{"id":"https://openalex.org/W4389041652","doi":"https://doi.org/10.1109/isncc58260.2023.10323610","title":"Mitigating IEC-60870-5-104 Vulnerabilities: Anomaly Detection in Smart Grid based on LSTM Autoencoder","display_name":"Mitigating IEC-60870-5-104 Vulnerabilities: Anomaly Detection in Smart Grid based on LSTM Autoencoder","publication_year":2023,"publication_date":"2023-10-23","ids":{"openalex":"https://openalex.org/W4389041652","doi":"https://doi.org/10.1109/isncc58260.2023.10323610"},"language":"en","primary_location":{"id":"doi:10.1109/isncc58260.2023.10323610","is_oa":false,"landing_page_url":"https://doi.org/10.1109/isncc58260.2023.10323610","pdf_url":null,"source":null,"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"2023 International Symposium on Networks, Computers and Communications (ISNCC)","raw_type":"proceedings-article"},"type":"conference-paper","indexed_in":["crossref"],"open_access":{"is_oa":false,"oa_status":"closed","oa_url":null,"any_repository_has_fulltext":false},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5093346041","display_name":"Sajath P Sathar","orcid":null},"institutions":[{"id":"https://openalex.org/I4210144839","display_name":"Hamad bin Khalifa University","ror":"https://ror.org/03eyq4y97","country_code":"QA","type":"education","lineage":["https://openalex.org/I4210144839"]}],"countries":["QA"],"is_corresponding":false,"raw_author_name":"Sajath Sathar","raw_affiliation_strings":["College of Science and Engineering, Hamad Bin Khalifa University,Division of Information and Computing Technology,Doha,Qatar","Division of Information and Computing Technology, College of Science and Engineering, Hamad Bin Khalifa University, Doha, Qatar"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"College of Science and Engineering, Hamad Bin Khalifa University,Division of Information and Computing Technology,Doha,Qatar","institution_ids":["https://openalex.org/I4210144839"]},{"raw_affiliation_string":"Division of Information and Computing Technology, College of Science and Engineering, Hamad Bin Khalifa University, Doha, Qatar","institution_ids":["https://openalex.org/I4210144839"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5002005849","display_name":"Saif Al\u2010Kuwari","orcid":"https://orcid.org/0000-0002-4402-7710"},"institutions":[{"id":"https://openalex.org/I4210144839","display_name":"Hamad bin Khalifa University","ror":"https://ror.org/03eyq4y97","country_code":"QA","type":"education","lineage":["https://openalex.org/I4210144839"]}],"countries":["QA"],"is_corresponding":false,"raw_author_name":"Saif Al-Kuwari","raw_affiliation_strings":["College of Science and Engineering, Hamad Bin Khalifa University,Division of Information and Computing Technology,Doha,Qatar","Division of Information and Computing Technology, College of Science and Engineering, Hamad Bin Khalifa University, Doha, Qatar"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"College of Science and Engineering, Hamad Bin Khalifa University,Division of Information and Computing Technology,Doha,Qatar","institution_ids":["https://openalex.org/I4210144839"]},{"raw_affiliation_string":"Division of Information and Computing Technology, College of Science and Engineering, Hamad Bin Khalifa University, Doha, Qatar","institution_ids":["https://openalex.org/I4210144839"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5048768303","display_name":"Abdullatif Albaseer","orcid":"https://orcid.org/0000-0002-6886-6500"},"institutions":[{"id":"https://openalex.org/I4210144839","display_name":"Hamad bin Khalifa University","ror":"https://ror.org/03eyq4y97","country_code":"QA","type":"education","lineage":["https://openalex.org/I4210144839"]}],"countries":["QA"],"is_corresponding":false,"raw_author_name":"Abdullatif Albaseer","raw_affiliation_strings":["College