measurements":[80],"aggregated":[82],"into":[83],"fixed":[84],"temporal":[85],"windows":[86],"(5s,":[87],"1s,":[88],"0.1s)":[90],"evaluate":[92],"the":[93,155,182],"role":[94],"of":[95,102],"granularity":[96],"detection.":[99],"The":[100,177],"performances":[101],"five":[103],"unsupervised":[104],"models,":[105,120],"including":[106],"Elliptic":[107,173],"Envelope,":[108],"Local":[109],"Outlier":[110],"Factor":[111],"(LOF),":[112],"One-Class":[113],"SVM,":[114],"MLP":[115],"Autoencoder,":[116],"Isolation":[118,162,192],"Forest":[119,163],"compared":[122],"based":[123],"rate":[126,130],"(DR),":[127],"false":[128],"alarm":[129],"(FAR),":[131],"accuracy,":[132],"F1-score,":[133],"AUROC,":[134],"AUPRC.":[136],"Results":[137],"indicate":[138,180],"that":[139,150,181,190],"window":[140,152],"size":[141,153],"has":[142],"great":[144],"impact":[145],"performance,":[148],"1s":[151],"offers":[154],"best":[156],"compromise":[157],"between":[158],"sensitivity":[159],"stability.":[161],"consistently":[164],"showed":[165],"high-recall":[166],"low-false-alarm":[168],"rates,":[169],"while":[170],"LOF":[171],"Envelope":[174],"unstable.":[176],"above":[178],"results":[179],"proposed":[183],"windowed":[184],"fused":[185],"feature":[186],"learning":[187],"(WFFL)":[188],"solutions,":[189],"include":[191],"Forest,":[193],"are":[194],"effective":[195],"identifying":[197],"operational":[198],"anomalies":[199],"both":[201],"digital":[202],"features.":[205]},"counts_by_year":[],"updated_date":"2026-02-07T06:11:34.122080","created_date":"2026-02-06T00:00:00"}