{"status":"ok","message-type":"work","message-version":"1.0.0","message":{"indexed":{"date-parts":[[2026,8,8]],"date-time":"2026-08-08T21:33:53Z","timestamp":1786224833156,"version":"3.56.0"},"reference-count":135,"publisher":"Institute of Electrical and Electronics Engineers (IEEE)","license":[{"start":{"date-parts":[[2025,1,1]],"date-time":"2025-01-01T00:00:00Z","timestamp":1735689600000},"content-version":"vor","delay-in-days":0,"URL":"https:\/\/creativecommons.org\/licenses\/by\/4.0\/legalcode"}],"content-domain":{"domain":[],"crossmark-restriction":false},"short-container-title":["IEEE Access"],"published-print":{"date-parts":[[2025]]},"DOI":"10.1109\/access.2025.3623834","type":"journal-article","created":{"date-parts":[[2025,10,20]],"date-time":"2025-10-20T17:57:35Z","timestamp":1760983055000},"page":"181519-181552","source":"Crossref","is-referenced-by-count":12,"title":["Next-Generation Smart Grid Cybersecurity: A Systematic Review of OT Cyber Threats, AI-Driven Defense, Cyber Deception Techniques, and Emerging Security Strategies"],"prefix":"10.1109","volume":"13","author":[{"ORCID":"https:\/\/orcid.org\/0009-0006-3595-0614","authenticated-orcid":false,"given":"Hind","family":"Lakhal","sequence":"first","affiliation":[{"name":"Laboratory of Digital Engineering for Leading Technology and Automation (DELTA), ENSAM Casablanca, Hassan II University of Casablanca, Casablanca, Morocco"}],"role":[{"vocabulary":"crossref","role":"author"}]},{"given":"Mourad","family":"Zegrari","sequence":"additional","affiliation":[{"name":"Laboratory of Digital Engineering for Leading Technology and Automation (DELTA), ENSAM Casablanca, Hassan II University of Casablanca, Casablanca, Morocco"}],"role":[{"vocabulary":"crossref","role":"author"}]},{"ORCID":"https:\/\/orcid.org\/0000-0003-0426-2860","authenticated-orcid":false,"given":"Ayoub","family":"Bahnasse","sequence":"additional","affiliation":[{"name":"Laboratory of Digital Engineering for Leading Technology and Automation (DELTA), ENSAM Casablanca, Hassan II University of Casablanca, Casablanca, Morocco"}],"role":[{"vocabulary":"crossref","role":"author"}]}],"member":"263","reference":[{"key":"ref1","doi-asserted-by":"publisher","DOI":"10.1016\/j.rineng.2024.102647"},{"key":"ref2","doi-asserted-by":"publisher","DOI":"10.1016\/j.heliyon.2024.e37980"},{"key":"ref3","volume-title":"Recovery Act: Smart Grid Investment Grant (SGIG) Program","year":"2025"},{"key":"ref4","volume-title":"Home\u2014Smart5Grid","year":"2025"},{"key":"ref5","doi-asserted-by":"publisher","DOI":"10.70008\/jeser.v1i01.43"},{"key":"ref6","volume-title":"Guidelines for Performing Systematic Literature Reviews in Software Engineering","year":"2007"},{"key":"ref7","doi-asserted-by":"publisher","DOI":"10.1371\/journal.pmed.1003583"},{"key":"ref8","article-title":"The emergent role of artificial intelligence in operational technology cybersecurity","author":"Lau","year":"2023"},{"key":"ref9","volume-title":"Industrial Edge\u2014Edge Computing for Industry 4.0","year":"2025"},{"key":"ref10","volume-title":"Siemens Xcelerator: Siemens Accelerates IT and OT Integration With Microsoft for Edge, Cloud, AI and Simulation | Press | Company | Siemens","year":"2025"},{"key":"ref11","volume-title":"Spectrum Power Advanced Distribution Management","year":"2025"},{"key":"ref12","volume-title":"Siemens Cre8Ventures & Minima: A Partnership to Set to Revolutionize Robotics, Automotive, Energy, and Healthcare Equipment\u2014Cre8Ventures (Siemens EDA)","year":"2025"},{"key":"ref13","volume-title":"Zscaler