{"id":"https://openalex.org/W4415159136","doi":"https://doi.org/10.1109/tifs.2025.3621017","title":"DTF-VPP: A Dynamic Intrusion Detection Method Combining Transformer and Feature Filtering for Virtual Power Plant Network Security","display_name":"DTF-VPP: A Dynamic Intrusion Detection Method Combining Transformer and Feature Filtering for Virtual Power Plant Network Security","publication_year":2025,"publication_date":"2025-01-01","ids":{"openalex":"https://openalex.org/W4415159136","doi":"https://doi.org/10.1109/tifs.2025.3621017"},"language":"en","primary_location":{"id":"doi:10.1109/tifs.2025.3621017","is_oa":false,"landing_page_url":"https://doi.org/10.1109/tifs.2025.3621017","pdf_url":null,"source":{"id":"https://openalex.org/S61310614","display_name":"IEEE Transactions on Information Forensics and Security","issn_l":"1556-6013","issn":["1556-6013","1556-6021"],"is_oa":false,"is_in_doaj":false,"is_core":true,"host_organization":"https://openalex.org/P4310319808","host_organization_name":"Institute of Electrical and Electronics Engineers","host_organization_lineage":["https://openalex.org/P4310319808"],"host_organization_lineage_names":["Institute of Electrical and Electronics Engineers"],"type":"journal"},"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"IEEE Transactions on Information Forensics and Security","raw_type":"journal-article"},"type":"article","indexed_in":["crossref"],"open_access":{"is_oa":false,"oa_status":"closed","oa_url":null,"any_repository_has_fulltext":false},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5100390094","display_name":"Haitao Zhao","orcid":"https://orcid.org/0000-0002-3539-3532"},"institutions":[{"id":"https://openalex.org/I41198531","display_name":"Nanjing University of Posts and Telecommunications","ror":"https://ror.org/043bpky34","country_code":"CN","type":"education","lineage":["https://openalex.org/I41198531"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Haitao Zhao","raw_affiliation_strings":["College of Internet of Things, Nanjing University of Posts and Telecommunications, Nanjing, China"],"raw_orcid":"https://orcid.org/0000-0002-3539-3532","affiliations":[{"raw_affiliation_string":"College of Internet of Things, Nanjing University of Posts and Telecommunications, Nanjing, China","institution_ids":["https://openalex.org/I41198531"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5100380731","display_name":"Dan Li","orcid":"https://orcid.org/0000-0002-4759-565X"},"institutions":[{"id":"https://openalex.org/I41198531","display_name":"Nanjing University of Posts and Telecommunications","ror":"https://ror.org/043bpky34","country_code":"CN","type":"education","lineage":["https://openalex.org/I41198531"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Dan Li","raw_affiliation_strings":["College of Portland Institute, Nanjing University of Posts and Telecommunications, Nanjing, China","College of Portland Institute of NJUPT, Nanjing University of Posts and Telecommunications, Nanjing, China"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"College of Portland Institute, Nanjing University of Posts and Telecommunications, Nanjing, China","institution_ids":["https://openalex.org/I41198531"]},{"raw_affiliation_string":"College of Portland Institute of NJUPT, Nanjing University of Posts and Telecommunications, Nanjing, China","institution_ids":["https://openalex.org/I41198531"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5052697795","display_name":"Jinlong Sun","orcid":"https://orcid.org/0000-0002-3373-2203"},"institutions":[{"id":"https://openalex.org/I41198531","display_name":"Nanjing University of Posts and Telecommunications","ror":"https://ror.org/043bpky34","country_code":"CN","type":"education","lineage":["https://openalex.org/I41198531"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Jinlong Sun","raw_affiliation_strings":["College of Telecommunications and Information Engineering, Nanjing University of Posts and Telecommunications, Nanjing, China"],"raw_orcid":"https://orcid.org/0000-0002-3373-2203","affiliations":[{"raw_affiliation_string":"College of Telecommunications and Information Engineering, Nanjing University of Posts and Telecommunications, Nanjing, China","institution_ids":["https://openalex.org/I41198531"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5100353847","display_name":"Xin Li","orcid":"https://orcid.org/0000-0002-3370-013X"},"institutions":[{"id":"https://openalex.org/I41198531","display_name":"Nanjing University of Posts and Telecommunications","ror":"https://ror.org/043bpky34","country_code":"CN","type":"education","lineage":["https://openalex.org/I41198531"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Xin Li","raw_affiliation_strings":["College