State-of-the-art of cybersecurity in the power system: Simulation, detection, mitigation, and research gaps

Abstract

In a power system, the communication link can be compromised by intruders who can launch cyberattacks by capturing data packets, sending falsified packets, or stopping data packets from reaching their destination. Moreover, intruders can compromise control devices using supply chain attacks, firmware patching attacks, and insider attackers. Numerous cyberattacks have been reported previously, and cyberattacks are becoming more frequent since attackers are aware of their socioeconomic impacts. Extensive research has been conducted on developing platforms to simulate cyberattacks, studying different types of cyberattacks, investigating the adverse effects of a successful cyberattack on different components of the power system, designing ways to detect anomalies in the power system using electrical measurements, and proposing ways to mitigate the adverse effects of the detected cyberattack. This paper presents a review of state-of-the-art of cybersecurity in the power system, reviewing available simulation tools for studying the cybersecurity of the power system, classifying components of the power system vulnerable to cyberattacks, and summarizing the adverse effects of a successful cyberattack on each component in the power system. Furthermore, different types of cyberattacks and detection and mitigation methods are classified. Research gaps in the cybersecurity of the power system are also discussed.