{"status":"ok","message-type":"work","message-version":"1.0.0","message":{"indexed":{"date-parts":[[2026,6,1]],"date-time":"2026-06-01T12:37:50Z","timestamp":1780317470209,"version":"3.54.1"},"reference-count":36,"publisher":"MDPI AG","issue":"13","license":[{"start":{"date-parts":[[2020,6,28]],"date-time":"2020-06-28T00:00:00Z","timestamp":1593302400000},"content-version":"vor","delay-in-days":0,"URL":"https:\/\/creativecommons.org\/licenses\/by\/4.0\/"}],"content-domain":{"domain":[],"crossmark-restriction":false},"short-container-title":["Sensors"],"abstract":"<jats:p>As a critical component in the smart grid, the Distribution Terminal Unit (DTU) dynamically adjusts the running status of the entire smart grid based on the collected electrical parameters to ensure the safe and stable operation of the smart grid. However, as a real-time embedded device, DTU has not only resource constraints but also specific requirements on real-time performance, thus, the traditional anomaly detection method cannot be deployed. To detect the tamper of the program running on DTU, we proposed a power-based non-intrusive condition monitoring method that collects and analyzes the power consumption of DTU using power sensors and machine learning (ML) techniques, the feasibility of this approach is that the power consumption is closely related to the executing code in CPUs, that is when the execution code is tampered with, the power consumption changes accordingly. To validate this idea, we set up a testbed based on DTU and simulated four types of imperceptible attacks that change the code running in ARM and DSP processors, respectively. We generate representative features and select lightweight ML algorithms to detect these attacks. We finally implemented the detection system on the windows and ubuntu platform and validated its effectiveness. The results show that the detection accuracy is up to 99.98% in a non-intrusive and lightweight way.<\/jats:p>","DOI":"10.3390\/s20133635","type":"journal-article","created":{"date-parts":[[2020,6,29]],"date-time":"2020-06-29T11:17:17Z","timestamp":1593429437000},"page":"3635","update-policy":"https:\/\/doi.org\/10.3390\/mdpi_crossmark_policy","source":"Crossref","is-referenced-by-count":10,"title":["Power-Based Non-Intrusive Condition Monitoring for Terminal Device in Smart Grid"],"prefix":"10.3390","volume":"20","author":[{"ORCID":"https:\/\/orcid.org\/0000-0002-8003-0669","authenticated-orcid":false,"given":"Guoming","family":"Zhang","sequence":"first","affiliation":[{"name":"School of Electrical Engineering, Zhejiang University, Hangzhou 310027, China"}],"role":[{"vocabulary":"crossref","role":"author"}]},{"given":"Xiaoyu","family":"Ji","sequence":"additional","affiliation":[{"name":"School of Electrical Engineering, Zhejiang University, Hangzhou 310027, China"}],"role":[{"vocabulary":"crossref","role":"author"}]},{"given":"Yanjie","family":"Li","sequence":"additional","affiliation":[{"name":"School of Electrical Engineering, Zhejiang University, Hangzhou 310027, China"}],"role":[{"vocabulary":"crossref","role":"author"}]},{"given":"Wenyuan","family":"Xu","sequence":"additional","affiliation":[{"name":"School of Electrical Engineering, Zhejiang University, Hangzhou 310027, China"}],"role":[{"vocabulary":"crossref","role":"author"}]}],"member":"1968","published-online":{"date-parts":[[2020,6,28]]},"reference":[{"key":"ref_1","doi-asserted-by":"crossref","unstructured":"Khan, R., Maynard, P., McLaughlin, K., Laverty, D., and Sezer, S. (2016, January 23\u201325). Threat analysis of blackenergy malware for synchrophasor based real-time control and monitoring in smart grid. Proceedings of the 4th International Symposium for ICS & SCADA Cyber Security Research, Belfast, UK.","DOI":"10.14236\/ewic\/ICS2016.7"},{"key":"ref_2","doi-asserted-by":"crossref","first-page":"48","DOI":"10.1109\/MSPEC.2013.6471059","article-title":"The