{"id":"https://openalex.org/W4403587324","doi":"https://doi.org/10.48550/arxiv.2409.04242","title":"Unmasking Covert Intrusions: Detection of Fault-Masking Cyberattacks on Differential Protection Systems","display_name":"Unmasking Covert Intrusions: Detection of Fault-Masking Cyberattacks on Differential Protection Systems","publication_year":2024,"publication_date":"2024-09-06","ids":{"openalex":"https://openalex.org/W4403587324","doi":"https://doi.org/10.48550/arxiv.2409.04242"},"language":"en","primary_location":{"id":"pmh:oai:arXiv.org:2409.04242","is_oa":true,"landing_page_url":"http://arxiv.org/abs/2409.04242","pdf_url":"https://arxiv.org/pdf/2409.04242","source":{"id":"https://openalex.org/S4306400194","display_name":"arXiv (Cornell University)","issn_l":null,"issn":null,"is_oa":true,"is_in_doaj":false,"is_core":false,"host_organization":"https://openalex.org/I205783295","host_organization_name":"Cornell University","host_organization_lineage":["https://openalex.org/I205783295"],"host_organization_lineage_names":[],"type":"repository"},"license":"cc-by-nc-nd","license_id":"https://openalex.org/licenses/cc-by-nc-nd","version":"submittedVersion","is_accepted":false,"is_published":false,"raw_source_name":"","raw_type":"text"},"type":"preprint","indexed_in":["arxiv","datacite"],"open_access":{"is_oa":true,"oa_status":"green","oa_url":"https://arxiv.org/pdf/2409.04242","any_repository_has_fulltext":true},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5034965559","display_name":"Ahmad Mohammad Saber","orcid":"https://orcid.org/0000-0003-3115-2384"},"institutions":[],"countries":[],"is_corresponding":true,"raw_author_name":"Saber, Ahmad Mohammad","raw_affiliation_strings":[],"affiliations":[]},{"author_position":"middle","author":{"id":"https://openalex.org/A5085765243","display_name":"Amr Youssef","orcid":"https://orcid.org/0000-0002-4284-8646"},"institutions":[],"countries":[],"is_corresponding":false,"raw_author_name":"Youssef, Amr","raw_affiliation_strings":[],"affiliations":[]},{"author_position":"middle","author":{"id":"https://openalex.org/A5049821727","display_name":"Davor Svetinovi\u0107","orcid":"https://orcid.org/0000-0002-3020-9556"},"institutions":[],"countries":[],"is_corresponding":false,"raw_author_name":"Svetinovic, Davor","raw_affiliation_strings":[],"affiliations":[]},{"author_position":"middle","author":{"id":"https://openalex.org/A5110198633","display_name":"Hatem Zeineldin","orcid":null},"institutions":[],"countries":[],"is_corresponding":false,"raw_author_name":"Zeineldin, Hatem","raw_affiliation_strings":[],"affiliations":[]},{"author_position":"last","author":{"id":"https://openalex.org/A5020667524","display_name":"Ehab F. El\u2010Saadany","orcid":"https://orcid.org/0000-0003-0172-0686"},"institutions":[],"countries":[],"is_corresponding":false,"raw_author_name":"El-Saadany, Ehab F.","raw_affiliation_strings":[],"affiliations":[]}],"institutions":[],"countries_distinct_count":0,"institutions_distinct_count":5,"corresponding_author_ids":["https://openalex.org/A5034965559"],"corresponding_institution_ids":[],"apc_list":null,"apc_paid":null,"fwci":null,"has_fulltext":true,"cited_by_count":0,"citation_normalized_percentile":null,"cited_by_percentile_year":null,"biblio":{"volume":null,"issue":null,"first_page":null,"last_page":null},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T11241","display_name":"Advanced Malware Detection Techniques","score":0.9983000159263611,"subfield":{"id":"https://openalex.org/subfields/1711","display_name":"Signal Processing"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T11241","display_name":"Advanced Malware Detection Techniques","score":0.9983000159263611,"subfield":{"id":"https://openalex.org/subfields/1711","display_name":"Signal Processing"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T12519","display_name":"Cybercrime and Law Enforcement Studies","score":0.9965000152587891,"subfield":{"id":"https://openalex.org/subfields/1710","display_name":"Information Systems"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T10400","display_name":"Network Security and Intrusion