of Telecommunications and Information Engineering, Nanjing University of Posts and Telecommunications, Nanjing, China"],"raw_orcid":"https://orcid.org/0000-0002-3370-013X","affiliations":[{"raw_affiliation_string":"College of Telecommunications and Information Engineering, Nanjing University of Posts and Telecommunications, Nanjing, China","institution_ids":["https://openalex.org/I41198531"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5035840666","display_name":"Haifeng Tang","orcid":"https://orcid.org/0000-0002-5073-0680"},"institutions":[{"id":"https://openalex.org/I41198531","display_name":"Nanjing University of Posts and Telecommunications","ror":"https://ror.org/043bpky34","country_code":"CN","type":"education","lineage":["https://openalex.org/I41198531"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Haifeng Tang","raw_affiliation_strings":["College of Internet of Things, Nanjing University of Posts and Telecommunications, Nanjing, China"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"College of Internet of Things, Nanjing University of Posts and Telecommunications, Nanjing, China","institution_ids":["https://openalex.org/I41198531"]}]},{"author_position":"last","author":{"id":"https://openalex.org/A5103578573","display_name":"G. M. Huang","orcid":null},"institutions":[{"id":"https://openalex.org/I41198531","display_name":"Nanjing University of Posts and Telecommunications","ror":"https://ror.org/043bpky34","country_code":"CN","type":"education","lineage":["https://openalex.org/I41198531"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Gongrui Huang","raw_affiliation_strings":["College of Internet of Things, Nanjing University of Posts and Telecommunications, Nanjing, China"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"College of Internet of Things, Nanjing University of Posts and Telecommunications, Nanjing, China","institution_ids":["https://openalex.org/I41198531"]}]}],"institutions":[],"countries_distinct_count":1,"institutions_distinct_count":6,"corresponding_author_ids":[],"corresponding_institution_ids":[],"apc_list":null,"apc_paid":null,"fwci":1.1081,"has_fulltext":false,"cited_by_count":1,"citation_normalized_percentile":{"value":0.83717684,"is_in_top_1_percent":false,"is_in_top_10_percent":false},"cited_by_percentile_year":{"min":91,"max":95},"biblio":{"volume":"20","issue":null,"first_page":"11080","last_page":"11092"},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T10400","display_name":"Network Security and Intrusion Detection","score":0.9922999739646912,"subfield":{"id":"https://openalex.org/subfields/1705","display_name":"Computer Networks and Communications"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T10400","display_name":"Network Security and Intrusion Detection","score":0.9922999739646912,"subfield":{"id":"https://openalex.org/subfields/1705","display_name":"Computer Networks and Communications"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T10917","display_name":"Smart Grid Security and Resilience","score":0.9836000204086304,"subfield":{"id":"https://openalex.org/subfields/2207","display_name":"Control and Systems Engineering"},"field":{"id":"https://openalex.org/fields/22","display_name":"Engineering"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T12451","display_name":"Smart Grid and Power Systems","score":0.9732000231742859,"subfield":{"id":"https://openalex.org/subfields/2208","display_name":"Electrical and Electronic Engineering"},"field":{"id":"https://openalex.org/fields/22","display_name":"Engineering"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/intrusion-detection-system","display_name":"Intrusion detection system","score":0.7949000000953674},{"id":"https://openalex.org/keywords/adaptability","display_name":"Adaptability","score":0.6155999898910522},{"id":"https://openalex.org/keywords/feature-selection","display_name":"Feature selection","score":0.48179998993873596},{"id":"https://openalex.org/keywords/scalability","display_name":"Scalability","score":0.476500004529953},{"id":"https://openalex.org/keywords/network-security","display_name":"Network security","score":0.46700000762939453},{"id":"https://openalex.org/keywords/process","display_name":"Process (computing)","score":0.40389999747276306},{"id":"https://openalex.org/keywords/feature","display_name":"Feature (linguistics)","score":0.3799999952316284},{"id":"https://openalex.org/keywords/feature-extraction","display_name":"Feature extraction","score":0.3720000088214874}],"concepts":[{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.8330000042915344},{"id":"https://openalex.org/C35525427","wikidata":"https://www.wikidata.org/wiki/Q745881","display_name":"Intrusion detection