and Siemens | Solution Brief","year":"2025"},{"key":"ref14","volume-title":"Honeywell Expands OT Cybersecurity Portfolio With Active Defense and Deception Technology Solution","year":"2025"},{"key":"ref15","volume-title":"Rockwell Automation Brings Autonomous Operations to Life Using NVIDIA Omniverse | Rockwell Automation | U.S.","year":"2025"},{"key":"ref16","volume-title":"Digitalization Trends in the Electric Power Industry 2030","year":"2024"},{"key":"ref17","doi-asserted-by":"publisher","DOI":"10.1016\/j.procs.2024.08.049"},{"key":"ref18","volume-title":"Waste Heat Driven Membrane Distillation for Industrial Wastewater Treatment","author":"Noor","year":"2021"},{"key":"ref19","volume-title":"Smart Grids","author":"Energy Agency","year":"2025"},{"key":"ref20","doi-asserted-by":"publisher","DOI":"10.6028\/nist.sp.1108r4"},{"key":"ref21","doi-asserted-by":"publisher","DOI":"10.1016\/j.meaene.2024.100031"},{"key":"ref22","doi-asserted-by":"publisher","DOI":"10.6028\/nist.ir.7628"},{"key":"ref23","doi-asserted-by":"publisher","DOI":"10.1186\/s42400-023-00200-w"},{"key":"ref24","doi-asserted-by":"publisher","DOI":"10.3390\/s21041554"},{"key":"ref25","doi-asserted-by":"publisher","DOI":"10.1109\/cscloud.2015.86"},{"key":"ref26","volume-title":"OPC UA Deep Dive: A Complete Guide to the OPC UA Attack Surface","year":"2025"},{"key":"ref27","doi-asserted-by":"publisher","DOI":"10.1016\/j.egyr.2024.08.060"},{"key":"ref28","doi-asserted-by":"publisher","DOI":"10.1186\/s42162-025-00545-1"},{"key":"ref29","article-title":"Smart grid LAB hessen | smart grid components: Functionalities and benefits","author":"Dahinten","year":"2022"},{"key":"ref30","doi-asserted-by":"publisher","DOI":"10.6028\/nist.sp.800-82r3"},{"key":"ref31","volume-title":"What Is a Cyberattack?\u2014Most Common Types","year":"2025"},{"key":"ref32","doi-asserted-by":"crossref","DOI":"10.21203\/rs.3.rs-3381005\/v1","article-title":"Enhancing smart grid cybersecurity: A comprehensive analysis of attacks, defenses, and innovative AI-blockchain solutions","author":"Ghadi","year":"2023"},{"key":"ref33","doi-asserted-by":"publisher","DOI":"10.6028\/nist.sp.800-30r1"},{"key":"ref34","volume-title":"Committee on National Security Systems (CNSS) Glossary","year":"2015"},{"issue":"3","key":"ref35","first-page":"73","article-title":"A safer future: Leveraging the ai power to improve the cybersecurity in critical infrastructures","volume":"91","author":"Volk","year":"2024","journal-title":"Electrotechnical Review\/Elektrotehniski Vestnik"},{"key":"ref36","article-title":"Towards secured smart grid 2.0: Exploring security threats, protection models, and challenges","author":"Nguyen","year":"2024","journal-title":"arXiv:2411.04365"},{"key":"ref37","doi-asserted-by":"publisher","DOI":"10.1016\/j.egyr.2024.05.051"},{"key":"ref38","doi-asserted-by":"publisher","DOI":"10.3390\/electronics11233854"},{"key":"ref39","doi-asserted-by":"publisher","DOI":"10.3390\/en14051380"},{"key":"ref40","doi-asserted-by":"publisher","DOI":"10.3390\/jcp5030046"},{"key":"ref41","doi-asserted-by":"publisher","DOI":"10.1016\/j.ijcip.2012.09.003"},{"key":"ref42","doi-asserted-by":"publisher","DOI":"10.3390\/s24134210"},{"key":"ref43","volume-title":"What is Stuxnet?","author":"Brash","year":"2025"},{"key":"ref44","volume-title":"ATT&CK for ICS: Industroyer | Kaspersky","year":"2025"},{"key":"ref45","volume-title":"Sandworm Disrupts Power in Ukraine Using a Novel Attack Against Operational