FedGuard-DC, a federated learning framework for privacy-preserving DC load forecasting and local false-data-injection attack (FDIA) detection, is presented and validated using EMT simulation data from four large DC loads integrated into the IEEE 39-bus New England system.
Abstract
The rapid growth of large data-center (DC) loads is creating new challenges for power-system visibility, privacy, and cyber-physical security. System operators need accurate short-term information about these fast-varying loads, while DC operators may avoid sharing raw megawatt measurements because they can reveal sensitive workload and utilization patterns. This paper presents FedGuard-DC, a federated learning (FL) framework for privacy-preserving DC load forecasting and local false-data-injection attack (FDIA) detection. Each DC trains a dual-head model on its own measurements, where a shared encoder supports both a forecasting head and a reconstruction head. A calibrated anomaly score combines forecast residual and reconstruction error to detect corrupted measurements locally. Raw measurements and absolute MW demand remain at each DC, while only model updates are shared with the global controller. Optional differential privacy and robust trimmed-mean aggregation are included to evaluate privacy-utility behavior and poisoned-client resilience. The framework is validated using EMT simulation data from four large DC loads rated between 150 and 350 MW integrated into the IEEE 39-bus New England system. Results show a 0.5 s-ahead normalized forecast RMSE of 0.023-0.038 pu, compared with 0.32-0.34 pu for persistence. FedGuard-DC detects FDIA with ROC-AUC of 0.979, F1 = 0.930, and precision of 0.988, while robust aggregation reduces the poisoned-client RMSE impact from 0.042 to 0.035 pu.
Differential privacy (DP) is widely adopted to protect training data in federated intrusion detection systems (IDS), but the reported accuracy penalties conflate two distinct costs: the architectural cost of making models DP-compatible and the noise cost of gradient perturbation. We decompose the DP penalty on two hete...
The results validate that the proposed design is a well-architected, scalable, and robust solution for protecting the next-generation EVSE infrastructure against distributed cyber attacks and privacy attacks.
E. Eziama, K. .. Okafor, Remigius Chidiebere Diovu et al.· E3S Web of Conferences· 0 citations
SplittingFed-DP relocates the Gaussian DP mechanism from the high-dimensional gradient to the low-dimensional activation space at the cut layer, audited under Rényi differential privacy and proves that this same Gaussian release coincides with the randomised-smoothing operator of Cohen et al. at the cut layer.
Rguibi Arjdal, Y. Asimi, Ahmed Asimi et al.· EPJ Web of Conferences· 0 citations
MDRC (Meta-Diffusion-based framework for Resilient traffic signal Control against adversarial attacks and sensor failures), a post-detection state-recovery defense inserted between sensing and control that reconstructs trustworthy traffic states before they are consumed by the controller.
Ming-Yuan Li, Chun-Yu Liu, Xiao Liu et al.· 0 citations
We use cookies to run the site and, with your consent, for analytics and to show ads.
See our Cookie Policy.