{"id":"https://openalex.org/W4285210777","doi":"https://doi.org/10.1109/tsg.2022.3185764","title":"Anomaly-Based Detection of Cyberattacks on Line Current Differential Relays","display_name":"Anomaly-Based Detection of Cyberattacks on Line Current Differential Relays","publication_year":2022,"publication_date":"2022-06-23","ids":{"openalex":"https://openalex.org/W4285210777","doi":"https://doi.org/10.1109/tsg.2022.3185764"},"language":"en","primary_location":{"id":"doi:10.1109/tsg.2022.3185764","is_oa":false,"landing_page_url":"https://doi.org/10.1109/tsg.2022.3185764","pdf_url":null,"source":{"id":"https://openalex.org/S59604973","display_name":"IEEE Transactions on Smart Grid","issn_l":"1949-3053","issn":["1949-3053","1949-3061"],"is_oa":false,"is_in_doaj":false,"is_core":true,"host_organization":"https://openalex.org/P4310319808","host_organization_name":"Institute of Electrical and Electronics Engineers","host_organization_lineage":["https://openalex.org/P4310319808"],"host_organization_lineage_names":["Institute of Electrical and Electronics Engineers"],"type":"journal"},"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"IEEE Transactions on Smart Grid","raw_type":"journal-article"},"type":"article","indexed_in":["crossref"],"open_access":{"is_oa":false,"oa_status":"closed","oa_url":null,"any_repository_has_fulltext":false},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5034965559","display_name":"Ahmad Mohammad Saber","orcid":"https://orcid.org/0000-0003-3115-2384"},"institutions":[{"id":"https://openalex.org/I176601375","display_name":"Khalifa University of Science and Technology","ror":"https://ror.org/05hffr360","country_code":"AE","type":"education","lineage":["https://openalex.org/I176601375"]}],"countries":["AE"],"is_corresponding":true,"raw_author_name":"Ahmad Mohammad Saber","raw_affiliation_strings":["Department of Electrical Engineering and Computer Science, Advanced Power and Energy Center, Khalifa University, Abu Dhabi, UAE"],"affiliations":[{"raw_affiliation_string":"Department of Electrical Engineering and Computer Science, Advanced Power and Energy Center, Khalifa University, Abu Dhabi, UAE","institution_ids":["https://openalex.org/I176601375"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5085765243","display_name":"Amr Youssef","orcid":"https://orcid.org/0000-0002-4284-8646"},"institutions":[{"id":"https://openalex.org/I60158472","display_name":"Concordia University","ror":"https://ror.org/0420zvk78","country_code":"CA","type":"education","lineage":["https://openalex.org/I60158472"]}],"countries":["CA"],"is_corresponding":false,"raw_author_name":"Amr Youssef","raw_affiliation_strings":["Concordia Institute for Information Systems Engineering, Concordia University, Montreal, Canada"],"affiliations":[{"raw_affiliation_string":"Concordia Institute for Information Systems Engineering, Concordia University, Montreal, Canada","institution_ids":["https://openalex.org/I60158472"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5049821727","display_name":"Davor Svetinovi\u0107","orcid":"https://orcid.org/0000-0002-3020-9556"},"institutions":[{"id":"https://openalex.org/I176601375","display_name":"Khalifa University of Science and Technology","ror":"https://ror.org/05hffr360","country_code":"AE","type":"education","lineage":["https://openalex.org/I176601375"]},{"id":"https://openalex.org/I102248843","display_name":"Vienna University of Economics and Business","ror":"https://ror.org/03yn8s215","country_code":"AT","type":"education","lineage":["https://openalex.org/I102248843"]}],"countries":["AE","AT"],"is_corresponding":false,"raw_author_name":"Davor Svetinovic","raw_affiliation_strings":["Department of Electrical Engineering and Computer Science, Khalifa University, Abu Dhabi, UAE","Department of Information Systems and Operations Management, Vienna University of Economics and Business, Vienna, Austria"],"affiliations":[{"raw_affiliation_string":"Department of Electrical Engineering and Computer Science, Khalifa University, Abu Dhabi, UAE","institution_ids":["https://openalex.org/I176601375"]},{"raw_affiliation_string":"Department of Information Systems and Operations Management, Vienna University of Economics and