of Science and Engineering, Hamad Bin Khalifa University,Division of Information and Computing Technology,Doha,Qatar","Division of Information and Computing Technology, College of Science and Engineering, Hamad Bin Khalifa University, Doha, Qatar"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"College of Science and Engineering, Hamad Bin Khalifa University,Division of Information and Computing Technology,Doha,Qatar","institution_ids":["https://openalex.org/I4210144839"]},{"raw_affiliation_string":"Division of Information and Computing Technology, College of Science and Engineering, Hamad Bin Khalifa University, Doha, Qatar","institution_ids":["https://openalex.org/I4210144839"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5010196813","display_name":"Marwa Qaraqe","orcid":"https://orcid.org/0000-0003-0767-2478"},"institutions":[{"id":"https://openalex.org/I4210144839","display_name":"Hamad bin Khalifa University","ror":"https://ror.org/03eyq4y97","country_code":"QA","type":"education","lineage":["https://openalex.org/I4210144839"]}],"countries":["QA"],"is_corresponding":false,"raw_author_name":"Marwa Qaraqe","raw_affiliation_strings":["College of Science and Engineering, Hamad Bin Khalifa University,Division of Information and Computing Technology,Doha,Qatar","Division of Information and Computing Technology, College of Science and Engineering, Hamad Bin Khalifa University, Doha, Qatar"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"College of Science and Engineering, Hamad Bin Khalifa University,Division of Information and Computing Technology,Doha,Qatar","institution_ids":["https://openalex.org/I4210144839"]},{"raw_affiliation_string":"Division of Information and Computing Technology, College of Science and Engineering, Hamad Bin Khalifa University, Doha, Qatar","institution_ids":["https://openalex.org/I4210144839"]}]},{"author_position":"last","author":{"id":"https://openalex.org/A5037234286","display_name":"Mohamed Abdallah","orcid":"https://orcid.org/0000-0002-3261-7588"},"institutions":[{"id":"https://openalex.org/I4210144839","display_name":"Hamad bin Khalifa University","ror":"https://ror.org/03eyq4y97","country_code":"QA","type":"education","lineage":["https://openalex.org/I4210144839"]}],"countries":["QA"],"is_corresponding":false,"raw_author_name":"Mohamed Abdallah","raw_affiliation_strings":["College of Science and Engineering, Hamad Bin Khalifa University,Division of Information and Computing Technology,Doha,Qatar","Division of Information and Computing Technology, College of Science and Engineering, Hamad Bin Khalifa University, Doha, Qatar"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"College of Science and Engineering, Hamad Bin Khalifa University,Division of Information and Computing Technology,Doha,Qatar","institution_ids":["https://openalex.org/I4210144839"]},{"raw_affiliation_string":"Division of Information and Computing Technology, College of Science and Engineering, Hamad Bin Khalifa University, Doha, Qatar","institution_ids":["https://openalex.org/I4210144839"]}]}],"institutions":[],"countries_distinct_count":1,"institutions_distinct_count":1,"corresponding_author_ids":[],"corresponding_institution_ids":["https://openalex.org/I4210144839"],"apc_list":null,"apc_paid":null,"fwci":null,"has_fulltext":false,"cited_by_count":8,"citation_normalized_percentile":null,"cited_by_percentile_year":null,"biblio":{"volume":null,"issue":null,"first_page":"1","last_page":"6"},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T10917","display_name":"Smart Grid Security and Resilience","score":0.9998999834060669,"subfield":{"id":"https://openalex.org/subfields/2207","display_name":"Control and Systems Engineering"},"field":{"id":"https://openalex.org/fields/22","display_name":"Engineering"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T10917","display_name":"Smart