Detection","score":0.9922999739646912,"subfield":{"id":"https://openalex.org/subfields/1705","display_name":"Computer Networks and Communications"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/covert","display_name":"Covert","score":0.8018642663955688},{"id":"https://openalex.org/keywords/computer-security","display_name":"Computer security","score":0.7527321577072144},{"id":"https://openalex.org/keywords/masking","display_name":"Masking (illustration)","score":0.7124102115631104},{"id":"https://openalex.org/keywords/differential","display_name":"Differential (mechanical device)","score":0.5979743003845215},{"id":"https://openalex.org/keywords/computer-science","display_name":"Computer science","score":0.520933985710144},{"id":"https://openalex.org/keywords/intrusion-detection-system","display_name":"Intrusion detection system","score":0.48584648966789246},{"id":"https://openalex.org/keywords/internet-privacy","display_name":"Internet privacy","score":0.3778264820575714},{"id":"https://openalex.org/keywords/engineering","display_name":"Engineering","score":0.14559650421142578}],"concepts":[{"id":"https://openalex.org/C2779338814","wikidata":"https://www.wikidata.org/wiki/Q5179285","display_name":"Covert","level":2,"score":0.8018642663955688},{"id":"https://openalex.org/C38652104","wikidata":"https://www.wikidata.org/wiki/Q3510521","display_name":"Computer security","level":1,"score":0.7527321577072144},{"id":"https://openalex.org/C2777402240","wikidata":"https://www.wikidata.org/wiki/Q6783436","display_name":"Masking (illustration)","level":2,"score":0.7124102115631104},{"id":"https://openalex.org/C93226319","wikidata":"https://www.wikidata.org/wiki/Q193137","display_name":"Differential (mechanical device)","level":2,"score":0.5979743003845215},{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.520933985710144},{"id":"https://openalex.org/C35525427","wikidata":"https://www.wikidata.org/wiki/Q745881","display_name":"Intrusion detection system","level":2,"score":0.48584648966789246},{"id":"https://openalex.org/C108827166","wikidata":"https://www.wikidata.org/wiki/Q175975","display_name":"Internet privacy","level":1,"score":0.3778264820575714},{"id":"https://openalex.org/C127413603","wikidata":"https://www.wikidata.org/wiki/Q11023","display_name":"Engineering","level":0,"score":0.14559650421142578},{"id":"https://openalex.org/C153349607","wikidata":"https://www.wikidata.org/wiki/Q36649","display_name":"Visual arts","level":1,"score":0.0},{"id":"https://openalex.org/C138885662","wikidata":"https://www.wikidata.org/wiki/Q5891","display_name":"Philosophy","level":0,"score":0.0},{"id":"https://openalex.org/C41895202","wikidata":"https://www.wikidata.org/wiki/Q8162","display_name":"Linguistics","level":1,"score":0.0},{"id":"https://openalex.org/C146978453","wikidata":"https://www.wikidata.org/wiki/Q3798668","display_name":"Aerospace engineering","level":1,"score":0.0},{"id":"https://openalex.org/C142362112","wikidata":"https://www.wikidata.org/wiki/Q735","display_name":"Art","level":0,"score":0.0}],"mesh":[],"locations_count":2,"locations":[{"id":"pmh:oai:arXiv.org:2409.04242","is_oa":true,"landing_page_url":"http://arxiv.org/abs/2409.04242","pdf_url":"https://arxiv.org/pdf/2409.04242","source":{"id":"https://openalex.org/S4306400194","display_name":"arXiv (Cornell University)","issn_l":null,"issn":null,"is_oa":true,"is_in_doaj":false,"is_core":false,"host_organization":"https://openalex.org/I205783295","host_organization_name":"Cornell University","host_organization_lineage":["https://openalex.org/I205783295"],"host_organization_lineage_names":[],"type":"repository"},"license":"cc-by-nc-nd","license_id":"https://openalex.org/licenses/cc-by-nc-nd","version":"submittedVersion","is_accepted":false,"is_published":false,"raw_source_name":"","raw_type":"text"},{"id":"doi:10.48550/arxiv.2409.04242","is_oa":true,"landing_page_url":"https://doi.org/10.48550/arxiv.2409.04242","pdf_url":null,"source":{"id":"https://openalex.org/S4306400194","display_name":"arXiv (Cornell University)","issn_l":null,"issn":null,"is_oa":true,"is_in_doaj":false,"is_core":false,"host_organization":"https://openalex.org/I205783295","host_organization_name":"Cornell