{"status":"ok","message-type":"work","message-version":"1.0.0","message":{"indexed":{"date-parts":[[2026,7,7]],"date-time":"2026-07-07T15:28:02Z","timestamp":1783438082830,"version":"3.54.6"},"reference-count":97,"publisher":"MDPI AG","issue":"12","license":[{"start":{"date-parts":[[2025,12,14]],"date-time":"2025-12-14T00:00:00Z","timestamp":1765670400000},"content-version":"vor","delay-in-days":0,"URL":"https:\/\/creativecommons.org\/licenses\/by\/4.0\/"}],"content-domain":{"domain":[],"crossmark-restriction":false},"short-container-title":["Systems"],"abstract":"<jats:p>The modern power grid is considered a Smart Grid (SG) when it relies extensively on technologies that integrate traditional power infrastructure with Information and Communication Technologies (ICTs). The dependence on Internet of Things (IoT)-based communication systems to operate physical power devices transforms the grid into a complex system of systems (SoS), introducing cybersecurity vulnerabilities across various SG layers. Several surveys have addressed SG cybersecurity, but none have correlated recent developments with the NIST seven-domain framework, a comprehensive model covering all major SG domains and crucial for domain-level trend analysis. To bridge this gap, we systematically review and classify studies by impacted NIST domain, threat type, and methodology (including tools\/platforms used). We note that the scope of applicability of this study is 60 studies (2011\u20132024) selected exclusively from IEEE Xplore. Unlike prior reviews, this work maps contributions to the NIST domain architecture, examines temporal trends in research, and synthesizes cybersecurity defenses and their limitations. The analysis reveals that research is unevenly distributed: the Operations domain accounts for ~35% of all studies, followed by Generation ~25% and Distribution ~14%, while domains like Transmission (~9%) and Service Provider (5%) are comparatively under-studied. We find a heavy reliance on simulation-based tools (~46% of studies) such as MATLAB\/Simulink, and False Data Injection (FDI) attacks are predominantly studied, comprising approximately 36% of analyzed attacks. The broader objective of this work is to guide researchers and SG stakeholders (e.g., utilities, policy-makers) toward understanding and coordinating strategies for improving system-level cyber-resilience, which is crucial for future SGs, while avoiding any overstatement of findings beyond the reviewed evidence.<\/jats:p>","DOI":"10.3390\/systems13121119","type":"journal-article","created":{"date-parts":[[2025,12,15]],"date-time":"2025-12-15T09:36:39Z","timestamp":1765791399000},"page":"1119","update-policy":"https:\/\/doi.org\/10.3390\/mdpi_crossmark_policy","source":"Crossref","is-referenced-by-count":1,"title":["Cybersecurity in Smart Grids: A Domain-Centric Review"],"prefix":"10.3390","volume":"13","author":[{"ORCID":"https:\/\/orcid.org\/0009-0009-3969-6125","authenticated-orcid":false,"given":"Sahithi","family":"Angara","sequence":"first","affiliation":[{"name":"Department of Electrical Engineering and Computer Science, College of Engineering, Embry-Riddle Aeronautical University, Daytona Beach, FL 32114, USA"}],"role":[{"vocabulary":"crossref","role":"author"}]},{"ORCID":"https:\/\/orcid.org\/0000-0002-3933-1187","authenticated-orcid":false,"given":"Laxima","family":"Niure Kandel","sequence":"additional","affiliation":[{"name":"Department of Electrical Engineering and Computer Science, College of Engineering, Embry-Riddle Aeronautical University, Daytona Beach, FL 32114, USA"}],"role":[{"vocabulary":"crossref","role":"author"}]},{"ORCID":"https:\/\/orcid.org\/0009-0008-0492-2658","authenticated-orcid":false,"given":"Raju","family":"Dhakal","sequence":"additional","affiliation":[{"name":"Department of Electrical Engineering and Computer Science, College of Engineering, Embry-Riddle Aeronautical University, Daytona Beach, FL 32114, USA"}],"role":[{"vocabulary":"crossref","role":"author"}]}],"member":"1968","published-online":{"date-parts":[[2025,12,14]]},"reference":[{"key":"ref_1","unstructured":"Gopstein, A., Nguyen, C., O\u2019Fallon, C., Hastings, N., and Wollman, D.A. (2025, April 13). NIST Framework and Roadmap for Smart Grid Interoperability Standards, Release 4.0. NIST, Available online: https:\/\/www.nist.gov\/publications\/nist-framework-and-roadmap-smart-grid-interoperability-standards-release-40."