Grid Security and Resilience","score":0.9998999834060669,"subfield":{"id":"https://openalex.org/subfields/2207","display_name":"Control and Systems Engineering"},"field":{"id":"https://openalex.org/fields/22","display_name":"Engineering"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T13429","display_name":"Electricity Theft Detection Techniques","score":0.9965999722480774,"subfield":{"id":"https://openalex.org/subfields/2208","display_name":"Electrical and Electronic Engineering"},"field":{"id":"https://openalex.org/fields/22","display_name":"Engineering"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T10400","display_name":"Network Security and Intrusion Detection","score":0.9833999872207642,"subfield":{"id":"https://openalex.org/subfields/1705","display_name":"Computer Networks and Communications"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/computer-science","display_name":"Computer science","score":0.802186131477356},{"id":"https://openalex.org/keywords/autoencoder","display_name":"Autoencoder","score":0.7843452095985413},{"id":"https://openalex.org/keywords/smart-grid","display_name":"Smart grid","score":0.6946932077407837},{"id":"https://openalex.org/keywords/testbed","display_name":"Testbed","score":0.6460666656494141},{"id":"https://openalex.org/keywords/anomaly-detection","display_name":"Anomaly detection","score":0.5564935207366943},{"id":"https://openalex.org/keywords/iec-61850","display_name":"IEC 61850","score":0.5550275444984436},{"id":"https://openalex.org/keywords/replay-attack","display_name":"Replay attack","score":0.5411824584007263},{"id":"https://openalex.org/keywords/protocol","display_name":"Protocol (science)","score":0.4650496244430542},{"id":"https://openalex.org/keywords/computer-security","display_name":"Computer security","score":0.46445298194885254},{"id":"https://openalex.org/keywords/deep-learning","display_name":"Deep learning","score":0.4352065920829773},{"id":"https://openalex.org/keywords/man-in-the-middle-attack","display_name":"Man-in-the-middle attack","score":0.41386714577674866},{"id":"https://openalex.org/keywords/real-time-computing","display_name":"Real-time computing","score":0.37778544425964355},{"id":"https://openalex.org/keywords/computer-network","display_name":"Computer network","score":0.32017579674720764},{"id":"https://openalex.org/keywords/data-mining","display_name":"Data mining","score":0.25468528270721436},{"id":"https://openalex.org/keywords/artificial-intelligence","display_name":"Artificial intelligence","score":0.23942872881889343},{"id":"https://openalex.org/keywords/encryption","display_name":"Encryption","score":0.11774405837059021},{"id":"https://openalex.org/keywords/engineering","display_name":"Engineering","score":0.09082505106925964},{"id":"https://openalex.org/keywords/authentication","display_name":"Authentication (law)","score":0.0853436291217804}],"concepts":[{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.802186131477356},{"id":"https://openalex.org/C101738243","wikidata":"https://www.wikidata.org/wiki/Q786435","display_name":"Autoencoder","level":3,"score":0.7843452095985413},{"id":"https://openalex.org/C10558101","wikidata":"https://www.wikidata.org/wiki/Q689855","display_name":"Smart grid","level":2,"score":0.6946932077407837},{"id":"https://openalex.org/C31395832","wikidata":"https://www.wikidata.org/wiki/Q1318674","display_name":"Testbed","level":2,"score":0.6460666656494141},{"id":"https://openalex.org/C739882","wikidata":"https://www.wikidata.org/wiki/Q3560506","display_name":"Anomaly detection","level":2,"score":0.5564935207366943},{"id":"https://openalex.org/C2778907243","wikidata":"https://www.wikidata.org/wiki/Q168160","display_name":"IEC 