real story of stuxnet","volume":"3","author":"Kushner","year":"2013","journal-title":"IEEE Spectrum"},{"key":"ref_3","doi-asserted-by":"crossref","unstructured":"Mulder, J., Schwartz, M., Berg, M., Van Houten, J.R., Mario, J., Urrea, M.A.K., Clements, A.A., and Jacob, J. (2020, April 06). WeaselBoard: Zero-Day Exploit Detection for Programmable Logic Controllers, Available online: https:\/\/prod-ng.sandia.gov\/techlib-noauth\/access-control.cgi\/2013\/138274.pdf.","DOI":"10.2172\/1104779"},{"key":"ref_4","doi-asserted-by":"crossref","unstructured":"Feng, C., Palleti, V.R., Mathur, A., and Chana, D. (2019, January 24\u201327). A Systematic Framework to Generate Invariants for Anomaly Detection in Industrial Control Systems. Proceedings of the 26th Annual Network and Distributed System Security Symposium, San Diego, CA, USA.","DOI":"10.14722\/ndss.2019.23265"},{"key":"ref_5","doi-asserted-by":"crossref","unstructured":"Han, Y., Etigowni, S., Liu, H., Zonouz, S., and Petropulu, A. (November, January 30). Watch me, but don\u2019t touch me! contactless control flow monitoring via electromagnetic emanations. Proceedings of the 2017 ACM SIGSAC conference on computer and communications security, Dallas, TX, USA.","DOI":"10.1145\/3133956.3134081"},{"key":"ref_6","doi-asserted-by":"crossref","unstructured":"Nazari, A., Sehatbakhsh, N., Alam, M., Zajic, A., and Prvulovic, M. (2017, January 24\u201328). Eddie: Em-based detection of deviations in program execution. Proceedings of the 44th Annual International Symposium on Computer Architecture, Toronto, ON, Canada.","DOI":"10.1145\/3079856.3080223"},{"key":"ref_7","doi-asserted-by":"crossref","unstructured":"Gonzalez, C.R.A., and Reed, J.H. (November, January 31). Detecting unauthorized software execution in SDR using power fingerprinting. Proceedings of the 2010-MILCOM 2010 Military Communications Conference, San Jose, CA, USA.","DOI":"10.1109\/MILCOM.2010.5680393"},{"key":"ref_8","doi-asserted-by":"crossref","unstructured":"Roy, T., and Beex, A.L. (2018, January 6\u20138). Power Measurement Based Code Classification for Programmable Logic Circuits. Proceedings of the 2018 IEEE International Symposium on Signal Processing and Information Technology (ISSPIT), Louisville, KY, USA.","DOI":"10.1109\/ISSPIT.2018.8642680"},{"key":"ref_9","doi-asserted-by":"crossref","unstructured":"Gonzalez, C.R.A., and Reed, J.H. (2009, January 18\u201321). Power fingerprinting in SDR & CR integrity assessment. Proceedings of the MILCOM 2009\u20142009 IEEE Military Communications Conference, Boston, MA, USA.","DOI":"10.1109\/MILCOM.2009.5379826"},{"key":"ref_10","doi-asserted-by":"crossref","unstructured":"Wei, S., Aysu, A., Orshansky, M., Gerstlauer, A., and Tiwari, M. (2019, January 5\u201310). Using Power-Anomalies to Counter Evasive Micro-Architectural Attacks in Embedded Systems. Proceedings of the 2019 IEEE International Symposium on Hardware Oriented Security and Trust (HOST), McLean, VA, USA.","DOI":"10.1109\/HST.2019.8740838"},{"key":"ref_11","doi-asserted-by":"crossref","unstructured":"Xu, A., Jiang, Y., Cao, Y., Zhang, G., Ji, X., and Xu, W. (2019, January 8\u201310). ADDP: Anomaly Detection for DTU Based on Power Consumption Side-Channel. Proceedings of the 2019 IEEE 3rd Conference on Energy Internet and Energy System Integration (EI2), Changsha, China.","DOI":"10.1109\/EI247390.2019.9062014"},{"key":"ref_12","doi-asserted-by":"crossref","first-page":"2183","DOI":"10.1109\/TC.2012.200","article-title":"Hardware Trojan detection by multiple-parameter side-channel analysis","volume":"62","author":"Narasimhan","year":"2012","journal-title":"IEEE Trans. Comput."