Business, Vienna, Austria","institution_ids":["https://openalex.org/I102248843"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5021263540","display_name":"Hatem Zeineldin","orcid":"https://orcid.org/0000-0003-1500-1260"},"institutions":[{"id":"https://openalex.org/I145487455","display_name":"Cairo University","ror":"https://ror.org/03q21mh05","country_code":"EG","type":"education","lineage":["https://openalex.org/I145487455"]},{"id":"https://openalex.org/I176601375","display_name":"Khalifa University of Science and Technology","ror":"https://ror.org/05hffr360","country_code":"AE","type":"education","lineage":["https://openalex.org/I176601375"]}],"countries":["AE","EG"],"is_corresponding":false,"raw_author_name":"Hatem H. Zeineldin","raw_affiliation_strings":["Department of Electrical Engineering and Computer Science, Advanced Power and Energy Center, Khalifa University, Abu Dhabi, UAE","Electric Power Engineering Department, Cairo University, Giza, Egypt"],"affiliations":[{"raw_affiliation_string":"Department of Electrical Engineering and Computer Science, Advanced Power and Energy Center, Khalifa University, Abu Dhabi, UAE","institution_ids":["https://openalex.org/I176601375"]},{"raw_affiliation_string":"Electric Power Engineering Department, Cairo University, Giza, Egypt","institution_ids":["https://openalex.org/I145487455"]}]},{"author_position":"last","author":{"id":"https://openalex.org/A5020667524","display_name":"Ehab F. El\u2010Saadany","orcid":"https://orcid.org/0000-0003-0172-0686"},"institutions":[{"id":"https://openalex.org/I176601375","display_name":"Khalifa University of Science and Technology","ror":"https://ror.org/05hffr360","country_code":"AE","type":"education","lineage":["https://openalex.org/I176601375"]}],"countries":["AE"],"is_corresponding":false,"raw_author_name":"Ehab F. El-Saadany","raw_affiliation_strings":["Department of Electrical Engineering and Computer Science, Advanced Power and Energy Center, Khalifa University, Abu Dhabi, UAE"],"affiliations":[{"raw_affiliation_string":"Department of Electrical Engineering and Computer Science, Advanced Power and Energy Center, Khalifa University, Abu Dhabi, UAE","institution_ids":["https://openalex.org/I176601375"]}]}],"institutions":[],"countries_distinct_count":4,"institutions_distinct_count":5,"corresponding_author_ids":["https://openalex.org/A5034965559"],"corresponding_institution_ids":["https://openalex.org/I176601375"],"apc_list":null,"apc_paid":null,"fwci":5.3446,"has_fulltext":false,"cited_by_count":46,"citation_normalized_percentile":{"value":0.96356627,"is_in_top_1_percent":false,"is_in_top_10_percent":true},"cited_by_percentile_year":{"min":89,"max":100},"biblio":{"volume":"13","issue":"6","first_page":"4787","last_page":"4800"},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T10917","display_name":"Smart Grid Security and Resilience","score":0.9995999932289124,"subfield":{"id":"https://openalex.org/subfields/2207","display_name":"Control and Systems Engineering"},"field":{"id":"https://openalex.org/fields/22","display_name":"Engineering"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T10917","display_name":"Smart Grid Security and Resilience","score":0.9995999932289124,"subfield":{"id":"https://openalex.org/subfields/2207","display_name":"Control and Systems Engineering"},"field":{"id":"https://openalex.org/fields/22","display_name":"Engineering"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T10972","display_name":"Power Systems Fault Detection","score":0.9951000213623047,"subfield":{"id":"https://openalex.org/subfields/2207","display_name":"Control and Systems Engineering"},"field":{"id":"https://openalex.org/fields/22","display_name":"Engineering"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T10400","display_name":"Network Security and Intrusion Detection","score":0.9764999747276306,"subfield":{"id":"https://openalex.org/subfields/1705","display_name":"Computer Networks and Communications"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/tripping","display_name":"Tripping","score":0.912379264831543},{"id":"https://openalex.org/keywords/fault","display_name":"Fault (geology)","score":0.6293162107467651},{"id":"https://openalex.org/keywords/protective-relay","display_name":"Protective