system","level":2,"score":0.7949000000953674},{"id":"https://openalex.org/C177606310","wikidata":"https://www.wikidata.org/wiki/Q5674297","display_name":"Adaptability","level":2,"score":0.6155999898910522},{"id":"https://openalex.org/C148483581","wikidata":"https://www.wikidata.org/wiki/Q446488","display_name":"Feature selection","level":2,"score":0.48179998993873596},{"id":"https://openalex.org/C48044578","wikidata":"https://www.wikidata.org/wiki/Q727490","display_name":"Scalability","level":2,"score":0.476500004529953},{"id":"https://openalex.org/C182590292","wikidata":"https://www.wikidata.org/wiki/Q989632","display_name":"Network security","level":2,"score":0.46700000762939453},{"id":"https://openalex.org/C124101348","wikidata":"https://www.wikidata.org/wiki/Q172491","display_name":"Data mining","level":1,"score":0.40529999136924744},{"id":"https://openalex.org/C98045186","wikidata":"https://www.wikidata.org/wiki/Q205663","display_name":"Process (computing)","level":2,"score":0.40389999747276306},{"id":"https://openalex.org/C2776401178","wikidata":"https://www.wikidata.org/wiki/Q12050496","display_name":"Feature (linguistics)","level":2,"score":0.3799999952316284},{"id":"https://openalex.org/C52622490","wikidata":"https://www.wikidata.org/wiki/Q1026626","display_name":"Feature extraction","level":2,"score":0.3720000088214874},{"id":"https://openalex.org/C66322947","wikidata":"https://www.wikidata.org/wiki/Q11658","display_name":"Transformer","level":3,"score":0.36880001425743103},{"id":"https://openalex.org/C79403827","wikidata":"https://www.wikidata.org/wiki/Q3988","display_name":"Real-time computing","level":1,"score":0.36410000920295715},{"id":"https://openalex.org/C527648132","wikidata":"https://www.wikidata.org/wiki/Q189900","display_name":"Information security","level":2,"score":0.36079999804496765},{"id":"https://openalex.org/C120314980","wikidata":"https://www.wikidata.org/wiki/Q180634","display_name":"Distributed computing","level":1,"score":0.33649998903274536},{"id":"https://openalex.org/C93996380","wikidata":"https://www.wikidata.org/wiki/Q44127","display_name":"Server","level":2,"score":0.31690001487731934},{"id":"https://openalex.org/C26517878","wikidata":"https://www.wikidata.org/wiki/Q228039","display_name":"Key (lock)","level":2,"score":0.30709999799728394},{"id":"https://openalex.org/C158251709","wikidata":"https://www.wikidata.org/wiki/Q354025","display_name":"Intrusion","level":2,"score":0.301800012588501},{"id":"https://openalex.org/C4641261","wikidata":"https://www.wikidata.org/wiki/Q11681085","display_name":"Face detection","level":4,"score":0.29510000348091125},{"id":"https://openalex.org/C168167062","wikidata":"https://www.wikidata.org/wiki/Q1117970","display_name":"Component (thermodynamics)","level":2,"score":0.2939000129699707},{"id":"https://openalex.org/C2776033628","wikidata":"https://www.wikidata.org/wiki/Q785102","display_name":"Virtual power plant","level":4,"score":0.29030001163482666},{"id":"https://openalex.org/C27438332","wikidata":"https://www.wikidata.org/wiki/Q2873","display_name":"Principal component analysis","level":2,"score":0.27559998631477356},{"id":"https://openalex.org/C24590314","wikidata":"https://www.wikidata.org/wiki/Q336038","display_name":"Wireless sensor network","level":2,"score":0.2567000091075897},{"id":"https://openalex.org/C154945302","wikidata":"https://www.wikidata.org/wiki/Q11660","display_name":"Artificial intelligence","level":1,"score":0.2531000077724457}],"mesh":[],"locations_count":1,"locations":[{"id":"doi:10.1109/tifs.2025.3621017","is_oa":false,"landing_page_url":"https://doi.org/10.1109/tifs.2025.3621017","pdf_url":null,"source":{"id":"https://openalex.org/S61310614","display_name":"IEEE Transactions on Information Forensics and Security","issn_l":"1556-6013","issn":["1556-6013","1556-6021"],"is_oa":false,"is_in_doaj":false,"is_core":true,"host_organization":"https://openalex.org/P4310319808","host_organization_name":"Institute of Electrical and Electronics Engineers","host_organization_lineage":["https://openalex.org/P4310319808"],"host_organization_lineage_names":["Institute of Electrical and Electronics Engineers"],"type":"journal"},"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"IEEE Transactions on Information Forensics and Security","raw_type":"journal-article"}],"best_oa_location":null,"sustainable_development_goals":[],"awards":[{"id":"https://openalex.org/G4505709824","display_name":null,"funder_award_id":"62371250","funder_id":"https://openalex.org/F4320321001","funder_display_name":"National Natural Science Foundation of China"},{"id":"https://openalex.org/G4549355048","display_name":null,"funder_award_id":"2021M702466","funder_id":"https://openalex.org/F4320321543","funder_display_name":"China