Cyber-Physical Security in Smart Grids: A Comprehensive Guide to Key Research Areas, Threats, and Countermeasures
Source abstract
Abstract
Recent technological advances in communication networks, intelligent devices, power electronics, and phasor measurement units have significantly transformed the operation of modern power systems. This evolution gave rise to smart grids, which enable the flow of real-time information on the operational state of the grid and of control commands across multiple communication infrastructures, using a variety of protocols and standards, between control centers and devices deployed throughout the grid’s physical structure. At the same time, it has exposed power systems to new challenges and threats, due to the vulnerabilities inherited from the different components they integrate. Attackers have a variety of attacks at their disposal, by which they can disturb the availability of electricity as well as cause damage to the smart grid’s physical structure. Therefore, cybersecurity has become an important aspect of the smart grid concept. This field of research has attracted the attention of many researchers, and in the last decade or so, the number of studies on the cyber-physical security of smart grids has surged significantly. Proportionally, an important number of survey papers were published as well. It has therefore become more difficult to navigate literature on the topic of smart grid cyber-physical security due to the large number of papers, the complexity of the grid’s structure, and the variety of attacks, resolution methods, and techniques. To address this issue, in this work, we present a comprehensive review of existing literature reviews on the topic of smart grid cyber-physical security. We reviewed 100 survey papers, which were categorized into general surveys, attack-specific surveys, method-specific surveys, and component-specific surveys. We discussed and highlighted research tendencies in terms of attacks and methods used to protect smart grids. Additionally, we presented an overview of the different research challenges and possible future directions.
Source: crossref · Quality: baseline
Research context
OpenAlex topics: Smart Grid Security and Resilience · Power System Optimization and Stability · Power Systems Fault Detection
SciVX discovery tags are terminology-based. OpenAlex topics are source-provided classifications.
Affiliations
Laboratoire des Méthodes de Conception de Systèmes (LMCS), École Nationale Supérieure d’Informatique (ESI), BP68M, Oued Smar, Algiers 16270, Algeria
LabISEN, ISEN Yncréa Ouest, 29200 Brest, France
Institut de Recherche Dupuy de Lôme (UMR CNRS 6027), University of Brest, 29238 Brest, France
References (100+)
Show source-provided references
1. Borlase, S. (2017). Smart Meters and Advanced Metering Infrastructure. Smart Grids: Advanced Technologies and Solutions, CRC Press. [2nd ed.]. Chapter 13.10.1201/9781351228480 ↗
2. A Survey on the Detection Algorithms for False Data Injection Attacks in Smart Grids10.1109/TSG.2019.2949998 ↗
3. Salazar, L., Castro, S.R., Lozano, J., Koneru, K., Zambon, E., Huang, B., Baldick, R., Krotofil, M., Rojas, A., and Cardenas, A.A. (2024, January 19–23). A Tale of Two Industroyers: It was the Season of Darkness. Proceedings of the 2024 IEEE Symposium on Security and Privacy (SP), San Francisco, CA, USA.10.1109/SP54263.2024.00162 ↗
4. Kaspersky ICS CERT (2025, November 11). H2 2022–Brief Overview of Main Incidents in Industrial Cybersecurity. Available online: https://ics-cert.kaspersky.com/media/Kaspersky-ICS-CERT-H2-2022-brief-overview-of-main-incidents-En.pdf?.
5. Center for Strategic and International Studies (2025, November 11). Significant Cyber Incidents Since 2006. Available online: https://csis-website-prod.s3.amazonaws.com/s3fs-public/2023-04/230404_Significant_Cyber_Events.pdf.
6. Analysis of the Colonial Pipeline Cybersecurity Incident
7. Zang, T., Wang, Z., Wei, X., Zhou, Y., Wu, J., and Zhou, B. (2023). Current Status and Perspective of Vulnerability Assessment of Cyber-Physical Power Systems Based on Complex Network Theory. Energies, 16.10.3390/en16186509 ↗
8. Kitchenham, B. (2004). Procedures for Performing Systematic Reviews, Keele University. Technical Report TR/SE-0401; NICTA Technical Report 0400011T.1.
