Stacking Ensemble Learning Model for Intrusion Detection in Electrical Substation

Stacking Ensemble Learning Model for Intrusion Detection in Electrical Substation

electrical substations; intrusion detection system; machine learning; stacking ensemble learning

Electrical substations are crucial infrastructure in power transmission and distribution but are increasingly vulnerable to cyber threats. However, existing intrusion detection systems (IDS) face several limitations, such as high false positive rates,weak in anticipating new attack patterns, and imbalances in detecting different types of intrusions. This study proposes a Stacking Ensemble Learning model to enhance intrusion detection accuracy in electrical substations. The proposed model integrates Logistic Regression (LR), K-Nearest Neighbors (KNN), Support Vector Machine (SVM), and XGBoost (XGB) as base models with XGB acting as the meta-model. A real-world electrical substation IEC 60870-5-104 network traffic dataset comprising 319,949 instances with multiple attacks, such as DoS, Port Scan, NTP DdoS, IEC 104 Starvation, Fuzzy Attack, Flood Attack, and MITM, was used in this study. The results demonstrate that the stacking model achieves the best performance, with accuracy (0.99990), precision (0.99990), recall (0.99990), and F1 score (0.99990), surpassing the base model, Bagging, and Boosting. T-test results further confirmed statistical significance, with p-values of 0.00428 (LR), 0.04237 (SVM), 0.00000 (XGB), 0.00057 (KNN), 0.00549 (Boosting), and 0.00000 (Bagging) reinforcing the superiority of the proposed methodapproach. These findings highlight the effectiveness of Stacking Ensemble Learning in enhancing the detection performanceof IDS for electrical substations and outperforming traditional models and other ensemble learning methods

Mohammad Mahruf Alam1, Feddy Setio Pribadi2, Rizky Ajie Aprilianto3, Arvina Rizqi Nurul’aini4

https://jurnal.iaii.or.id/index.php/RESTI/article/view/6502/1139

Department of Electrical Engineering, Faculty of Engineering, Universitas Negeri Semarang, Semarang, Indonesia

October 11, 2025

FAJAR BAGUS W

PDF

ENGLISH

TEXT