Technology","year":"2025"},{"key":"ref46","volume-title":"VOLTZITE Espionage Operations Targeting U.S. Critical Systems","author":"Hanrahan","year":"2024"},{"key":"ref47","doi-asserted-by":"publisher","DOI":"10.1016\/j.ijepes.2019.05.014"},{"key":"ref48","doi-asserted-by":"publisher","DOI":"10.1016\/j.jcss.2016.04.005"},{"key":"ref49","doi-asserted-by":"publisher","DOI":"10.1109\/tpwrs.2015.2504950"},{"key":"ref50","doi-asserted-by":"publisher","DOI":"10.3390\/s23031683"},{"key":"ref51","article-title":"Cyber-resilient frequency control of power grids with energy storage systems","author":"Giraldo","year":"2022","journal-title":"arXiv:2207.12333"},{"key":"ref52","doi-asserted-by":"publisher","DOI":"10.1109\/tsg.2021.3055222"},{"key":"ref53","article-title":"AC Microgrid protection based on machine learning and multi-agent systems","author":"Uzair","year":"2023"},{"key":"ref54","doi-asserted-by":"publisher","DOI":"10.1038\/s41598-025-90959-4"},{"key":"ref55","doi-asserted-by":"publisher","DOI":"10.4108\/eai.7-8-2017.152988"},{"key":"ref56","doi-asserted-by":"publisher","DOI":"10.1109\/tii.2025.3594016"},{"key":"ref57","volume-title":"National Directive on Information System Security (NDISS)","year":"2023"},{"key":"ref58","doi-asserted-by":"publisher","DOI":"10.1016\/j.prime.2024.100798"},{"key":"ref59","doi-asserted-by":"publisher","DOI":"10.1016\/j.jss.2014.05.075"},{"key":"ref60","volume-title":"Practical Cyber Threat Intelligence: Gather, Process, and Analyze Threat Actor Motives, Targets, and Attacks With Cyber Intelligence Practices","author":"Ozkaya","year":"2022"},{"key":"ref61","volume-title":"Cybersecurity Frameworks 2024: MITRE ATT&CK, Kill Chain & NIST","author":"Marketing","year":"2025"},{"key":"ref62","doi-asserted-by":"publisher","DOI":"10.1016\/j.eij.2024.100521"},{"key":"ref63","doi-asserted-by":"publisher","DOI":"10.6028\/nist.ir.7628r1"},{"key":"ref64","doi-asserted-by":"publisher","DOI":"10.6028\/nist.sp.800-207"},{"key":"ref65","volume-title":"NERC CIP-Reliability Standards for the Bulk Electric Systems of North America, NERC CIP","year":"2024"},{"key":"ref66","volume-title":"Industrial Communication Networks: Network, and System Security. Pt. 2,1: Establishing an Industrial Automation, and Control System Security Program, Ed. 1.0, 2010-11","year":"2010"},{"key":"ref67","volume-title":"Industrial Communication Networks: Network, and System Security. Pt. 3,3: System Security Requirements, and Security Levels, Ed. 1.0, 2013-08","year":"2013"},{"key":"ref68","volume-title":"Power Systems Management and Associated Information Exchange\u2014Data and Communications Security\u2014Part 9: Cyber Security Key Management for Power System Equipment","year":"2023"},{"key":"ref69","volume-title":"Information Security, Cybersecurity and Privacy Protection\u2014Information Security Management Systems Requirements","year":"2022"},{"key":"ref70","first-page":"2022","volume-title":"Information Security, Cybersecurity and Privacy Protection\u2014Information Security Controls","year":"2022"},{"key":"ref71","volume-title":"Information Technology\u2014Security Techniques\u2014Information Security Controls for the Energy Utility Industry","year":"2024"},{"key":"ref72","first-page":"2014","year":"2014","journal-title":"IEEE Standard Cybersecurity Requirements for Substation Automation, Protection, and Control Systems"},{"key":"ref73","year":"2022","journal-title":"IEEE Standard for Intelligent Electronic Devices Cybersecurity Capabilities"},{"key":"ref74","volume-title":"Road Vehicles\u2014Communication