9. Kitchenham, B., and Charters, S. (2007). Guidelines for Performing Systematic Literature Reviews in Software Engineering, EBSE. Technical Report EBSE-2007-01.
10. Borlase, S. (2017). Overview of the Electric Utility Industry. Smart Grids: Advanced Technologies and Solutions, CRC Press. [2nd ed.]. Chapter 1.10.1201/b13003-1 ↗
11. Keyhani, A. (2019). Design of Smart Power Grid Renewable Energy Systems, John Wiley & Sons, Ltd.. [3rd ed.].10.1002/9781119573265 ↗
12. Borlase, S. (2013). Smart Grid Technologies. Smart Grids: Infrastructure, Technology, and Solutions, CRC Press. [1st ed.]. Chapter 3.
13. Smart grid technologies: Communication technologies and standards10.1109/TII.2011.2166794 ↗
14. A Survey on Smart Grid Communication Infrastructures: Motivations, Requirements and Challenges10.1109/SURV.2012.021312.00034 ↗
15. Cyber-physical attacks and defences in the smart grid: A survey10.1049/iet-cps.2016.0019 ↗
16. The path of the smart grid10.1109/MPE.2009.934876 ↗
17. Borlase, S. (2017). Real-Time Grid Management. Smart Grids: Advanced Technologies and Solutions, CRC Press. [2nd ed.]. Chapter 5.10.1201/9781351228480 ↗
18. Padilla, E. (2015). Substation Automation Systems: Design and Implementation, John Wiley & Sons, Ltd.10.1002/9781118987216 ↗
19. Borlase, S. (2017). Advanced Protection and Control for the Smart Grid. Smart Grids: Advanced Technologies and Solutions, CRC Press. [2nd ed.]. Chapter 6.10.1201/9781351228480 ↗
20. Borlase, S. (2017). Communications Systems. Smart Grids: Advanced Technologies and Solutions, CRC Press. [2nd ed.]. Chapter 4.10.1201/9781351228480 ↗
21. Borlase, S. (2017). Smart Energy Resources: Supply and Demand. Smart Grids: Advanced Technologies and Solutions, CRC Press. [2nd ed.]. Chapter 3.10.1201/9781351228480 ↗
22. Toward Integrating Distributed Energy Resources and Storage Devices in Smart Grid
23. Microgrids energy management systems: A critical review on methods, solutions, and prospects10.1016/j.apenergy.2018.04.103 ↗
24. A survey on Advanced Metering Infrastructure10.1016/j.ijepes.2014.06.025 ↗
25. Trends in Microgrid Control10.1109/TSG.2013.2295514 ↗
26. State of the Art in Research on Microgrids: A Review10.1109/ACCESS.2015.2443119 ↗
27. Borlase, S. (2017). Microgrids. Smart Grids: Advanced Technologies and Solutions, CRC Press. [2nd ed.]. Chapter 19.10.1201/9781351228480 ↗
28. Communication network requirements for major smart grid applications in HAN, NAN and WAN10.1016/j.comnet.2014.03.029 ↗
29. Kabalci, E., and Kabalci, Y. (2019). Introduction to Smart Grid Architecture. Smart Grids and Their Communication Systems, Springer.10.1007/978-981-13-1768-2 ↗
30. (2011). IEEE Standard for Synchrophasor Data Transfer for Power Systems (Standard No. IEEE Std C37.118.2-2011 (Revision of IEEE Std C37.118-2005)).