61850","level":3,"score":0.5550275444984436},{"id":"https://openalex.org/C11560541","wikidata":"https://www.wikidata.org/wiki/Q1756025","display_name":"Replay attack","level":3,"score":0.5411824584007263},{"id":"https://openalex.org/C2780385302","wikidata":"https://www.wikidata.org/wiki/Q367158","display_name":"Protocol (science)","level":3,"score":0.4650496244430542},{"id":"https://openalex.org/C38652104","wikidata":"https://www.wikidata.org/wiki/Q3510521","display_name":"Computer security","level":1,"score":0.46445298194885254},{"id":"https://openalex.org/C108583219","wikidata":"https://www.wikidata.org/wiki/Q197536","display_name":"Deep learning","level":2,"score":0.4352065920829773},{"id":"https://openalex.org/C196491621","wikidata":"https://www.wikidata.org/wiki/Q554830","display_name":"Man-in-the-middle attack","level":3,"score":0.41386714577674866},{"id":"https://openalex.org/C79403827","wikidata":"https://www.wikidata.org/wiki/Q3988","display_name":"Real-time computing","level":1,"score":0.37778544425964355},{"id":"https://openalex.org/C31258907","wikidata":"https://www.wikidata.org/wiki/Q1301371","display_name":"Computer network","level":1,"score":0.32017579674720764},{"id":"https://openalex.org/C124101348","wikidata":"https://www.wikidata.org/wiki/Q172491","display_name":"Data mining","level":1,"score":0.25468528270721436},{"id":"https://openalex.org/C154945302","wikidata":"https://www.wikidata.org/wiki/Q11660","display_name":"Artificial intelligence","level":1,"score":0.23942872881889343},{"id":"https://openalex.org/C148730421","wikidata":"https://www.wikidata.org/wiki/Q141090","display_name":"Encryption","level":2,"score":0.11774405837059021},{"id":"https://openalex.org/C127413603","wikidata":"https://www.wikidata.org/wiki/Q11023","display_name":"Engineering","level":0,"score":0.09082505106925964},{"id":"https://openalex.org/C148417208","wikidata":"https://www.wikidata.org/wiki/Q4825882","display_name":"Authentication (law)","level":2,"score":0.0853436291217804},{"id":"https://openalex.org/C71924100","wikidata":"https://www.wikidata.org/wiki/Q11190","display_name":"Medicine","level":0,"score":0.0},{"id":"https://openalex.org/C204787440","wikidata":"https://www.wikidata.org/wiki/Q188504","display_name":"Alternative medicine","level":2,"score":0.0},{"id":"https://openalex.org/C78519656","wikidata":"https://www.wikidata.org/wiki/Q101333","display_name":"Mechanical engineering","level":1,"score":0.0},{"id":"https://openalex.org/C119599485","wikidata":"https://www.wikidata.org/wiki/Q43035","display_name":"Electrical engineering","level":1,"score":0.0},{"id":"https://openalex.org/C142724271","wikidata":"https://www.wikidata.org/wiki/Q7208","display_name":"Pathology","level":1,"score":0.0},{"id":"https://openalex.org/C115901376","wikidata":"https://www.wikidata.org/wiki/Q184199","display_name":"Automation","level":2,"score":0.0}],"mesh":[],"locations_count":1,"locations":[{"id":"doi:10.1109/isncc58260.2023.10323610","is_oa":false,"landing_page_url":"https://doi.org/10.1109/isncc58260.2023.10323610","pdf_url":null,"source":null,"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"2023 International Symposium on Networks, Computers and Communications (ISNCC)","raw_type":"proceedings-article"}],"best_oa_location":null,"sustainable_development_goals":[{"score":0.7400000095367432,"id":"https://metadata.un.org/sdg/7","display_name":"Affordable and clean