},{"key":"ref_2","unstructured":"Smart Grid Group (2025, April 13). NIST, Available online: https:\/\/www.nist.gov\/ctl\/smart-connected-systems-division\/smart-grid-group."},{"key":"ref_3","unstructured":"International Energy Agency (IEA) (2025, April 13). Energy and AI\u2014Analysis. Available online: https:\/\/www.iea.org\/reports\/energy-and-ai."},{"key":"ref_4","unstructured":"American Clean Power (ACP) (2025, April 13). New Report Finds Urgent Need to Expand Energy Supply to Meet Rapidly Growing Future Demand. Available online: https:\/\/cleanpower.org\/news\/us-national-power-demand-study."},{"key":"ref_5","doi-asserted-by":"crossref","first-page":"981","DOI":"10.1109\/SURV.2011.122111.00145","article-title":"Cyber Security and Privacy Issues in Smart Grids","volume":"14","author":"Liu","year":"2012","journal-title":"IEEE Commun. Surv. Tutor."},{"key":"ref_6","doi-asserted-by":"crossref","unstructured":"Abraham, D., Toftegaard, \u00d8., Binu Ben Jose, D.R., Gebremedhin, A., and Yildirim Yayilgan, S. (2024). Consequence simulation of cyber attacks on key smart grid business cases. Front. Energy Res., 12.","DOI":"10.3389\/fenrg.2024.1395954"},{"key":"ref_7","doi-asserted-by":"crossref","first-page":"10","DOI":"10.1186\/s42400-023-00200-w","article-title":"Study of smart grid cyber-security, examining architectures, communication networks, cyber-attacks, countermeasure techniques, and challenges","volume":"7","author":"Achaal","year":"2024","journal-title":"Cybersecurity"},{"key":"ref_8","doi-asserted-by":"crossref","unstructured":"Cultice, T., Ionel, D., and Thapliyal, H. (2020, January 14\u201316). Smart home sensor anomaly detection using convolutional autoencoder neural network. Proceedings of the 2020 IEEE International Symposium on Smart Electronic Systems (iSES) (Formerly iNiS), Chennai, India. Available online: https:\/\/ieeexplore.ieee.org\/document\/9426175.","DOI":"10.1109\/iSES50453.2020.00026"},{"key":"ref_9","doi-asserted-by":"crossref","first-page":"3223","DOI":"10.1109\/TSG.2023.3337340","article-title":"Bayesian GAN-Based False Data Injection Attack Detection in Active Distribution Grids with DERs","volume":"15","author":"Xie","year":"2024","journal-title":"IEEE Trans. Smart Grid"},{"key":"ref_10","doi-asserted-by":"crossref","first-page":"3992","DOI":"10.1109\/TSG.2023.3235945","article-title":"A False Data Injection Attack Detection Strategy for Unbalanced Distribution Networks State Estimation","volume":"14","author":"Wei","year":"2023","journal-title":"IEEE Trans. Smart Grid"},{"key":"ref_11","doi-asserted-by":"crossref","unstructured":"Fernando, N.S., Acken, J.M., and Bass, R.B. (2021, January 22\u201324). Developing a distributed trust model for distributed energy resources. Proceedings of the 2021 IEEE Conference on Technologies for Sustainability (SusTech), Irvine, CA, USA. Available online: https:\/\/ieeexplore.ieee.org\/document\/9467436.","DOI":"10.1109\/SusTech51236.2021.9467436"},{"key":"ref_12","doi-asserted-by":"crossref","first-page":"3565","DOI":"10.1109\/JSYST.2020.3039402","article-title":"Design of Robust Mutual Authentication and Key Establishment Security Protocol for Cloud-Enabled Smart Grid Communication","volume":"15","author":"Sureshkumar","year":"2021","journal-title":"IEEE Syst. J."},{"key":"ref_13","doi-asserted-by":"crossref","first-page":"2357","DOI":"10.1109\/TSG.2022.3147693","article-title":"Co-Estimation of State and FDI Attacks and Attack Compensation Control for Multi-Area Load Frequency Control Systems Under FDI and DoS Attacks","volume":"13","author":"Chen","year":"2022","journal-title":"IEEE Trans. Smart Grid"},{"key":"ref_14","doi-asserted-by":"crossref","unstructured":"Zhan, L., Dehghanian, P., and Mehrani, S. (2023, January 22\u201325). Minimizing the risk of attacks in electric power systems via effective grid reinforcement of counter-threat technologies. Proceedings of the 2023 IEEE PES GTD International Conference and Exposition (GTD), Istanbul, Turkiye. Available online: https:\/\/ieeexplore.ieee.org\/document\/10261483.","DOI":"10.1109\/GTD49768.2023.00078"},{"key":"ref_15","doi-asserted-by":"crossref","unstructured":"Maharjan, M., Poudel, S., Mix, S.R., and McDermott, T.E. (2024, January 19\u201322). Cybersecurity Assessment in DER-rich Distribution Operations: Criticality Levels and Impact Analysis. Proceedings of the 2024 IEEE Power & Energy Society Innovative Smart Grid Technologies