{"id":"https://openalex.org/W4404036821","doi":"https://doi.org/10.1109/smartgridcomm60555.2024.10738025","title":"Zero-day Attack Detection in Digital Substations using In-Context Learning","display_name":"Zero-day Attack Detection in Digital Substations using In-Context Learning","publication_year":2024,"publication_date":"2024-09-17","ids":{"openalex":"https://openalex.org/W4404036821","doi":"https://doi.org/10.1109/smartgridcomm60555.2024.10738025"},"language":"en","primary_location":{"id":"doi:10.1109/smartgridcomm60555.2024.10738025","is_oa":false,"landing_page_url":"https://doi.org/10.1109/smartgridcomm60555.2024.10738025","pdf_url":null,"source":null,"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"2024 IEEE International Conference on Communications, Control, and Computing Technologies for Smart Grids (SmartGridComm)","raw_type":"proceedings-article"},"type":"article","indexed_in":["crossref"],"open_access":{"is_oa":false,"oa_status":"closed","oa_url":null,"any_repository_has_fulltext":false},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5114513370","display_name":"Faizan Manzoor","orcid":null},"institutions":[{"id":"https://openalex.org/I859038795","display_name":"Virginia Tech","ror":"https://ror.org/02smfhw86","country_code":"US","type":"education","lineage":["https://openalex.org/I859038795"]}],"countries":["US"],"is_corresponding":false,"raw_author_name":"Faizan Manzoor","raw_affiliation_strings":["Virginia Tech,Blacksburg,VA,USA"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Virginia Tech,Blacksburg,VA,USA","institution_ids":["https://openalex.org/I859038795"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5070497653","display_name":"Vanshaj Khattar","orcid":"https://orcid.org/0009-0006-0734-5804"},"institutions":[{"id":"https://openalex.org/I859038795","display_name":"Virginia Tech","ror":"https://ror.org/02smfhw86","country_code":"US","type":"education","lineage":["https://openalex.org/I859038795"]}],"countries":["US"],"is_corresponding":false,"raw_author_name":"Vanshaj Khattar","raw_affiliation_strings":["Virginia Tech,Blacksburg,VA,USA"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Virginia Tech,Blacksburg,VA,USA","institution_ids":["https://openalex.org/I859038795"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5114240228","display_name":"Chen-Ching Liu","orcid":null},"institutions":[{"id":"https://openalex.org/I859038795","display_name":"Virginia Tech","ror":"https://ror.org/02smfhw86","country_code":"US","type":"education","lineage":["https://openalex.org/I859038795"]}],"countries":["US"],"is_corresponding":false,"raw_author_name":"Chen-Ching Liu","raw_affiliation_strings":["Virginia Tech,Blacksburg,VA,USA"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Virginia Tech,Blacksburg,VA,USA","institution_ids":["https://openalex.org/I859038795"]}]},{"author_position":"last","author":{"id":"https://openalex.org/A5101811842","display_name":"Ming Jin","orcid":"https://orcid.org/0000-0002-6833-4811"},"institutions":[],"countries":[],"is_corresponding":false,"raw_author_name":"Ming Jin","raw_affiliation_strings":["Virgnia Tech,Blacksburg,VA,USA"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Virgnia Tech,Blacksburg,VA,USA","institution_ids":[]}]}],"institutions":[],"countries_distinct_count":1,"institutions_distinct_count":4,"corresponding_author_ids":[],"corresponding_institution_ids":[],"apc_list":null,"apc_paid":null,"fwci":2.4977,"has_fulltext":false,"cited_by_count":8,"citation_normalized_percentile":{"value":0.90181584,"is_in_top_1_percent":false,"is_in_top_10_percent":true},"cited_by_percentile_year":{"min":98,"max":99},"biblio":{"volume":null,"issue":null,"first_page":"220","last_page":"225"},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T10400","display_name":"Network Security and Intrusion Detection","score":0.9994000196456909,"subfield":{"id":"https://openalex.org/subfields/1705","display_name":"Computer Networks and Communications"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T10400","display_name":"Network Security and Intrusion Detection","score":0.9994000196456909,"subfield":{"id":"https://openalex.org/subfields/1705","display_name":"Computer Networks and Communications"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T10917","display_name":"Smart Grid Security and Resilience","score":0.9968000054359436,"subfield":{"id":"https://openalex.org/subfields/2207","display_name":"Control and Systems Engineering"},"field":{"id":"https://openalex.org/fields/22","display_name":"Engineering"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T11241","display_name":"Advanced Malware Detection Techniques","score":0.9902999997138977,"subfield":{"id":"https://openalex.org/subfields/1711","display_name":"Signal Processing"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/computer-science","display_name":"Computer