Search papers, labs, and topics across Lattice.
This paper introduces a novel defense framework called Pseudo-Feature Padding to enhance the robustness of Deep Neural Networks (DNNs) against False Data Injection Attacks (FDIA) in Cyber-Physical Systems (CPS). By adding a lightweight input layer that pads samples with pseudofeature values derived from statistical distributions, the method increases input dimensionality in a way that complicates adversarial attacks. Experimental results on power grid applications indicate that this approach significantly improves model resilience against FDIA while maintaining performance levels, marking a substantial advancement in CPS security.
Adversarial attacks on DNNs in power grids can be thwarted with a simple padding technique that makes evasion nearly impossible.
Deep Neural Networks DNNs have achieved remarkable accuracy in various tasks including their application in CyberPhysical Systems CPS for detecting False Data Injection Attacks FDIA during critical operations However the unique infrastructure of CPS makes DNNs vulnerable to exploitation by attackers aiming to evade detection Additionally the distinct nature of CPS presents challenges for conventional defense mechanisms against FDIA This paper proposes an innovative defense framework that strengthens DNNs against such attacks by introducing an additional input layer that performs padding in the input samples using pseudofeature values derived from the inputs statistical distribution This padding increases the input dimensionality in a randomized and dataaware manner making adversarial attacks computationally infeasible due to the nontransferable nature of crafted perturbations and the unpredictability of the padded structure Our method is lightweight modelagnostic and requires no modifications to the core architecture making it highly deployable in realworld CPS settings We evaluated our framework on critical power grid applications such as state estimation using the IEEE 14bus 30bus 118bus and 300bus systems Experiments under adversarial settings demonstrate that our padding strategy significantly improves model robustness with negligible impact on performance and effectively mitigates attacks that would otherwise bypass conventional defenses
