  Quick and accurate detection of cyber attack is key to the normal operation
of the smart grid system. In this paper, a joint state estimation and
sequential attack detection method for a given bus with grid frequency drift is
proposed that utilizes the commonly monitored output voltage. In particular,
based on a non-linear state-space model derived from the three-phase sinusoidal
voltage equations, we employ the sequential Monte Carlo (SMC) filtering to
estimate the system state. The output of the SMC filter is fed into a CUSUM
test to detect the attack in a fastest way. Moreover, an adaptive sampling
strategy is proposed to reduce the rate of taking measurements and
communicating with the controller. Extensive simulation results demonstrate
that the proposed method achieves high adaptivity and efficient detection of
various types of attacks in power systems.
