In the smart grid, malicious customers may compromise their smart meters (SMs) to report false readings to achieve financial gains illegally. This causes hefty financial losses to the utility and may degrade the grid performance because the reported readings are used for energy management. This article is the first work that investigates this problem in the netmetering system, in which one SM is used to report the difference between the power consumed and the power generated. First, we prepare a benign data set for the net-metering system by processing a real power consumption and generation data set. Then, we propose a new set of attacks tailored for the net-metering system to create a malicious data set. After that, we analyzed the data and found time correlations between the net meter readings and correlations between the readings and relevant data obtained from trustworthy sources, such as solar irradiance and temperature. Based on the data analysis, we propose a general multidata-source deep hybrid learning-based detector to identify the false-reading attacks. Our detector is trained on net meter readings of all customers besides data from trustworthy sources to enhance the detector performance by learning the correlations between them. The rationale here is that although an attacker can report false readings, he cannot manipulate the solar irradiance and temperature values because they are beyond his control. Extensive experiments have been conducted, and the results indicate that our detector can identify the false-reading attacks with a high detection rate of 98.59% and a low false alarm of 2.92%. |