An Intrusion Detection System for Wind Turbines Based on Thermal Models

ABSTRACT Wind energy plays an essential position in the renewable energy sector and is frequently deployed remotely, which makes them susceptible to intrusions that can compromise their operational system. This paper introduces a novel method T–IDS leveraging the interconnected thermal behaviours of wind turbine modules to identify the abnormal imprints that signify security breaches. Our approach consists of three key components: a graph model that outlines the dependencies among the thermal variables of the turbines, a random forest‐based prediction strategy for these variables within the thermal graph and an anomaly detection method that assesses the predicted thermal values with actual observations. We performed extensive experiments using three real‐world wind turbine supervisory control and data acquisition (SCADA) log datasets: one dataset collected over six months and two additional datasets covering 12‐month operational durations from distinct wind turbine installations for rigorous cross‐validation. The results demonstrate that T–IDS achieves an overall anomaly detection accuracy of 97.3% when detecting unusual thermal activities such as physical model damage leading to overheating or tampering temperature readings.