In modern highly interconnected power grids, automatic generation control
(AGC) is crucial in maintaining the stability of the power grid. The dependence
of the AGC system on the information and communications technology (ICT) system
makes it vulnerable to various types of cyber-attacks. Thus, information flow
(IF) analysis and anomaly detection became paramount for preventing cyber
attackers from driving the cyber-physical power system (CPPS) to instability.
In this paper, the ICT network traffic rules in CPPSs are explored and the
frequency domain features of the ICT network traffic are extracted, basically
for developing a robust learning algorithm that can learn the normal traffic
pattern based on the ResNeSt convolutional neural network (CNN). Furthermore,
to overcome the problem of insufficient abnormal traffic labeled samples,
transfer learning approach is used. In the proposed data-driven-based method
the deep learning model is trained by traffic frequency features, which makes
our model robust against AGC's parameters uncertainties and modeling
nonlinearities.

本文研究信息流分析和异常检测在防止网络攻击中的应用，通过使用 ResNeSt 卷积神经网络的频域特征和深度学习模型，训练自适应的算法，从而克服了参数不确定性和建模非线性问题。