Conference (ISGT), Washington, DC, USA. Available online: https:\/\/ieeexplore.ieee.org\/document\/10454167.","DOI":"10.1109\/ISGT59692.2024.10454167"},{"key":"ref_16","doi-asserted-by":"crossref","first-page":"2390","DOI":"10.1109\/TSG.2022.3218934","article-title":"Detection of Microgrid Cyberattacks Using Network and System Management","volume":"14","author":"Karanfil","year":"2023","journal-title":"IEEE Trans. Smart Grid"},{"key":"ref_17","unstructured":"Google Cloud (2025, April 20). TRITON Malware: Attackers Deploy New ICS Attack Framework. Google Cloud Blog. Available online: https:\/\/cloud.google.com\/blog\/topics\/threat-intelligence\/attackers-deploy-new-ics-attack-framework-triton."},{"key":"ref_18","unstructured":"(2025, April 20). China-Linked Group RedEcho Targets the Indian Power Sector Amid Heightened Border Tensions. Available online: https:\/\/www.recordedfuture.com\/research\/redecho-targeting-indian-power-sector."},{"key":"ref_19","unstructured":"(2025, April 20). Cyber Attacks on the Power Grid. Available online: https:\/\/www.ironnet.com\/blog\/cyber-attacks-on-the-power-grid."},{"key":"ref_20","unstructured":"Cyber-Attack Against Ukrainian Critical Infrastructure (2025, April 20). CISA, Available online: https:\/\/www.cisa.gov\/news-events\/ics-alerts\/ir-alert-h-16-056-01."},{"key":"ref_21","unstructured":"Ferah, M., Joncas, H., and Marquis, M. (2025, October 09). Cyberattaque: Le Site Web d\u2019Hydro-Qu\u00e9bec Paralys\u00e9. La Presse. Available online: https:\/\/www.lapresse.ca\/actualites\/2023-04-13\/cyberattaque\/le-site-web-d-hydro-quebec-paralyse.php."},{"key":"ref_22","doi-asserted-by":"crossref","first-page":"112423","DOI":"10.1016\/j.rser.2022.112423","article-title":"Comprehensive survey and taxonomies of false data injection attacks in smart grids: Attack models, targets, and impacts","volume":"163","author":"Reda","year":"2022","journal-title":"Renew. Sustain. Energy Rev."},{"key":"ref_23","doi-asserted-by":"crossref","first-page":"102647","DOI":"10.1016\/j.rineng.2024.102647","article-title":"Securing modern power systems: Implementing comprehensive strategies to enhance resilience and reliability against cyber-attacks","volume":"23","author":"Abdelkader","year":"2024","journal-title":"Results Eng."},{"key":"ref_24","doi-asserted-by":"crossref","unstructured":"Rawat, D.B., and Bajracharya, C. (2015, January 9\u201312). Cyber security for smart grid systems: Status, challenges and perspectives. Proceedings of the SoutheastCon 2015, Fort Lauderdale, FL, USA. Available online: https:\/\/ieeexplore.ieee.org\/document\/7132891.","DOI":"10.1109\/SECON.2015.7132891"},{"key":"ref_25","doi-asserted-by":"crossref","first-page":"35846","DOI":"10.1109\/ACCESS.2022.3163551","article-title":"A Comprehensive Review of Cybersecurity in Inverter-Based Smart Power System Amid the Boom of Renewable Energy","volume":"10","author":"Tuyen","year":"2022","journal-title":"IEEE Access"},{"key":"ref_26","doi-asserted-by":"crossref","first-page":"1630","DOI":"10.1109\/TSG.2015.2495133","article-title":"A Review of False Data Injection Attacks Against Modern Power Systems","volume":"8","author":"Liang","year":"2017","journal-title":"IEEE Trans. Smart Grid"},{"key":"ref_27","doi-asserted-by":"crossref","first-page":"1609","DOI":"10.1109\/TIFS.2017.2676721","article-title":"Modeling and Mitigating Impact of False Data Injection Attacks on Automatic Generation Control","volume":"12","author":"Tan","year":"2017","journal-title":"IEEE Trans. Inf. Forensics Secur."},{"key":"ref_28","doi-asserted-by":"crossref","first-page":"18147","DOI":"10.1109\/ACCESS.2024.3361039","article-title":"A Comprehensive Review on Cyber-Attacks in Power Systems: Impact Analysis, Detection, and Cyber Security","volume":"12","author":"Tatipatri","year":"2024","journal-title":"IEEE Access"},{"key":"ref_29","doi-asserted-by":"crossref","unstructured":"Hasnat, M.A., and Rahnamay-Naeini, M. (2019, January 13\u201315). A data-driven dynamic state estimation for smart grids under DoS attack using state correlations. Proceedings of the 2019 North American Power Symposium (NAPS), Wichita, KS, USA. Available online: https:\/\/ieeexplore.ieee.org\/document\/9000307.","DOI":"10.1109\/NAPS46351.2019.9000307"},{"key":"ref_30","doi-asserted-by":"crossref","first-page":"3114","DOI":"10.1109\/TSG.2022.3229486","article-title":"Cyber-Resilient Self-Triggered Distributed Control