Abstract
False Data Injection Attack (FDIA) is one of the most dangerous cyber attacks against smart power grids, as it could cause severe physical and economic damage. In this paper, we review and compare previous surveys on FDIA, which mostly focus only on the state estimation component. Differently, our survey describes the FDIAs that target the different components of the on-line power system security. It also provides two novel attack classifications. The first classification categorizes the different FDIAs with respect to three levels: targeted systems at the first level, targeted subsystems at the second level, and the attacks targeting the subsystems at the third level. The second classification considers two criteria: targeted sub system and the impact of the attack, which can be physical and/or economic. The countermeasures are classified according to two dimensions: (i) the targeted subsystem and (ii) the class of countermeasure: preventive or detective. Both preventive and detective classes are further categorized according to different approaches. In addition, the countermeasures are presented along with their performance results. Finally, open issues are identified, and future research directions are recommended.