Modern society relies on the availability and smooth operation of complex engineering systems, such as electric power systems, water distributions networks, etc. which due to the recent advancements in ICT technologies are usually controlled by means of a cyber-layer. This design may potentially improve the usage of the components of the cyber-physical system, however further protection is needed due to the emerging threat of cyber-attacks. These may degrade the quality of the communicated information which is of fundamental importance in the decision making process.
This paper proposes an novel methodology for automatic identification of the type of the integrity attack affecting a cyber physical system. We designed a feature set capturing the characteristics of each attack in the spectral and wavelet domains while its the distribution is learned by pattern recognition algorithms of different modelling properties customized for the specific application scenario. In addition a novelty detection component is incorporated for dealing with previously unseen types of attacks. The proposed approach is applied onto data coming from the IEEE-9 bus model and achieves promising identification performance.