relay","score":0.6266093850135803},{"id":"https://openalex.org/keywords/relay","display_name":"Relay","score":0.5975037813186646},{"id":"https://openalex.org/keywords/computer-science","display_name":"Computer science","score":0.5710339546203613},{"id":"https://openalex.org/keywords/real-time-computing","display_name":"Real-time computing","score":0.5671768188476562},{"id":"https://openalex.org/keywords/benchmark","display_name":"Benchmark (surveying)","score":0.5557067394256592},{"id":"https://openalex.org/keywords/line","display_name":"Line (geometry)","score":0.5047699213027954},{"id":"https://openalex.org/keywords/synchronization","display_name":"Synchronization (alternating current)","score":0.4682382643222809},{"id":"https://openalex.org/keywords/electric-power-system","display_name":"Electric power system","score":0.4434622526168823},{"id":"https://openalex.org/keywords/power-system-protection","display_name":"Power-system protection","score":0.4249940514564514},{"id":"https://openalex.org/keywords/intrusion-detection-system","display_name":"Intrusion detection system","score":0.41337957978248596},{"id":"https://openalex.org/keywords/anomaly-detection","display_name":"Anomaly detection","score":0.4128468334674835},{"id":"https://openalex.org/keywords/power","display_name":"Power (physics)","score":0.3376883864402771},{"id":"https://openalex.org/keywords/computer-security","display_name":"Computer security","score":0.309652715921402},{"id":"https://openalex.org/keywords/engineering","display_name":"Engineering","score":0.3062984347343445},{"id":"https://openalex.org/keywords/circuit-breaker","display_name":"Circuit breaker","score":0.24217519164085388},{"id":"https://openalex.org/keywords/data-mining","display_name":"Data mining","score":0.21224510669708252},{"id":"https://openalex.org/keywords/computer-network","display_name":"Computer network","score":0.16578570008277893},{"id":"https://openalex.org/keywords/channel","display_name":"Channel (broadcasting)","score":0.1159917414188385},{"id":"https://openalex.org/keywords/electrical-engineering","display_name":"Electrical engineering","score":0.10654217004776001}],"concepts":[{"id":"https://openalex.org/C2779733308","wikidata":"https://www.wikidata.org/wiki/Q17146464","display_name":"Tripping","level":3,"score":0.912379264831543},{"id":"https://openalex.org/C175551986","wikidata":"https://www.wikidata.org/wiki/Q47089","display_name":"Fault (geology)","level":2,"score":0.6293162107467651},{"id":"https://openalex.org/C2412688","wikidata":"https://www.wikidata.org/wiki/Q503732","display_name":"Protective relay","level":4,"score":0.6266093850135803},{"id":"https://openalex.org/C2778156585","wikidata":"https://www.wikidata.org/wiki/Q174053","display_name":"Relay","level":3,"score":0.5975037813186646},{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.5710339546203613},{"id":"https://openalex.org/C79403827","wikidata":"https://www.wikidata.org/wiki/Q3988","display_name":"Real-time computing","level":1,"score":0.5671768188476562},{"id":"https://openalex.org/C185798385","wikidata":"https://www.wikidata.org/wiki/Q1161707","display_name":"Benchmark (surveying)","level":2,"score":0.5557067394256592},{"id":"https://openalex.org/C198352243","wikidata":"https://www.wikidata.org/wiki/Q37105","display_name":"Line (geometry)","level":2,"score":0.5047699213027954},{"id":"https://openalex.org/C2778562939","wikidata":"https://www.wikidata.org/wiki/Q1298791","display_name":"Synchronization (alternating current)","level":3,"score":0.4682382643222809},{"id":"https://openalex.org/C89227174","wikidata":"https://www.wikidata.org/wiki/Q2388981","display_name":"Electric power system","level":3,"score":0.4434622526168823},{"id":"https://openalex.org/C38361682","wikidata":"https://www.wikidata.org/wiki/Q1756067","display_name":"Power-system protection","level":4,"score":0.4249940514564514},{"id":"https://openalex.org/C35525427","wikidata":"https://www.wikidata.org/wiki/Q745881","display_name":"Intrusion detection system","level":2,"score":0.41337957978248596},{"id":"https://openalex.org/C739882","wikidata":"https://www.wikidata.org/wiki/Q3560506","display_name":"Anomaly detection","level":2,"score":0.4128468334674835},{"id":"https://openalex.org/C163258240","wikidata":"https://www.wikidata.org/wiki/Q25342","display_name":"Power (physics)","level":2,"score":0.3376883864402771},{"id":"https://openalex.org/C38652104","wikidata":"https://www.wikidata.org/wiki/Q3510521","display_name":"Computer security","level":1,"score":0.309652715921402},{"id":"https://openalex.org/C127413603","wikidata":"https://www.wikidata.org/wiki/Q11023","display_name":"Engineering","level":0,"score":0.3062984347343445},{"id":"https://openalex.org/C61352017","wikidata":"https://www.wikidata.org/wiki/Q211058","display_name":"Circuit breaker","level":2,"score":0.24217519164085388},{"id":"https://openalex.org/C124101348","wikidata":"https://www.wikidata.org/wiki/Q172491","display_name":"Data mining","level":1,"score":0.21224510669708252},{"id":"https://openalex.org/C31258907","wikidata":"https://www.wikidata.org/wiki/Q1301371","display_name":"Computer network","level":1,"score":0.16578570008277893},{"id":"https://openalex.org/C127162648","wikidata":"https://www.wikidata.org/wiki/Q16858953","display_name":"Channel (broadcasting)","level":2,"score":0.1159917414188385},{"id":"https://openalex.org/C119599485","wikidata":"https://www.wikidata.org/wiki/Q43035","display_name":"Electrical engineering","level":1,"score":0.10654217004776001},{"id":"https://openalex.org/C62520636","wikidata":"https://www.wikidata.org/wiki/Q944","display_name":"Quantum mechanics","level":1,"score":0.0},{"id":"https://openalex.org/C2524010","wikidata":"https://www.wikidata.org/wiki/Q8087","display_name":"Geometry","level":1,"score":0.0},{"id":"https://openalex.org/C121332964","wikidata":"https://www.wikidata.org/wiki/Q413","display_name":"Physics","level":0,"score":0.0},{"id":"https://openalex.org/C33923547","wikidata":"https://www.wikidata.org/wiki/Q395","display_name":"Mathematics","level":0,"score":0.0},{"id":"https://openalex.org/C165205528","wikidata":"https://www.wikidata.org/wiki/Q83371","display_name":"Seismology","level":1,"score":0.0},{"id":"https://openalex.org/C13280743","wikidata":"https://www.wikidata.org/wiki/Q131089","display_name":"Geodesy","level":1,"score":0.0},{"id":"https://openalex.org/C205649164","wikidata":"https://www.wikidata.org/wiki/Q1071","display_name":"Geography","level":0,"score":0.0},{"id":"https://openalex.org/C127313418","wikidata":"https://www.wikidata.org/wiki/Q1069","display_name":"Geology","level":0,"score":0.0}],"mesh":[],"locations_count":2,"locations":[{"id":"doi:10.1109/tsg.2022.3185764","is_oa":false,"landing_page_url":"https://doi.org/10.1109/tsg.2022.3185764","pdf_url":null,"source":{"id":"https://openalex.org/S59604973","display_name":"IEEE Transactions on Smart Grid","issn_l":"1949-3053","issn":["1949-3053","1949-3061"],"is_oa":false,"is_in_doaj":false,"is_core":true,"host_organization":"https://openalex.org/P4310319808","host_organization_name":"Institute of Electrical and Electronics Engineers","host_organization_lineage":["https://openalex.org/P4310319808"],"host_organization_lineage_names":["Institute of Electrical and Electronics Engineers"],"type":"journal"},"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"IEEE Transactions on Smart Grid","raw_type":"journal-article"},{"id":"pmh:oai:research.wu.ac.at:openaire_cris_publications/e13cb62e-675b-462d-be7d-dd9af016cbfa","is_oa":false,"landing_page_url":"https://research.wu.ac.at/de/publications/e13cb62e-675b-462d-be7d-dd9af016cbfa","pdf_url":null,"source":{"id":"https://openalex.org/S7407055123","display_name":"WU Research","issn_l":null,"issn":null,"is_oa":false,"is_in_doaj":false,"is_core":false,"host_organization":null,"host_organization_name":null,"host_organization_lineage":[],"host_organization_lineage_names":[],"type":"repository"},"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Mohammad Saber, A, Youssef, A, Svetinovic, D, Zeineldin, H H & El-Saadany, E F 2022, 'Anomaly-Based Detection of Cyberattacks on Line Current Differential Relays', IEEE Transactions on Smart Grid, vol. 13, no. 6, pp. 4787-4800. https://doi.org/10.1109/TSG.2022.3185764","raw_type":"info:eu-repo/semantics/publishedVersion"}],"best_oa_location":null,"sustainable_development_goals":[{"score":0.6299999952316284,"id":"https://metadata.un.org/sdg/15","display_name":"Life in Land"}],"awards":[{"id":"https://openalex.org/G7487443383","display_name":null,"funder_award_id":"CIRA-013-2020","funder_id":"https://openalex.org/F4320322334","funder_display_name":"Khalifa University of Science, Technology