science","score":0.6875326633453369},{"id":"https://openalex.org/keywords/context","display_name":"Context (archaeology)","score":0.6335612535476685},{"id":"https://openalex.org/keywords/zero","display_name":"Zero (linguistics)","score":0.5742021799087524},{"id":"https://openalex.org/keywords/geography","display_name":"Geography","score":0.060100048780441284}],"concepts":[{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.6875326633453369},{"id":"https://openalex.org/C2779343474","wikidata":"https://www.wikidata.org/wiki/Q3109175","display_name":"Context (archaeology)","level":2,"score":0.6335612535476685},{"id":"https://openalex.org/C2780813799","wikidata":"https://www.wikidata.org/wiki/Q3274237","display_name":"Zero (linguistics)","level":2,"score":0.5742021799087524},{"id":"https://openalex.org/C205649164","wikidata":"https://www.wikidata.org/wiki/Q1071","display_name":"Geography","level":0,"score":0.060100048780441284},{"id":"https://openalex.org/C138885662","wikidata":"https://www.wikidata.org/wiki/Q5891","display_name":"Philosophy","level":0,"score":0.0},{"id":"https://openalex.org/C166957645","wikidata":"https://www.wikidata.org/wiki/Q23498","display_name":"Archaeology","level":1,"score":0.0},{"id":"https://openalex.org/C41895202","wikidata":"https://www.wikidata.org/wiki/Q8162","display_name":"Linguistics","level":1,"score":0.0}],"mesh":[],"locations_count":1,"locations":[{"id":"doi:10.1109/smartgridcomm60555.2024.10738025","is_oa":false,"landing_page_url":"https://doi.org/10.1109/smartgridcomm60555.2024.10738025","pdf_url":null,"source":null,"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"2024 IEEE International Conference on Communications, Control, and Computing Technologies for Smart Grids (SmartGridComm)","raw_type":"proceedings-article"}],"best_oa_location":null,"sustainable_development_goals":[],"awards":[],"funders":[{"id":"https://openalex.org/F4320306084","display_name":"U.S. Department of Energy","ror":"https://ror.org/01bj3aw27"}],"has_content":{"grobid_xml":false,"pdf":false},"content_urls":null,"referenced_works_count":21,"referenced_works":["https://openalex.org/W1991376999","https://openalex.org/W2042459928","https://openalex.org/W2127548576","https://openalex.org/W2395579298","https://openalex.org/W2551946625","https://openalex.org/W2753709519","https://openalex.org/W2793592581","https://openalex.org/W2976339490","https://openalex.org/W3103819401","https://openalex.org/W3130854279","https://openalex.org/W3144703947","https://openalex.org/W4200141286","https://openalex.org/W4212774754","https://openalex.org/W4315647204","https://openalex.org/W4382490886","https://openalex.org/W4385245566","https://openalex.org/W4389319183","https://openalex.org/W4399929809","https://openalex.org/W6778883912","https://openalex.org/W6838589991","https://openalex.org/W6869630987"],"related_works":["https://openalex.org/W4391375266","https://openalex.org/W2899084033","https://openalex.org/W2748952813","https://openalex.org/W2390279801","https://openalex.org/W4391913857","https://openalex.org/W2358668433","https://openalex.org/W4396701345","https://openalex.org/W2376932109","https://openalex.org/W2001405890","https://openalex.org/W4396696052"],"abstract_inverted_index":{"In":[0],"this":[1,115],"paper,":[2],"we":[3],"address":[4],"the":[5,17,23,64,73,91,96,109,118,122,129],"critical":[6],"challenge":[7],"of":[8,27,68,81,124,132],"detecting":[9],"zero-day":[10,53,106,133],"attacks":[11,54,107],"in":[12,45],"digital":[13,47,125],"substations":[14,126],"that":[15,62,95],"employ":[16],"IEC-61850":[18,46,92],"communication":[19],"protocol":[20],"to":[21,50,75,120],"ensure":[22],"security":[24,123],"and":[25,34],"reliability":[26],"modern":[28],"power":[29],"systems.":[30],"While":[31],"many":[32],"heuristic":[33],"machine":[35],"learning":[36,66],"(ML)-based":[37],"methods":[38],"have":[39],"been":[40],"proposed":[41,97],"for":[42],"attack":[43],"detection":[44,103,131],"substations,":[48],"generalization":[49],"unknown":[51],"or":[52],"remains":[55],"a":[56,78,82],"challenge.":[57],"We":[58,113],"propose":[59],"an":[60],"approach":[61],"leverages":[63],"in-context":[65],"ability":[67],"transformer":[69],"architecture,":[70],"which":[71],"enables":[72],"model":[74],"learn":[76],"from":[77],"few":[79],"examples":[80],"new":[83],"task":[84],"without":[85],"explicit":[86],"retraining.":[87],"Our":[88],"experiments":[89],"on":[90,105],"dataset":[93],"demonstrate":[94],"method":[98],"achieves":[99],"more":[100],"than":[101],"87%":[102],"accuracy":[104],"while":[108],"existing":[110],"baselines":[111],"fail.":[112],"believe":[114],"work":[116],"has":[117],"potential":[119],"enhance":[121],"by":[127],"enabling":[128],"effective":[130],"attacks.":[134]},"counts_by_year":[{"year":2026,"cited_by_count":3},{"year":2025,"cited_by_count":5}],"updated_date":"2026-06-11T09:08:48.828518","created_date":"2025-10-10T00:00:00"}