},{"key":"ref_13","doi-asserted-by":"crossref","first-page":"1994","DOI":"10.1109\/TSG.2015.2415456","article-title":"A new power signature for nonintrusive appliance load monitoring","volume":"6","author":"Huang","year":"2015","journal-title":"IEEE Trans. Smart Grid"},{"key":"ref_14","doi-asserted-by":"crossref","unstructured":"Liu, Y., Wei, L., Zhou, Z., Zhang, K., Xu, W., and Xu, Q. (2016, January 24\u201328). On code execution tracking via power side-channel. Proceedings of the 2016 ACM SIGSAC Conference on Computer and Communications Security, Vienna, Austria.","DOI":"10.1145\/2976749.2978299"},{"key":"ref_15","unstructured":"Clark, S.S., Ransford, B., Rahmati, A., Guineau, S., Sorber, J., Xu, W., and Fu, K. (2013, January 14\u201316). Wattsupdoc: Power side channels to nonintrusively discover untargeted malware on embedded medical devices. Proceedings of the 2013 {USENIX} Workshop on Health Information Technologies, Washington, DC, USA."},{"key":"ref_16","doi-asserted-by":"crossref","unstructured":"Yan, L., Guo, Y., Chen, X., and Mei, H. (2015, January 6\u20138). A study on power side channels on mobile devices. Proceedings of the 7th Asia-Pacific Symposium on Internetware, Wuhan, China.","DOI":"10.1145\/2875913.2875934"},{"key":"ref_17","doi-asserted-by":"crossref","first-page":"1056","DOI":"10.1109\/TIFS.2016.2639446","article-title":"On inferring browsing activity on smartphones via USB power analysis side-channel","volume":"12","author":"Yang","year":"2016","journal-title":"IEEE Trans. Inf. Forensics Secur."},{"key":"ref_18","doi-asserted-by":"crossref","unstructured":"Conti, M., Nati, M., Rotundo, E., and Spolaor, R. (2016, January 30\u201331). Mind the plug! Laptop-user recognition through power consumption. Proceedings of the 2nd ACM International Workshop on IoT Privacy, Trust, and Security, Xi\u2019an, China.","DOI":"10.1145\/2899007.2899009"},{"key":"ref_19","unstructured":"Jian, Y.Y., Feng, F.H., Fu, X.J., and Fang, R. (2009). Simulation of correlation power analysis against DES cryptographic chip. Appl. Electron. Tech., 7."},{"key":"ref_20","doi-asserted-by":"crossref","first-page":"76","DOI":"10.1109\/MCOM.2019.1800819","article-title":"Deep Learning for Encrypted Traffic Classification: An Overview","volume":"57","author":"Rezaei","year":"2019","journal-title":"IEEE Commun. Mag."},{"key":"ref_21","doi-asserted-by":"crossref","unstructured":"Abri, F., Siami-Namini, S., Khanghah, M.A., Soltani, F.M., and Namin, A.S. (2019, January 9\u201312). Can Machine\/Deep Learning Classifiers Detect Zero-Day Malware with High Accuracy?. Proceedings of the 2019 IEEE International Conference on Big Data (Big Data), Los Angeles, CA, USA.","DOI":"10.1109\/BigData47090.2019.9006514"},{"key":"ref_22","doi-asserted-by":"crossref","unstructured":"Kim, K., Aminanto, M.E., and Tanuwidjaja, H.C. (2018). Network Intrusion Detection Using Deep Learning: A Feature Learning Approach, Springer.","DOI":"10.1007\/978-981-13-1444-5"},{"key":"ref_23","doi-asserted-by":"crossref","unstructured":"Cheng, M., Xu, Q., Jianming, L.V., Liu, W., Li, Q., and Wang, J. (2016, January 8\u201311). MS-LSTM: A multi-scale LSTM model for BGP anomaly detection. Proceedings of the 2016 IEEE 24th International Conference on Network Protocols (ICNP), Singapore.","DOI":"10.1109\/ICNP.2016.7785326"},{"key":"ref_24","doi-asserted-by":"crossref","unstructured":"Abadi, M., Chu, A., Goodfellow, I., McMahan, H., Mironov, I., Talwar, K., and Zhang, L. (2016, January 24\u201328). Deep Learning with Differential Privacy. Proceedings of the 2016 ACM SIGSAC Conference on Computer and Communications Security, Vienna, Austria.","DOI":"10.1145\/2976749.2978318"},{"key":"ref_25","doi-asserted-by":"crossref","first-page":"971","DOI":"10.1002\/cta.2623","article-title":"Using deep learning to combine static and dynamic power analyses of cryptographic circuits","volume":"47","author":"Xu","year":"2019","journal-title":"Int. J. Circuit Theory Appl."},{"key":"ref_26","doi-asserted-by":"crossref","first-page":"22","DOI":"10.1109\/MSP.2018.2887243","article-title":"Side-channel-based code-execution monitoring systems: a survey","volume":"36","author":"Han","year":"2019","journal-title":"IEEE Signal Process. Mag."