Interface Between Vehicle and Electrical Grid","year":"2022"},{"key":"ref75","volume-title":"Information Security, Cybersecurity, and Privacy Protection\u2014Security Requirements for Cryptographic Modules","year":"2025"},{"key":"ref76","volume-title":"Cyber Security Procurement Language for Control Systems","year":"2008"},{"key":"ref77","volume-title":"Advanced Metering Infrastructure\u2014Security Event Response","year":"2008"},{"key":"ref78","year":"1547","journal-title":"IEEE Guide for Cybersecurity of Distributed Energy Resources Interconnected With Electric Power Systems"},{"key":"ref79","volume-title":"Interoperable EU Risk Management Toolbox","year":"2023"},{"key":"ref80","volume-title":"Cybersecurity Capability Maturity Model (C2M2)"},{"key":"ref81","doi-asserted-by":"publisher","DOI":"10.1201\/9781003497196"},{"key":"ref82","doi-asserted-by":"publisher","DOI":"10.1016\/j.comcom.2023.04.022"},{"key":"ref83","doi-asserted-by":"publisher","DOI":"10.30574\/ijsra.2023.10.2.1061"},{"key":"ref84","doi-asserted-by":"publisher","DOI":"10.1016\/j.adhoc.2024.103414"},{"key":"ref85","doi-asserted-by":"publisher","DOI":"10.1038\/s41598-025-11738-9"},{"key":"ref86","doi-asserted-by":"publisher","DOI":"10.1016\/j.comnet.2025.111450"},{"key":"ref87","doi-asserted-by":"publisher","DOI":"10.1016\/j.adhoc.2024.103540"},{"key":"ref88","volume-title":"Implementing Machine Learning to Achieve Dynamic Zero-Trust Intrusion Detection Systems (ZT-IDS) in 5G Based IoT Networks","year":"2023"},{"key":"ref89","doi-asserted-by":"publisher","DOI":"10.1016\/j.inffus.2024.102922"},{"key":"ref90","volume-title":"Information Technology\u2014Artificial Intelligence\u2014Artificial Intelligence Concepts and Terminology","year":"2022"},{"key":"ref91","doi-asserted-by":"publisher","DOI":"10.1049\/cps2.12014"},{"key":"ref92","article-title":"Scalable cyber-physical testbed for cybersecurity evaluation of synchrophasors in power systems","author":"Das","year":"2022","journal-title":"arXiv:2207.12610"},{"key":"ref93","doi-asserted-by":"publisher","DOI":"10.3390\/electronics13101866"},{"key":"ref94","doi-asserted-by":"publisher","DOI":"10.6028\/nist.sp.800-160v2"},{"key":"ref95","doi-asserted-by":"publisher","DOI":"10.1109\/access.2023.3279504"},{"key":"ref96","doi-asserted-by":"publisher","DOI":"10.1109\/access.2024.3435564"},{"key":"ref97","doi-asserted-by":"publisher","DOI":"10.1016\/j.epsr.2024.111126"},{"key":"ref98","doi-asserted-by":"publisher","DOI":"10.1109\/access.2024.3441931"},{"key":"ref99","article-title":"Detecting denial of service attacks in smart grids using machine learning: A study of IEC 61850 protocols","author":"Delhomme","year":"2024"},{"issue":"1","key":"ref100","first-page":"1","article-title":"Design of an improved method for intrusion detection using CNN, LSTM, and block chain","volume":"103","author":"Jyothi","journal-title":"J. Theor. Appl. Inf. Technol."},{"key":"ref101","doi-asserted-by":"publisher","DOI":"10.1109\/icc.2018.8423022"},{"key":"ref102","doi-asserted-by":"publisher","DOI":"10.1155\/2020\/8850550"},{"key":"ref103","doi-asserted-by":"publisher","DOI":"10.1016\/j.comnet.2024.110655"},{"key":"ref104","doi-asserted-by":"publisher","DOI":"10.1016\/j.cose.2024.103792"},{"key":"ref105","article-title":"Using honeynets and the diamond model for ICS threat