of Networked Microgrids Against Multi-Layer DoS Attacks","volume":"14","author":"Ge","year":"2023","journal-title":"IEEE Trans. Smart Grid"},{"key":"ref_31","doi-asserted-by":"crossref","first-page":"796","DOI":"10.1109\/TSG.2011.2159818","article-title":"Distributed Intrusion Detection System in a Multi-Layer Network Architecture of Smart Grids","volume":"2","author":"Zhang","year":"2011","journal-title":"IEEE Trans. Smart Grid"},{"key":"ref_32","doi-asserted-by":"crossref","unstructured":"Gholami, S., Saha, S., and Aldeen, M. (2017, January 26\u201329). A cyber attack resilient control for distributed energy resources. Proceedings of the 2017 IEEE PES Innovative Smart Grid Technologies Conference Europe (ISGT-Europe), Turin, Italy. Available online: https:\/\/ieeexplore.ieee.org\/document\/8260213.","DOI":"10.1109\/ISGTEurope.2017.8260213"},{"key":"ref_33","doi-asserted-by":"crossref","first-page":"1582","DOI":"10.1109\/TSG.2021.3136559","article-title":"Data-Driven Cyber-Attack Detection for PV Farms via Time-Frequency Domain Features","volume":"13","author":"Guo","year":"2022","journal-title":"IEEE Trans. Smart Grid"},{"key":"ref_34","doi-asserted-by":"crossref","first-page":"25565","DOI":"10.1109\/JIOT.2022.3197805","article-title":"Electricity-Theft Detection for Change-and-Transmit Advanced Metering Infrastructure","volume":"9","author":"Ibrahem","year":"2022","journal-title":"IEEE Internet Things J."},{"key":"ref_35","doi-asserted-by":"crossref","first-page":"103275","DOI":"10.1109\/ACCESS.2022.3209698","article-title":"Impact and vulnerability analysis of IEC 61850 in smart grids using multiple HIL real-time testbeds","volume":"10","author":"Hemmati","year":"2022","journal-title":"IEEE Access"},{"key":"ref_36","doi-asserted-by":"crossref","unstructured":"Pedroza, G., Le Gall, P., Gaston, C., and Bersey, F. (2016, January 17\u201320). Timed-model-based method for security analysis and testing of smart grid systems. Proceedings of the 2016 IEEE 19th International Symposium on Real-Time Distributed Computing (ISORC), York, UK. Available online: https:\/\/ieeexplore.ieee.org\/document\/7515609.","DOI":"10.1109\/ISORC.2016.15"},{"key":"ref_37","doi-asserted-by":"crossref","first-page":"1707","DOI":"10.1109\/TSG.2015.2396994","article-title":"Power System Reliability Evaluation with SCADA Cybersecurity Considerations","volume":"6","author":"Zhang","year":"2015","journal-title":"IEEE Trans. Smart Grid"},{"key":"ref_38","doi-asserted-by":"crossref","unstructured":"Azab, M., and Eltoweissy, M. (2014, January 13\u201315). CyPhyMASC: Evolutionary monitoring, analysis, sharing and control platform for SmartGrid defense. Proceedings of the 2014 IEEE 15th International Conference on Information Reuse and Integration (IEEE IRI 2014), Redwood City, CA, USA. Available online: https:\/\/ieeexplore.ieee.org\/document\/7051950.","DOI":"10.1109\/IRI.2014.7051950"},{"key":"ref_39","first-page":"3482","article-title":"Analysis of malware-induced cyber attacks in cyber-physical power systems","volume":"67","author":"Xu","year":"2020","journal-title":"IEEE Trans. Circuits Syst. II Express Briefs"},{"key":"ref_40","doi-asserted-by":"crossref","first-page":"1809","DOI":"10.1109\/JSYST.2024.3446231","article-title":"Attack Design for Maximum Malware Spread Through EVs Commute and Charge in Power-Transportation Systems","volume":"18","author":"Poudel","year":"2024","journal-title":"IEEE Syst. J."},{"key":"ref_41","doi-asserted-by":"crossref","unstructured":"Liu, D., Zhang, X., and Tse, C.K. (2018, January 27\u201330). Effect of Malware Spreading on Propagation of Cascading Failure in Cyber-Coupled Power Systems. Proceedings of the 2018 IEEE International Symposium on Circuits and Systems (ISCAS), Florence, Italy. Available online: https:\/\/ieeexplore.ieee.org\/document\/8351591.","DOI":"10.1109\/ISCAS.2018.8351591"},{"key":"ref_42","doi-asserted-by":"crossref","unstructured":"Alvee, S.R.B., Ahn, B., Ahmad, S., Kim, K.