31. Cali, U., Kuzlu, M., Pipattanasomporn, M., Kempf, J., and Bai, L. (2021). Smart Grid Standards and Protocols. Digitalization of Power Markets and Systems Using Energy Informatics, Springer International Publishing.10.1007/978-3-030-83301-5 ↗
32. Smart grid cyber-physical systems: Communication technologies, standards and challenges10.1007/s11276-021-02579-1 ↗
33. Review on cyber-physical and cyber-security system in smart grid: Standards, protocols, constraints, and recommendations10.1016/j.jnca.2022.103540 ↗
34. Borlase, S. (2017). Cybersecurity for the Smart Grid. Smart Grids: Advanced Technologies and Solutions, CRC Press. [2nd ed.]. Chapter 17.10.1201/9781351228480-2 ↗
35. Morris, T.H., Pan, S., and Adhikari, U. (2012, January 22–26). Cyber security recommendations for wide area monitoring, protection, and control systems. Proceedings of the 2012 IEEE Power and Energy Society General Meeting, San Diego, CA, USA.10.1109/PESGM.2012.6345127 ↗
36. Katulić, F., Sumina, D., Erceg, I., and Groš, S. (2022, January 22–24). Enhancing Modbus/TCP-Based Industrial Automation and Control Systems Cybersecurity Using a Misuse-Based Intrusion Detection System. Proceedings of the 2022 International Symposium on Power Electronics, Electrical Drives, Automation and Motion (SPEEDAM), Sorrento, Italy.10.1109/SPEEDAM53979.2022.9842239 ↗
37. Darwish, I., Igbe, O., Celebi, O., Saadawi, T., and Soryal, J. (2015, January 3–5). Smart Grid DNP3 Vulnerability Analysis and Experimentation. Proceedings of the 2015 IEEE 2nd International Conference on Cyber Security and Cloud Computing, New York, NY, USA.10.1109/CSCloud.2015.86 ↗
38. Khan, R., McLaughlin, K., Laverty, D., and Sezer, S. (2016, January 17–21). Analysis of IEEE C37.118 and IEC 61850-90-5 synchrophasor communication frameworks. Proceedings of the 2016 IEEE Power and Energy Society General Meeting (PESGM), Boston, MA, USA.10.1109/PESGM.2016.7741343 ↗
39. Cyber security of a power grid: State-of-the-art10.1016/j.ijepes.2017.12.020 ↗
40. A Survey of Denial-of-Service Attacks and Solutions in the Smart Grid10.1109/ACCESS.2020.3026923 ↗
41. Irvene, C., Shekari, T., Formby, D., and Beyah, R. (2019, January 10). If I Knew Then What I Know Now: On Reevaluating DNP3 Security Using Power Substation Traffic. Proceedings of the Fifth Annual Industrial Control System Security (ICSS) Workshop, San Juan, PR, USA.10.1145/3372318.3372324 ↗
42. Yang, Y., Jiang, H.T., McLaughlin, K., Gao, L., Yuan, Y., Huang, W., and Sezer, S. (2015, January 26–30). Cybersecurity test-bed for IEC 61850 based smart substations. Proceedings of the 2015 IEEE Power & Energy Society General Meeting, Denver, CO, USA.10.1109/PESGM.2015.7286357 ↗
43. Graham, J., Olson, R., and Howard, R. (2011). Cyber Security Essentials, CRC Press. [1st ed.].
44. van Tilborg, H.C.A., and Jajodia, S. (2011). Network Bandwidth Denial of Service (DoS). Encyclopedia of Cryptography and Security, Springer. [2nd ed.].10.1007/978-1-4419-5906-5 ↗
45. An analysis of smart grid attacks and countermeasures10.12720/jcm.8.8.473-479 ↗
46. van Tilborg, H.C.A., and Jajodia, S. (2011). Jamming Resistance. Encyclopedia of Cryptography and Security, Springer. [2nd ed.].10.1007/978-1-4419-5906-5 ↗
47. A taxonomy of DDoS attack and DDoS defense mechanisms10.1145/997150.997156 ↗
48. Impact of Distributed Denial-of-Service Attack on Advanced Metering Infrastructure10.1007/s11277-015-2510-3 ↗
49. Ashraf, S., Shawon, M.H., Khalid, H.M., and Muyeen, S.M. (2021). Denial-of-Service Attack on IEC 61850-Based Substation Automation System: A Crucial Cyber Threat Towards Smart Substation Pathways. Sensors, 21.10.3390/s21196415 ↗