analysis","author":"Kotheimer","year":"2016"},{"key":"ref106","doi-asserted-by":"publisher","DOI":"10.1109\/access.2024.3396402"},{"key":"ref107","doi-asserted-by":"publisher","DOI":"10.1109\/pesgm52003.2023.10253421"},{"key":"ref108","doi-asserted-by":"publisher","DOI":"10.1109\/tsg.2018.2879727"},{"key":"ref109","doi-asserted-by":"publisher","DOI":"10.1016\/j.cose.2023.103661"},{"key":"ref110","doi-asserted-by":"publisher","DOI":"10.1016\/j.procs.2024.11.190"},{"key":"ref111","doi-asserted-by":"publisher","DOI":"10.1016\/j.iot.2023.100966"},{"key":"ref112","doi-asserted-by":"publisher","DOI":"10.1016\/j.comnet.2025.111327"},{"key":"ref113","article-title":"SDN-based smart cyber switching (SCS) for cyber restoration of a digital substation","author":"Girdhar","year":"2024","journal-title":"arXiv:2411.07433"},{"key":"ref114","doi-asserted-by":"publisher","DOI":"10.1145\/3538969.3544479"},{"key":"ref115","doi-asserted-by":"publisher","DOI":"10.1016\/j.solener.2023.111921"},{"key":"ref116","volume-title":"Edge Computing","author":"Peddireddy","year":"2025"},{"key":"ref117","volume-title":"Information Technology\u2014Cloud Computing\u2014Edge Computing Landscape","year":"2020"},{"key":"ref118","doi-asserted-by":"publisher","DOI":"10.1109\/icis64839.2024.10887444"},{"key":"ref119","doi-asserted-by":"publisher","DOI":"10.1109\/access.2024.3361752"},{"issue":"5","key":"ref120","first-page":"1554","article-title":"Integrating blockchain technology and artificial intelligence: Synergies, perspectives, challenges and research directions","volume":"15","author":"Tyagi","year":"2020","journal-title":"J. Inf. Assurance Secur."},{"key":"ref121","doi-asserted-by":"publisher","DOI":"10.1002\/cpe.6466"},{"key":"ref122","doi-asserted-by":"publisher","DOI":"10.3390\/s22051969"},{"key":"ref123","doi-asserted-by":"publisher","DOI":"10.3390\/s24061888"},{"key":"ref124","doi-asserted-by":"publisher","DOI":"10.1109\/ojcoms.2021.3078081"},{"key":"ref125","doi-asserted-by":"publisher","DOI":"10.1109\/jiot.2020.3042090"},{"key":"ref126","volume-title":"Definition of Digital Twin\u2014Gartner Information Technology Glossary","year":"2025"},{"key":"ref127","doi-asserted-by":"publisher","DOI":"10.1002\/9781119862321"},{"key":"ref128","doi-asserted-by":"publisher","DOI":"10.1007\/978-3-030-86507-8_7"},{"key":"ref129","doi-asserted-by":"publisher","DOI":"10.1016\/j.sysarc.2024.103120"},{"key":"ref130","doi-asserted-by":"publisher","DOI":"10.1016\/j.compeleceng.2024.109709"},{"key":"ref131","volume-title":"IT\/OT Convergence Needs a Human-Centered Approach","author":"Smith","year":"2025"},{"key":"ref132","doi-asserted-by":"publisher","DOI":"10.55248\/gengpi.5.1124.3328"},{"key":"ref133","doi-asserted-by":"publisher","DOI":"10.1109\/access.2024.3482987"},{"key":"ref134","doi-asserted-by":"publisher","DOI":"10.1002\/wcm.2258"},{"key":"ref135","article-title":"Cybersecurity in the age of AI and IoT: Emerging threats and defense strategies","author":"McCall","year":"2024"}],"container-title":["IEEE Access"],"original-title":[],"link":[{"URL":"http:\/\/xplorestaging.ieee.org\/ielx8\/6287639\/10820123\/11208597.pdf?arnumber=11208597","content-type":"unspecified","content-version":"vor","intended-application":"similarity-checking"}],"deposited":{"date-parts":[[2025,10,29]],"date-time":"2025-10-29T17:39:44Z","timestamp":1761759584000},"score":1,"resource":{"primary":{"URL":"https:\/\/ieeexplore.ieee.org\/document\/11208597\/"}},"subtitle":[],"short-title":[],"issued":{"date-parts":[[2025]]},"references-count":135,"URL":"https:\/\/doi.org\/10.1109\/access.2025.3623834","relation":{},"ISSN":["2169-3536"],"issn-type":[{"value":"2169-3536","type":"electronic"}],"subject":[],"published":{"date-parts":[[2025]]}}}