energy"}],"awards":[],"funders":[],"has_content":{"grobid_xml":false,"pdf":false},"content_urls":null,"referenced_works_count":37,"referenced_works":["https://openalex.org/W2064898714","https://openalex.org/W2098315020","https://openalex.org/W2124712242","https://openalex.org/W2127586654","https://openalex.org/W2167285615","https://openalex.org/W2182152390","https://openalex.org/W2222845742","https://openalex.org/W2243401945","https://openalex.org/W2624873470","https://openalex.org/W2743138268","https://openalex.org/W2744890864","https://openalex.org/W2804019764","https://openalex.org/W2904849495","https://openalex.org/W2906928984","https://openalex.org/W2913811025","https://openalex.org/W2954144630","https://openalex.org/W2976983452","https://openalex.org/W2998233014","https://openalex.org/W3041344359","https://openalex.org/W3046133755","https://openalex.org/W3049225115","https://openalex.org/W3089123339","https://openalex.org/W3109037541","https://openalex.org/W3155647626","https://openalex.org/W3202909348","https://openalex.org/W3203072121","https://openalex.org/W4210793970","https://openalex.org/W4229711670","https://openalex.org/W4280548050","https://openalex.org/W4313032301","https://openalex.org/W4313216104","https://openalex.org/W4317892895","https://openalex.org/W4323545743","https://openalex.org/W6685777803","https://openalex.org/W6685843390","https://openalex.org/W6757140150","https://openalex.org/W6855462042"],"related_works":["https://openalex.org/W4390821889","https://openalex.org/W2517732453","https://openalex.org/W2610549918","https://openalex.org/W3203098032","https://openalex.org/W41151828","https://openalex.org/W2032031862","https://openalex.org/W2544762059","https://openalex.org/W1983662534","https://openalex.org/W841089911","https://openalex.org/W2919318821"],"abstract_inverted_index":{"Advanced":[0],"Information":[1],"Communication":[2],"Technology":[3],"(ICT)":[4],"is":[5,29,79,154,171,178],"used":[6],"in":[7,103],"smart":[8,26],"grid":[9,27],"systems":[10],"to":[11,81,99,173],"introduce":[12],"intelligence":[13],"and":[14,46,59,117,122,145,161,163],"efficiency,":[15],"potentially":[16],"outperforming":[17],"conventional":[18],"power":[19],"systems.":[20],"A":[21],"fundamental":[22],"component":[23],"of":[24,143,149],"a":[25,111,114,119,129],"system":[28],"the":[30,82,87,140,146,168,176],"Smart":[31],"Meters":[32],"(SMs),":[33],"which":[34,138],"are":[35],"integrated":[36],"with":[37,72,105,113,121],"billing":[38,83],"utilities,":[39],"such":[40,68,100],"as":[41],"national":[42],"control":[43],"centers":[44],"(NCC),":[45],"advanced":[47],"metering":[48],"infrastructure":[49],"(AMI).":[50],"However,":[51],"like":[52],"most":[53],"emerging":[54],"technologies,":[55],"some":[56],"security":[57],"vulnerabilities":[58],"attacks":[60],"were":[61],"found.":[62],"In":[63],"this":[64],"paper,":[65],"we":[66,109],"address":[67],"vulnerabilities,":[69,101],"specifically":[70,85],"associated":[71],"SMs,":[73],"that":[74,167],"occur":[75],"when":[76],"energy":[77],"consumption":[78],"reported":[80],"system,":[84],"through":[86],"IEC-60870-5-104(IEC-104)":[88],"protocol.":[89],"Since":[90],"existing":[91],"datasets":[92],"do":[93],"not":[94],"include":[95],"sufficient":[96],"data":[97,181],"related":[98],"especially":[102],"SM":[104],"IEC-104":[106],"protocol":[107],"communication,":[108],"developed":[110],"testbed":[112],"virtual":[115],"environment":[116],"generated":[118],"dataset":[120],"without":[123,180],"attack":[124,170,177],"vectors.":[125],"We":[126],"then":[127],"proposed":[128],"novel":[130],"anomaly":[131],"detection":[132],"algorithm":[133],"based":[134],"on":[135],"LSTM":[136,144],"autoencoder,":[137],"combines":[139],"functional":[141],"benefits":[142],"deep":[147],"learning":[148],"autoencoders.":[150],"The":[151],"model's":[152],"performance":[153],"evaluated":[155],"against":[156],"two":[157],"popular":[158],"attacks,":[159],"MITM":[160],"Replay,":[162],"our":[164],"result":[165],"shows":[166],"replay":[169],"harder":[172],"find":[174],"since":[175],"executed":[179],"alteration.":[182]},"counts_by_year":[{"year":2026,"cited_by_count":1},{"year":2025,"cited_by_count":3},{"year":2024,"cited_by_count":3},{"year":2023,"cited_by_count":1}],"updated_date":"2026-07-14T23:27:15.235271","created_date":"2025-10-10T00:00:00"}