-T., Kim, T., and Zeng, J. (2022, January 1\u20132). Device-centric firmware malware detection for smart inverters using deep transfer learning. Proceedings of the 2022 IEEE Design Methodologies Conference (DMC), Bath, UK. Available online: https:\/\/ieeexplore.ieee.org\/document\/9906538.","DOI":"10.1109\/DMC55175.2022.9906538"},{"key":"ref_43","doi-asserted-by":"crossref","unstructured":"Li, H., and Pan, H. (2024, January 20\u201323). A defense strategy against false data injection attack in smart grid based on multi-stage game. Proceedings of the 2024 9th International Conference on Power and Renewable Energy (ICPRE), Guangzhou, China. Available online: https:\/\/ieeexplore.ieee.org\/document\/10768530.","DOI":"10.1109\/ICPRE62586.2024.10768530"},{"key":"ref_44","doi-asserted-by":"crossref","first-page":"4077","DOI":"10.1109\/TSG.2023.3345314","article-title":"Adaptive Deep Reinforcement Learning Algorithm for Distribution System Cyber Attack Defense with High Penetration of DERs","volume":"15","author":"Selim","year":"2024","journal-title":"IEEE Trans. Smart Grid"},{"key":"ref_45","doi-asserted-by":"crossref","first-page":"3705","DOI":"10.1109\/TSG.2021.3069331","article-title":"Cross-Layer Distributed Control Strategy for Cyber Resilient Microgrids","volume":"12","author":"Zhou","year":"2021","journal-title":"IEEE Trans. Smart Grid"},{"key":"ref_46","doi-asserted-by":"crossref","unstructured":"Kang, B., Maynard, P., McLaughlin, K., Sezer, S., Andr\u00e9n, F., Seitl, C., Kupzog, F., and Strasser, T. (2015, January 8\u201311). Investigating cyber-physical attacks against IEC 61850 photovoltaic inverter installations. Proceedings of the 2015 IEEE 20th Conference on Emerging Technologies & Factory Automation (ETFA), Luxembourg. Available online: https:\/\/ieeexplore.ieee.org\/document\/7301457.","DOI":"10.1109\/ETFA.2015.7301457"},{"key":"ref_47","doi-asserted-by":"crossref","first-page":"1577","DOI":"10.1109\/TSG.2020.3029937","article-title":"Cyberattacks Against Event-Based Analysis in Micro-PMUs: Attack Models and Counter Measures","volume":"12","author":"Kamal","year":"2021","journal-title":"IEEE Trans. Smart Grid"},{"key":"ref_48","doi-asserted-by":"crossref","unstructured":"Chavez, A., Lai, C., Jacobs, N., Hossain-McKenzie, S., Jones, C.B., Johnson, J., and Summers, A. (May, January 29). Hybrid intrusion detection system design for distributed energy resource systems. Proceedings of the 2019 IEEE CyberPELS (CyberPELS), Knoxville, TN, USA. Available online: https:\/\/ieeexplore.ieee.org\/document\/8925064.","DOI":"10.1109\/CyberPELS.2019.8925064"},{"key":"ref_49","doi-asserted-by":"crossref","unstructured":"Ravikumar, G., Singh, A., Babu, J.R., Moataz, A., and Govindarasu, M. (2020, January 19\u201323). D-IDS for Cyber-Physical DER Modbus System\u2014Architecture, Modeling, Testbed-Based Evaluation. Proceedings of the 2020 Resilience Week (RWS), Salt Lake City, UT, USA. Available online: https:\/\/ieeexplore.ieee.org\/document\/9241259.","DOI":"10.1109\/RWS50334.2020.9241259"},{"key":"ref_50","doi-asserted-by":"crossref","first-page":"80778","DOI":"10.1109\/ACCESS.2019.2920326","article-title":"A Deep and Scalable Unsupervised Machine Learning System for Cyber-Attack Detection in Large-Scale Smart Grids","volume":"7","author":"Karimipour","year":"2019","journal-title":"IEEE Access"},{"key":"ref_51","doi-asserted-by":"crossref","first-page":"1805","DOI":"10.1109\/TSG.2020.2965797","article-title":"Flexible Machine Learning-Based Cyberattack Detection Using Spatiotemporal Patterns for Distribution Systems","volume":"11","author":"Cui","year":"2020","journal-title":"IEEE Trans. Smart Grid"},{"key":"ref_52","doi-asserted-by":"crossref","unstructured":"Akash, A.R., Ahn, B., Jenkins, A., Khot, A., Silva, L., Tavares-Vengas, H., and Kim, T. (2023, January 24\u201326). Quantum convolutional neural network-based online malware file detection for smart grid devices. Proceedings of the 2023 IEEE Design Methodologies Conference (DMC), Miami, FL, USA. Available online: https:\/\/ieeexplore.ieee.org\/document\/10412597.","DOI":"10.1109\/DMC58182.2023.10412597"},{"key":"ref_53","doi-asserted-by":"crossref","unstructured":"Gunduz, M.Z., and Das, R. (2018, January 22\u201325). A comparison of cyber-security oriented testbeds for IoT-based smart grids. Proceedings of the 2018 6th International Symposium on Digital Forensic and Security (ISDFS), Antalya, Turkey. Available online: https:\/\/ieeexplore.ieee.org\/document\/8355329.","DOI":"10.1109\/ISDFS.2018.8355329"},{"key":"ref_54","doi-asserted-by":"crossref","unstructured":"de Carvalho, R.S., and Saleem, D. (2019, January 4\u20137). Recommended Functionalities for Improving Cybersecurity of Distributed Energy Resources. Proceedings of the 2019 Resilience Week (RWS), San Antonio, TX, USA. Available online: https:\/\/ieeexplore.ieee.org\/document\/8972000.","DOI":"10.1109\/RWS47064.2019.8972000"},{"key":"ref_55","doi-asserted-by":"crossref","first-page":"151019","DOI":"10.1109\/ACCESS.2020.3016826","article-title":"Cyber-Physical Power System (CPPS): A Review on Modeling, Simulation, and Analysis with Cyber Security Applications","volume":"8","author":"Yohanandhan","year":"2020","journal-title":"IEEE Access"},{"key":"ref_56","doi-asserted-by":"crossref","first-page":"1258","DOI":"10.1109\/TSG.2023.3302309","article-title":"A Transfer Learning-Based Method for Cyber-Attack Tolerance in Distributed Control of Microgrids","volume":"15","author":"Xia","year":"2024","journal-title":"IEEE Trans. Smart Grid"},{"key":"ref_57","doi-asserted-by":"crossref","first-page":"1640","DOI":"10.1109\/TSG.2020.3034745","article-title":"Countering FDI Attacks on DERs Coordinated Control System Using FMI-Compatible Cosimulation","volume":"12","author":"Jafarigiv","year":"2021","journal-title":"IEEE Trans. Smart Grid"},{"key":"ref_58","doi-asserted-by":"crossref","first-page":"4106","DOI":"10.1109\/JSYST.2021.3136683","article-title":"Deep Autoencoder-Based Anomaly Detection of Electricity Theft Cyberattacks in Smart Grids","volume":"16","author":"Takiddin","year":"2022","journal-title":"IEEE Syst. J."},{"key":"ref_59","doi-asserted-by":"crossref","first-page":"1529","DOI":"10.1109\/TSG.2020.3023426","article-title":"Defense Strategy Against Load Redistribution Attacks on Power Systems Considering Insider Threats","volume":"12","author":"Liu","year":"2021","journal-title":"IEEE Trans. Smart Grid"},{"key":"ref_60","doi-asserted-by":"crossref","unstructured":"Formby, D., Jung, S.S., Walters, S., and Beyah, R. (2014, January 3\u20136). A physical overlay framework for insider threat mitigation of power system devices. Proceedings of the 2014 IEEE International Conference on Smart Grid Communications (SmartGridComm), Venice, Italy. Available online: https:\/\/ieeexplore.ieee.org\/document\/7007774.","DOI":"10.1109\/SmartGridComm.2014.7007774"},{"key":"ref_61","doi-asserted-by":"crossref","first-page":"190","DOI":"10.1109\/JIOT.2015.2459049","article-title":"BLITHE: Behavior Rule-Based Insider Threat Detection for Smart Grid","volume":"3","author":"Bao","year":"2016","journal-title":"IEEE Internet Things J."},{"key":"ref_62","doi-asserted-by":"crossref","unstructured":"Chen, Q., Zhou, M., Cai, Z., and Su, S. (2022, January 15\u201317). Compliance Checking Based Detection of Insider Threat in Industrial Control System of Power Utilities. Proceedings of the 2022 7th Asia Conference on Power and Electrical Engineering (ACPEE), Hangzhou, China. Available online: https:\/\/ieeexplore.ieee.org\/document\/9784085.","DOI":"10.1109\/ACPEE53904.2022.9784085"},{"key":"ref_63","doi-asserted-by":"crossref","first-page":"3690","DOI":"10.1109\/TSG.2020.2979160","article-title":"A Cyber-Attack Resilient Distributed Control Strategy in Islanded Microgrids","volume":"11","author":"Zhou","year":"2020","journal-title":"IEEE Trans. Smart Grid"},{"key":"ref_64","doi-asserted-by":"crossref","unstructured":"Rekik, M., Chtourou, Z., Gransart, C., and Atieh, A. (2018, January 19\u201322). A Cyber-Physical Threat Analysis for Microgrids. Proceedings of the 2018 15th International Multi-Conference on Systems, Signals & Devices (SSD), Yasmine Hammamet, Tunisia. Available online: https:\/\/ieeexplore.ieee.org\/document\/8570411.","DOI":"10.1109\/SSD.2018.8570411"},{"key":"ref_65","doi-asserted-by":"crossref","first-page":"1476","DOI":"10.1109\/TSG.2015.2466611","article-title":"A DER Attack-Mitigation Differential Game for Smart Grid Security Analysis","volume":"7","author":"Srikantha","year":"2016","journal-title":"IEEE Trans. Smart Grid"},{"key":"ref_66","doi-asserted-by":"crossref","first-page":"865","DOI":"10.1109\/TSG.2011.2159406","article-title":"Anomaly Detection for Cybersecurity of the Substations","volume":"2","author":"Ten","year":"2011","journal-title":"IEEE Trans. Smart Grid"},{"key":"ref_67","doi-asserted-by":"crossref","unstructured":"Chen, Z., Zhu, J., Li, S., and Luo, T. (2020, January 18\u201321). Detection of false data injection attack in automatic generation control system with wind energy based on fuzzy support vector machine. Proceedings of the IECON 2020 The 46th Annual Conference of the IEEE Industrial Electronics Society, Singapore. Available online: https:\/\/ieeexplore.ieee.org\/document\/9255020.","DOI":"10.1109\/IECON43393.2020.9255020"},{"key":"ref_68","doi-asserted-by":"crossref","first-page":"2566","DOI":"10.1109\/TSG.2020.3042926","article-title":"False Data Injection Attacks Against State-of-Charge Estimation of Battery Energy Storage Systems in Smart Distribution Networks","volume":"12","author":"Zhuang","year":"2021","journal-title":"IEEE Trans. Smart Grid"},{"key":"ref_69","doi-asserted-by":"crossref","first-page":"4471","DOI":"10.1109\/TSG.2021.3080693","article-title":"False Data Injection Attacks Against Synchronization Systems in Microgrids","volume":"12","author":"Mohamed","year":"2021","journal-title":"IEEE Trans. Smart Grid"},{"key":"ref_70","doi-asserted-by":"crossref","unstructured":"Ravikumar, G., Hyder, B., and Govindarasu, M. (2020, January 6\u20137). Hardware-in-the-Loop CPS Security Architecture for DER Monitoring and Control Applications. Proceedings of the 2020 IEEE Texas Power and Energy Conference (TPEC), College Station, TX, USA. Available online: https:\/\/ieeexplore.ieee.org\/document\/9042578.","DOI":"10.1109\/TPEC48276.2020.9042578"},{"key":"ref_71","doi-asserted-by":"crossref","first-page":"1330","DOI":"10.1109\/TSG.2016.2622289","article-title":"Microgrid Risk Analysis Considering the Impact of Cyber Attacks on Solar PV and ESS Control Systems","volume":"8","author":"Liu","year":"2017","journal-title":"IEEE Trans. Smart Grid"},{"key":"ref_72","doi-asserted-by":"crossref","first-page":"1589","DOI":"10.1109\/TSG.2020.3029954","article-title":"Perturbation-Based Diagnosis of False Data Injection Attack Using Distributed Energy Resources","volume":"12","author":"Jhala","year":"2021","journal-title":"IEEE Trans. Smart Grid"},{"key":"ref_73","doi-asserted-by":"crossref","first-page":"271","DOI":"10.1109\/TSG.2017.2737826","article-title":"Intelligent Electronic Devices with Collaborative Intrusion Detection Systems","volume":"10","author":"Hong","year":"2019","journal-title":"IEEE Trans. Smart Grid"},{"key":"ref_74","doi-asserted-by":"crossref","unstructured":"Park, K., Ahn, B., Kim, J., Won, D., Noh, Y., Choi, J., and Kim, T. (2021, January 14\u201315). An Advanced Persistent Threat (APT)-Style Cyberattack Testbed for Distributed Energy Resources (DER). Proceedings of the 2021 IEEE Design Methodologies Conference (DMC), Bath, UK. Available online: https:\/\/ieeexplore.ieee.org\/document\/9529953.","DOI":"10.1109\/DMC51747.2021.9529953"},{"key":"ref_75","doi-asserted-by":"crossref","first-page":"50961","DOI":"10.1109\/ACCESS.2021.3067331","article-title":"IoT-Enabled Smart Energy Grid: Applications and Challenges","volume":"9","author":"Abir","year":"2021","journal-title":"IEEE Access"},{"key":"ref_76","doi-asserted-by":"crossref","unstructured":"de Souza, E., Ardakanian, O., and Nikolaidis, I. (2020, January 7\u201311). A Co-simulation Platform for Evaluating Cyber Security and Control Applications in the Smart Grid. Proceedings of the ICC 2020\u20142020 IEEE International Conference on Communications (ICC), Dublin, Ireland. Available online: https:\/\/ieeexplore.ieee.org\/document\/9149212.","DOI":"10.1109\/ICC40277.2020.9149212"},{"key":"ref_77","doi-asserted-by":"crossref","first-page":"1934","DOI":"10.1109\/JIOT.2017.2690522","article-title":"Achieving Efficient and Secure Data Acquisition for Cloud-Supported Internet of Things in Smart Grid","volume":"4","author":"Guan","year":"2017","journal-title":"IEEE Internet Things J."},{"key":"ref_78","doi-asserted-by":"crossref","unstructured":"Ackley, D., and Yang, H. (2020, January 2\u20136). Exploration of Smart Grid Device Cybersecurity Vulnerability Using Shodan. Proceedings of the 2020 IEEE Power & Energy Society General Meeting (PESGM), Montreal, QC, Canada. Available online: https:\/\/ieeexplore.ieee.org\/document\/9281544.","DOI":"10.1109\/PESGM41954.2020.9281544"},{"key":"ref_79","doi-asserted-by":"crossref","first-page":"137968","DOI":"10.1109\/ACCESS.2019.2942414","article-title":"Security and Efficiency Enhanced Revocable Access Control for Fog-Based Smart Grid System","volume":"7","author":"Wen","year":"2019","journal-title":"IEEE Access"},{"key":"ref_80","unstructured":"(2025, October 02). Power and Control Systems. Available online: https:\/\/www.mathworks.com\/solutions\/energy-production\/utilities-energy\/power-system-studies.html."},{"key":"ref_81","unstructured":"OPAL-RT Technologies (2025, October 02). OPAL-RT Website. Available online: https:\/\/www.opal-rt.com\/."