},{"key":"ref_27","doi-asserted-by":"crossref","unstructured":"Giannakopoulos, T. (2015). Pyaudioanalysis: An open-source python library for audio signal analysis. PLoS ONE, 10.","DOI":"10.1371\/journal.pone.0144610"},{"key":"ref_28","doi-asserted-by":"crossref","unstructured":"Masnicki, R. (2017). Validation of the measurement characteristics in an instrument for power quality estimation\u2014A case study. Energies, 10.","DOI":"10.3390\/en10040536"},{"key":"ref_29","doi-asserted-by":"crossref","unstructured":"Leccese, F., Cagnetti, M., Di Pasquale, S., Giarnetti, S., and Caciotta, M. (2016). A new power quality instrument based on raspberry-pi. Electronics, 5.","DOI":"10.3390\/electronics5040064"},{"key":"ref_30","doi-asserted-by":"crossref","first-page":"323","DOI":"10.1166\/jolpe.2016.1454","article-title":"Design and Implementation of a USB Device Controller with the Power Management Unit","volume":"12","author":"Wang","year":"2016","journal-title":"J. Low Power Electron."},{"key":"ref_31","doi-asserted-by":"crossref","unstructured":"Caciotta, M., Giarnetti, S., Cinquegrani, G.L., Leccese, F., and Trinca, D. (2011). Development and characterization of a multi-platform Data Acquisition System for Power Quality metrological certification. Proc. ICREPQ, 362.","DOI":"10.24084\/repqj09.362"},{"key":"ref_32","doi-asserted-by":"crossref","unstructured":"Brusco, G., Burgio, A., Menniti, D., Motta, M., Pinnarelli, A., and Sorrentino, N. (2016, January 7\u201310). A repetitive-based control for a single-phase shunt active power filter for harmonic voltage compensation. Proceedings of the 2016 IEEE 16th International Conference on Environment and Electrical Engineering (EEEIC), Florence, Italy.","DOI":"10.1109\/EEEIC.2016.7555478"},{"key":"ref_33","unstructured":"Keysight (2020, April 06). U2541A 250. Available online: https:\/\/www.keysight.com\/zh-CN\/pd-1250127-pn-U2541A\/250ksa-s-usb-modular-simultaneous-data-acquisition?nid=-33238.739735.00&cc=CN&lc=chi."},{"key":"ref_34","doi-asserted-by":"crossref","first-page":"9","DOI":"10.1016\/j.aca.2017.05.013","article-title":"Class-modelling in food analytical chemistry: Development, sampling, optimisation and validation issues\u2013A tutorial","volume":"982","author":"Oliveri","year":"2017","journal-title":"Anal. Chim. Acta"},{"key":"ref_35","doi-asserted-by":"crossref","first-page":"305","DOI":"10.1007\/s41635-019-00074-w","article-title":"Malware Detection in Embedded Systems Using Neural Network Model for Electromagnetic Side-Channel Signals","volume":"3","author":"Khan","year":"2019","journal-title":"J. Hardw. Syst. Secur."},{"key":"ref_36","doi-asserted-by":"crossref","unstructured":"Shekari, T., Bayens, C., Cohen, M., Graber, L., and Beyah, R. (2019, January 24\u201327). RFDIDS: Radio Frequency-based Distributed Intrusion Detection System for the Power Grid. Proceedings of the 26th Annual Network and Distributed System Security Symposium, San Diego, CA, USA.","DOI":"10.14722\/ndss.2019.23462"}],"container-title":["Sensors"],"original-title":[],"language":"en","link":[{"URL":"https:\/\/www.mdpi.com\/1424-8220\/20\/13\/3635\/pdf","content-type":"unspecified","content-version":"vor","intended-application":"similarity-checking"}],"deposited":{"date-parts":[[2025,10,11]],"date-time":"2025-10-11T09:44:11Z","timestamp":1760175851000},"score":1,"resource":{"primary":{"URL":"https:\/\/www.mdpi.com\/1424-8220\/20\/13\/3635"}},"subtitle":[],"short-title":[],"issued":{"date-parts":[[2020,6,28]]},"references-count":36,"journal-issue":{"issue":"13","published-online":{"date-parts":[[2020,7]]}},"alternative-id":["s20133635"],"URL":"https:\/\/doi.org\/10.3390\/s20133635","relation":{},"ISSN":["1424-8220"],"issn-type":[{"value":"1424-8220","type":"electronic"}],"subject":[],"published":{"date-parts":[[2020,6,28]]}}}