50. Ortega-Fernandez, I., and Liberati, F. (2023). A Review of Denial of Service Attack and Mitigation in the Smart Grid Using Reinforcement Learning. Energies, 16.10.3390/en16020635 ↗
51. Poisoned GOOSE: Exploiting the GOOSE protocol
52. Rana, S., Zhu, H., Lee, C.W., Nicol, D.M., and Shin, I. (2012, January 3–7). The Not-So-Smart Grid: Preliminary work on identifying vulnerabilities in ANSI C12.22. Proceedings of the 2012 IEEE Globecom Workshops, Anaheim, CA, USA.10.1109/GLOCOMW.2012.6477810 ↗
53. Farooq, S.M., Nabirasool, S., Kiran, S., Suhail Hussain, S., and Ustun, T.S. (2018, January 18–21). MPTCP based mitigation of Denial of Service (DoS) Attack in PMU Communication Networks. Proceedings of the 2018 IEEE International Conference on Power Electronics, Drives and Energy Systems (PEDES), Chennai, India.10.1109/PEDES.2018.8707542 ↗
54. Ibtissam, K., Abdelrahman, M.S., Alrashide, A., and Mohammed, O.A. (July, January 28). Assessment of Protection Schemes and their Security Under Denial of Service Attacks. Proceedings of the 2022 IEEE International Conference on Environment and Electrical Engineering and 2022 IEEE Industrial and Commercial Power Systems Europe (EEEIC/I&CPS Europe), Prague, Czech Republic.10.1109/EEEIC/ICPSEurope54979.2022.9854745 ↗
55. Chlela, M., Joos, G., and Kassouf, M. (2016, January 26–30). Impact of cyber-attacks on islanded microgrid operation. Proceedings of the Workshop on Communications, Computation and Control for Resilient Smart Energy Systems, RSES ’16, Lisbon, Portugal.10.1145/2939940.2939943 ↗
56. A comprehensive review of cyber-attacks and defense mechanisms for improving security in smart grid energy systems: Past, present and future10.1016/j.epsr.2022.108975 ↗
57. False data injection attacks against state estimation in electric power grids10.1145/1952982.1952995 ↗
58. False Data Injection on State Estimation in Power Systems—Attacks, Impacts, and Defense: A Survey10.1109/TII.2016.2614396 ↗
59. A Review of False Data Injection Attacks Against Modern Power Systems10.1109/TSG.2015.2495133 ↗
60. Olowu, T.O., Dharmasena, S., Jafari, H., and Sarwat, A. (2020, January 13). Investigation of False Data Injection Attacks on Smart Inverter Settings. Proceedings of the 2020 IEEE CyberPELS (CyberPELS), Miami, FL, USA.10.1109/CyberPELS49534.2020.9311541 ↗
61. False Data Injection Attacks Against Synchronization Systems in Microgrids10.1109/TSG.2021.3080693 ↗
62. Gao, W., Morris, T., Reaves, B., and Richey, D. (2010, January 18–20). On SCADA control system command and response injection and intrusion detection. Proceedings of the 2010 eCrime Researchers Summit, Dallas, TX, USA.
63. Resonance Attacks on Load Frequency Control of Smart Grids10.1109/TSG.2017.2661307 ↗
64. Analyzing Replay Attack Impact in DC Microgrid Consensus Control: Detection and Mitigation by Kalman-Filter-Based Observer10.1109/ACCESS.2023.3317799 ↗
65. Mo, Y., and Sinopoli, B. (October, January 30). Secure control against replay attacks. Proceedings of the 2009 47th Annual Allerton Conference on Communication, Control, and Computing (Allerton), Monticello, IL, USA.10.1109/ALLERTON.2009.5394956 ↗
66. A Novel Approach for Mitigation of Replay and Masquerade Attacks in Smartgrids Using IEC 61850 Standard10.1109/ACCESS.2019.2948117 ↗
67. Reinforcement Learning Solution for Cyber-Physical Systems Security Against Replay Attacks10.1109/TIFS.2023.3268532 ↗
68. Time Synchronization Attack in Smart Grid: Impact and Analysis10.1109/TSG.2012.2227342 ↗
69. Evaluation of the vulnerability of phasor measurement units to GPS spoofing attacks10.1016/j.ijcip.2012.09.003 ↗
70. Man-in-the-middle attacks and defence in a power system cyber-physical testbed10.1049/cps2.12014 ↗
71. A Survey of Man In The Middle Attacks10.1109/COMST.2016.2548426 ↗