},{"key":"ref_82","unstructured":"(2025, October 01). OpenDSS. Available online: https:\/\/www.epri.com\/pages\/sa\/opendss."},{"key":"ref_83","unstructured":"ns-3 Project (2025, October 01). ns-3. Available online: https:\/\/www.nsnam.org\/."},{"key":"ref_84","unstructured":"PSCAD (2025, October 01). PSCAD Website. Available online: https:\/\/www.pscad.com\/."},{"key":"ref_85","unstructured":"EMTP (2025, October 02). EMTP\u2014Products. Available online: https:\/\/www.emtp.com\/products\/emtp."},{"key":"ref_86","unstructured":"ePHASORSIM (2025, October 02). OPAL-RT TECHNOLOGIES, Inc. Available online: https:\/\/www.opal-rt.com\/software-toolboxes\/ephasorsim\/."},{"key":"ref_87","unstructured":"Blanchet, B., Smyth, B., Cheval, V., and Sylvestre, M. (2025, October 02). ProVerif 2.05: Automatic Cryptographic Protocol Verifier\u2014User Manual and Tutorial. Available online: https:\/\/bblanche.gitlabpages.inria.fr\/proverif\/\/."},{"key":"ref_88","unstructured":"PowerWorld Corporation (2025, October 02). The Visual Approach to Electric Power Systems. Available online: https:\/\/www.powerworld.com\/."},{"key":"ref_89","doi-asserted-by":"crossref","unstructured":"Steinbrink, C., Blank-Babazadeh, M., El-Ama, A., Holly, S., L\u00fcers, B., Nebel-Wenner, M., Ram\u00edrez Acosta, R.P., Raub, T., Schwarz, J.S., and Stark, S. (2019). CPES Testing with mosaik: Co-Simulation Planning, Execution and Analysis. Appl. Sci., 9.","DOI":"10.3390\/app9050923"},{"key":"ref_90","doi-asserted-by":"crossref","first-page":"446","DOI":"10.1109\/COMST.2016.2627399","article-title":"A Survey on Smart Grid Cyber-Physical System Testbeds","volume":"19","author":"Cintuglu","year":"2017","journal-title":"IEEE Commun. Surv. Tutor."},{"key":"ref_91","doi-asserted-by":"crossref","first-page":"110776","DOI":"10.1016\/j.comnet.2024.110776","article-title":"Detecting the cyber-physical-social cooperated APTs in high-DER-penetrated smart grids: Threats, current work and challenges","volume":"254","author":"Lu","year":"2024","journal-title":"Comput. Netw."},{"key":"ref_92","doi-asserted-by":"crossref","first-page":"4998","DOI":"10.1109\/TSG.2024.3373008","article-title":"Enhancing Cyber-Resiliency of DER-Based Smart Grid: A Survey","volume":"15","author":"Liu","year":"2024","journal-title":"IEEE Trans. Smart Grid"},{"key":"ref_93","doi-asserted-by":"crossref","unstructured":"Krause, T., Ernst, R., Klaer, B., Hacker, I., and Henze, M. (2021). Cybersecurity in Power Grids: Challenges and Opportunities. Sensors, 21.","DOI":"10.3390\/s21186225"},{"key":"ref_94","doi-asserted-by":"crossref","first-page":"101299","DOI":"10.1016\/j.esr.2024.101299","article-title":"Smart grids and renewable energy systems: Perspectives and grid integration challenges","volume":"51","author":"Khalid","year":"2024","journal-title":"Energy Strategy Rev."},{"key":"ref_95","unstructured":"(2025, November 27). Smart Grid System Testbed Facility. NIST, Available online: https:\/\/www.nist.gov\/programs-projects\/smart-grid-system-testbed-facility."},{"key":"ref_96","unstructured":"Electric Power Research Institute (EPRI) (2025, November 27). Information, Communication and Cyber Security. Available online: https:\/\/msites.epri.com\/der-vpp-ferc2222\/Information-Communication-and-Cyber-Security."},{"key":"ref_97","doi-asserted-by":"crossref","unstructured":"Johnson, C., Badger, M., Waltermire, D., Snyder, J., and Skorupka, C. (2016). Guide to Cyber Threat Information Sharing, National Institute of Standards and Technology. Available online: https:\/\/csrc.nist.gov\/pubs\/sp\/800\/150\/final.","DOI":"10.6028\/NIST.SP.800-150"}],"container-title":["Systems"],"original-title":[],"language":"en","link":[{"URL":"https:\/\/www.mdpi.com\/2079-8954\/13\/12\/1119\/pdf","content-type":"unspecified","content-version":"vor","intended-application":"similarity-checking"}],"deposited":{"date-parts":[[2025,12,15]],"date-time":"2025-12-15T10:20:12Z","timestamp":1765794012000},"score":1,"resource":{"primary":{"URL":"https:\/\/www.mdpi.com\/2079-8954\/13\/12\/1119"}},"subtitle":[],"short-title":[],"issued":{"date-parts":[[2025,12,14]]},"references-count":97,"journal-issue":{"issue":"12","published-online":{"date-parts":[[2025,12]]}},"alternative-id":["systems13121119"],"URL":"https:\/\/doi.org\/10.3390\/systems13121119","relation":{},"ISSN":["2079-8954"],"issn-type":[{"value":"2079-8954","type":"electronic"}],"subject":[],"published":{"date-parts":[[2025,12,14]]}}}