Postdoctoral Science Foundation"},{"id":"https://openalex.org/G72773861","display_name":null,"funder_award_id":"U24B20187","funder_id":"https://openalex.org/F4320321001","funder_display_name":"National Natural Science Foundation of China"},{"id":"https://openalex.org/G8919277133","display_name":null,"funder_award_id":"61901228","funder_id":"https://openalex.org/F4320321001","funder_display_name":"National Natural Science Foundation of China"}],"funders":[{"id":"https://openalex.org/F4320321001","display_name":"National Natural Science Foundation of China","ror":"https://ror.org/01h0zpd94"},{"id":"https://openalex.org/F4320321543","display_name":"China Postdoctoral Science Foundation","ror":"https://ror.org/0426zh255"}],"has_content":{"pdf":false,"grobid_xml":false},"content_urls":null,"referenced_works_count":47,"referenced_works":["https://openalex.org/W3001336289","https://openalex.org/W3015322982","https://openalex.org/W3021219025","https://openalex.org/W3130982961","https://openalex.org/W3154061064","https://openalex.org/W3181647770","https://openalex.org/W3192519096","https://openalex.org/W3195892385","https://openalex.org/W3199482859","https://openalex.org/W3200780444","https://openalex.org/W3217610095","https://openalex.org/W4206089482","https://openalex.org/W4206130810","https://openalex.org/W4206598774","https://openalex.org/W4285165918","https://openalex.org/W4295308308","https://openalex.org/W4307955810","https://openalex.org/W4312075150","https://openalex.org/W4313591247","https://openalex.org/W4320712973","https://openalex.org/W4322628971","https://openalex.org/W4323338712","https://openalex.org/W4365790371","https://openalex.org/W4367052102","https://openalex.org/W4377022569","https://openalex.org/W4383109678","https://openalex.org/W4385245566","https://openalex.org/W4386065314","https://openalex.org/W4387011225","https://openalex.org/W4388758247","https://openalex.org/W4389328663","https://openalex.org/W4389428576","https://openalex.org/W4389636023","https://openalex.org/W4391305555","https://openalex.org/W4391481650","https://openalex.org/W4391775586","https://openalex.org/W4394862991","https://openalex.org/W4399995586","https://openalex.org/W4400266772","https://openalex.org/W4400975454","https://openalex.org/W4401508167","https://openalex.org/W4402451295","https://openalex.org/W4403125513","https://openalex.org/W4405270038","https://openalex.org/W4406794223","https://openalex.org/W4407782069","https://openalex.org/W4407899953"],"related_works":[],"abstract_inverted_index":{"The":[0,105,134],"security":[1,166],"of":[2,39,54,69,108,149,167],"virtual":[3],"power":[4],"plant":[5],"(VPP)":[6],"communication":[7],"networks":[8],"is":[9],"paramount,":[10],"particularly":[11],"owing":[12,34],"to":[13,31,35,60,98,119,131],"growing":[14],"increase":[15],"in":[16,50,147],"the":[17,36,52,66,100,121,138,150,165],"reliance":[18],"on":[19,137],"distributed":[20],"energy":[21],"resources":[22],"(DERs)":[23],"using":[24],"cloud-edge":[25],"architectures.":[26],"VPPs":[27,168],"are":[28],"increasingly":[29],"vulnerable":[30],"cyber":[32,170],"intrusion":[33,44,76],"large":[37],"number":[38],"access":[40],"devices":[41],"involved.":[42],"Existing":[43],"detection":[45,77,81,101],"methods":[46],"often":[47],"face":[48],"challenges":[49],"addressing":[51],"complexity":[53],"VPP":[55],"networks,":[56],"and":[57,103,124,152,160],"lack":[58],"adaptability":[59],"diverse":[61],"attack":[62],"patterns.":[63],"To":[64],"address":[65],"dynamic":[67,80,126],"nature":[68],"VPPs,":[70],"this":[71,109,155],"study":[72,110],"proposes":[73],"a":[74,95,112,125,158],"novel":[75],"approach":[78,156],"called":[79],"combining":[82],"transformer":[83],"with":[84,94],"feature":[85,113],"filtering":[86],"(DTF-VPP),":[87],"which":[88],"integrates":[89],"principal":[90],"component":[91],"analysis":[92],"(PCA)":[93],"transformer-based":[96],"model":[97,122],"improve":[99],"efficiency":[102],"accuracy.":[104],"key":[106],"contributions":[107],"include":[111],"selection":[114],"process":[115],"that":[116,129,142],"uses":[117],"PCA":[118],"reduce":[120],"complexity,":[123],"loss-weighting":[127],"mechanism":[128],"adapts":[130],"high-frequency":[132],"attacks.":[133],"experimental":[135],"results":[136],"NSL-KDD":[139],"dataset":[140],"demonstrate":[141],"DTF-VPP":[143],"outperforms":[144],"conventional":[145],"models":[146],"terms":[148],"accuracy":[151],"F1-score.":[153],"Therefore,":[154],"offers":[157],"scalable":[159],"adaptive":[161],"solution":[162],"for":[163],"enhancing":[164],"against":[169],"threats.":[171]},"counts_by_year":[{"year":2025,"cited_by_count":1}],"updated_date":"2026-06-11T09:08:48.828518","created_date":"2025-10-14T00:00:00"}