and Research"}],"funders":[{"id":"https://openalex.org/F4320322334","display_name":"Khalifa University of Science, Technology and Research","ror":"https://ror.org/05hffr360"}],"has_content":{"grobid_xml":false,"pdf":false},"content_urls":null,"referenced_works_count":35,"referenced_works":["https://openalex.org/W1496892474","https://openalex.org/W1973893058","https://openalex.org/W1996052129","https://openalex.org/W2037306993","https://openalex.org/W2039875296","https://openalex.org/W2073792037","https://openalex.org/W2082013727","https://openalex.org/W2089437152","https://openalex.org/W2102555362","https://openalex.org/W2117653088","https://openalex.org/W2119150272","https://openalex.org/W2119740108","https://openalex.org/W2146610201","https://openalex.org/W2180612164","https://openalex.org/W2294798173","https://openalex.org/W2296719434","https://openalex.org/W2592597630","https://openalex.org/W2610184409","https://openalex.org/W2751554702","https://openalex.org/W2770337116","https://openalex.org/W2800842075","https://openalex.org/W2918639172","https://openalex.org/W2945748097","https://openalex.org/W2984195658","https://openalex.org/W3022323930","https://openalex.org/W3061964575","https://openalex.org/W3107270903","https://openalex.org/W3159120220","https://openalex.org/W3160398981","https://openalex.org/W3175947363","https://openalex.org/W4250499148","https://openalex.org/W4298270571","https://openalex.org/W6679978324","https://openalex.org/W6727590805","https://openalex.org/W6902921214"],"related_works":["https://openalex.org/W2145807105","https://openalex.org/W2094100123","https://openalex.org/W2092259284","https://openalex.org/W2536023684","https://openalex.org/W3005724727","https://openalex.org/W2120400530","https://openalex.org/W2388728621","https://openalex.org/W2947075237","https://openalex.org/W3006148033","https://openalex.org/W2548442521"],"abstract_inverted_index":{"Currently,":[0],"the":[1,17,45,49,67,83,114,123,128,136,147,163,166,174,177],"architecture":[2,28],"of":[3,44,69,127,156,165],"Line":[4],"Current":[5],"Differential":[6],"Relays":[7],"(LCDRs)":[8],"is":[9,39,88,117,131,171],"designed":[10],"to":[11,13,40,97,173],"respond":[12],"internal":[14],"faults":[15,33,100],"on":[16,90],"protected":[18,47],"line":[19,46],"using":[20,135],"local":[21,94],"and":[22,34,77,101,133,169],"remotely-communicated":[23],"current":[24,95],"measurements.":[25],"However,":[26],"this":[27,52],"cannot":[29],"distinguish":[30],"between":[31],"real":[32,99],"cyber-induced":[35],"attacks":[36,63],"whose":[37],"goal":[38],"cause":[41],"false":[42],"tripping":[43],"by":[48,122],"LCDR.":[50],"In":[51],"paper,":[53],"we":[54],"propose":[55],"an":[56],"Anomaly-Based":[57],"Scheme":[58],"(ABS)":[59],"for":[60],"detecting":[61],"false-tripping":[62,105],"against":[64],"LCDRs,":[65],"in":[66,140,176],"form":[68],"relay":[70],"attacks,":[71,73,76],"replay":[72],"general":[74],"false-data-injection":[75],"time-synchronization":[78],"attacks.":[79,106],"The":[80,125],"ABS":[81,130],"employs":[82],"Isolation":[84],"Forest":[85],"algorithm,":[86],"which":[87],"trained":[89],"features":[91],"determined":[92],"from":[93,104],"measurements":[96],"confirm":[98],"differentiate":[102],"them":[103],"No":[107],"trip":[108],"command":[109],"will":[110],"be":[111],"issued":[112],"unless":[113],"sensed":[115],"fault":[116],"confirmed":[118],"as":[119],"a":[120],"non-attack":[121],"ABS.":[124],"performance":[126],"proposed":[129,148],"tested":[132],"validated":[134],"IEEE":[137],"9-bus":[138],"benchmark":[139],"PSCAD/EMTDC":[141],"environment.":[142],"Simulation":[143],"results":[144],"show":[145],"that":[146],"ABS:":[149],"(i)":[150],"can":[151],"accurately":[152],"detect":[153],"different":[154],"categories":[155],"cyberattacks,":[157],"(ii)":[158],"does":[159],"not":[160],"negatively":[161],"impact":[162],"accuracy":[164],"fault-detection":[167],"function,":[168],"(iii)":[170],"robust":[172],"change":[175],"power":[178],"system\u2019s":[179],"operating":[180],"point.":[181]},"counts_by_year":[{"year":2026,"cited_by_count":2},{"year":2025,"cited_by_count":17},{"year":2024,"cited_by_count":14},{"year":2023,"cited_by_count":12},{"year":2022,"cited_by_count":1}],"updated_date":"2026-03-06T13:50:29.536080","created_date":"2025-10-10T00:00:00"}