University","host_organization_lineage":["https://openalex.org/I205783295"],"host_organization_lineage_names":[],"type":"repository"},"license":null,"license_id":null,"version":null,"is_accepted":false,"is_published":null,"raw_source_name":null,"raw_type":"article"}],"best_oa_location":{"id":"pmh:oai:arXiv.org:2409.04242","is_oa":true,"landing_page_url":"http://arxiv.org/abs/2409.04242","pdf_url":"https://arxiv.org/pdf/2409.04242","source":{"id":"https://openalex.org/S4306400194","display_name":"arXiv (Cornell University)","issn_l":null,"issn":null,"is_oa":true,"is_in_doaj":false,"is_core":false,"host_organization":"https://openalex.org/I205783295","host_organization_name":"Cornell University","host_organization_lineage":["https://openalex.org/I205783295"],"host_organization_lineage_names":[],"type":"repository"},"license":"cc-by-nc-nd","license_id":"https://openalex.org/licenses/cc-by-nc-nd","version":"submittedVersion","is_accepted":false,"is_published":false,"raw_source_name":"","raw_type":"text"},"sustainable_development_goals":[],"awards":[],"funders":[{"id":"https://openalex.org/F4320322334","display_name":"Khalifa University of Science, Technology and Research","ror":"https://ror.org/05hffr360"}],"has_content":{"pdf":true,"grobid_xml":true},"content_urls":{"pdf":"https://content.openalex.org/works/W4403587324.pdf","grobid_xml":"https://content.openalex.org/works/W4403587324.grobid-xml"},"referenced_works_count":0,"referenced_works":[],"related_works":["https://openalex.org/W2523525694","https://openalex.org/W2998642566","https://openalex.org/W2392682561","https://openalex.org/W57793151","https://openalex.org/W2804882289","https://openalex.org/W2727423897","https://openalex.org/W2497612952","https://openalex.org/W4247948804","https://openalex.org/W2392053643","https://openalex.org/W2595182909"],"abstract_inverted_index":{"Line":[0],"Current":[1],"Differential":[2],"Relays":[3],"(LCDRs)":[4],"are":[5,17,24],"high-speed":[6],"relays":[7],"progressively":[8],"used":[9],"to":[10,19,37,59],"protect":[11],"critical":[12],"transmission":[13,74],"lines.":[14],"However,":[15],"LCDRs":[16,169],"vulnerable":[18],"cyberattacks.":[20],"Fault-Masking":[21],"Attacks":[22],"(FMAs)":[23],"stealthy":[25],"cyberattacks":[26],"performed":[27],"by":[28,48,135,174],"manipulating":[29],"the":[30,34,41,72,91,98,108,112,122,132,136,140,151,161,190],"remote":[31,95],"measurements":[32,96],"of":[33,142],"targeted":[35],"LCDR":[36,99,137],"disguise":[38],"faults":[39],"on":[40,131,168],"protected":[42,73,134],"line.":[43],"Hence,":[44],"they":[45],"remain":[46],"undetected":[47],"this":[49,52],"LCDR.":[50],"In":[51],"paper,":[53],"we":[54],"propose":[55],"a":[56,66,87,115,126],"two-module":[57],"framework":[58,147,163],"detect":[60,166],"FMAs.":[61],"The":[62,79,145],"first":[63],"module":[64],"is":[65,81,86,101,110,125,148,171],"Mismatch":[67],"Index":[68],"(MI)":[69],"developed":[70],"from":[71],"line's":[75],"equivalent":[76],"physical":[77,127],"model.":[78],"MI":[80,109],"triggered":[82],"only":[83],"if":[84],"there":[85],"significant":[88],"mismatch":[89],"in":[90],"LCDR's":[92],"local":[93],"and":[94,170],"while":[97],"itself":[100],"untriggered,":[102],"which":[103],"indicates":[104],"an":[105,143],"FMA.":[106,144],"After":[107],"triggered,":[111],"second":[113],"module,":[114],"neural":[116],"network-based":[117],"classifier,":[118],"promptly":[119],"confirms":[120],"that":[121,129,160],"triggering":[123],"event":[124],"fault":[128],"lies":[130],"line":[133],"before":[138],"declaring":[139],"occurrence":[141],"proposed":[146,162,191],"tested":[149],"using":[150,185],"IEEE":[152],"39-bus":[153],"benchmark":[154],"system.":[155],"Our":[156,182],"simulation":[157],"results":[158,184],"confirm":[159,189],"can":[164],"accurately":[165],"FMAs":[167],"not":[172],"affected":[173],"normal":[175],"system":[176],"disturbances,":[177],"variations,":[178],"or":[179],"measurement":[180],"noise.":[181],"experimental":[183],"OPAL-RT's":[186],"real-time":[187,193],"simulator":[188],"solution's":[192],"performance":[194],"capability.":[195]},"counts_by_year":[],"updated_date":"2026-03-10T16:38:18.471706","created_date":"2024-10-21T00:00:00"}