72. Hadjidemetriou, L., Tertytchny, G., Karbouj, H., Charalambous, C., Michael, M.K., Sazos, M., and Maniatakos, M. (2020, January 26–28). Demonstration of Man in the Middle Attack on a Feeder Power Factor Correction Unit. Proceedings of the 2020 IEEE PES Innovative Smart Grid Technologies Europe (ISGT-Europe), The Hague, The Netherlands.10.1109/ISGT-Europe47291.2020.9248779 ↗
73. Review on Testing of Cyber Physical Systems: Methods and Testbeds10.1109/ACCESS.2018.2869834 ↗
74. SCADA vulnerabilities and attacks: A review of the state-of-the-art and open issues10.1016/j.cose.2022.103028 ↗
75. A Survey on Smart Grid Cyber-Physical System Testbeds10.1109/COMST.2016.2627399 ↗
76. Gupta, K., Sahoo, S., Panigrahi, B.K., Blaabjerg, F., and Popovski, P. (2021). On the Assessment of Cyber Risks and Attack Surfaces in a Real-Time Co-Simulation Cybersecurity Testbed for Inverter-Based Microgrids. Energies, 14.10.3390/en14164941 ↗
77. Kuffel, R., Giesbrecht, J., Maguire, T., Wierckx, R., and McLaren, P. (1995, January 21–23). RTDS-a fully digital power system simulator operating in real time. Proceedings of the Proceedings 1995 International Conference on Energy Management and Power Delivery EMPD ’95, Singapore.10.1109/ICDS.1995.492357 ↗
78. A Real-Time Cyber-Physical Simulation Testbed for Cybersecurity Assessment of Large-Scale Power Systems10.1109/TIA.2024.3457877 ↗
79. Multifunctional cyber-physical system testbed based on a source-grid combined scheduling control simulation system10.1049/iet-gtd.2016.1853 ↗
80. Hardware-based microgrid testbed to facilitate development of Distributed Energy Resource (DER) systems for sustainable growth
81. Dong, J., Zhang, L., and Cheng, D. (2024, January 27–29). A Testbed for Studying Security in Synchrophasor-Based State Estimation of Electric Power Transmission Grid. Proceedings of the 2nd International Conference on Internet of Things, Communication and Intelligent Technology, Paris, France.
82. Smart Grids Transmission Network Testbed: Design, Deployment, and Beyond10.1109/OJCOMS.2024.3517340 ↗
83. Real-time cyber physical system testbed for power system security and control10.1016/j.ijepes.2017.01.016 ↗
84. Analyzing the Cyber-Physical Impact of Cyber Events on the Power Grid10.1109/TSG.2015.2432013 ↗
85. Cyber–physical system security for the electric power grid10.1109/JPROC.2011.2165269 ↗
86. Securing smart grid: Cyber attacks, countermeasures, and challenges10.1109/MCOM.2012.6257525 ↗
87. Cyber-security on smart grid: Threats and potential solutions10.1016/j.comnet.2019.107094 ↗
88. On Vulnerability and Resilience of Cyber-Physical Power Systems: A Review10.1109/JSYST.2021.3123904 ↗
89. Krause, T., Ernst, R., Klaer, B., Hacker, I., and Henze, M. (2021). Cybersecurity in Power Grids: Challenges and Opportunities. Sensors, 21.10.3390/s21186225 ↗
90. Smart Grid Cyber-Physical Situational Awareness of Complex Operational Technology Attacks: A Review10.1145/3565570 ↗
91. Cyber-security in smart grid: Survey and challenges10.1016/j.compeleceng.2018.01.015 ↗
92. A Survey on Security Communication and Control for Smart Grids Under Malicious Cyber Attacks10.1109/TSMC.2018.2884952 ↗
93. Smart Grid Cyber-Physical Attack and Defense: A Review10.1109/ACCESS.2021.3058628 ↗
94. Electric power grid resilience to cyber adversaries: State of the art10.1109/ACCESS.2020.2993233 ↗
95. Cyber-physical resilience of electrical power systems against malicious attacks: A review10.1007/s40518-018-0094-8 ↗
96. Tufail, S., Parvez, I., Batool, S., and Sarwat, A. (2021). A Survey on Cybersecurity Challenges, Detection, and Mitigation Techniques for the Smart Grid. Energies, 14.10.3390/en14185894 ↗
97. Alsuwian, T., Shahid Butt, A., and Amin, A.A. (2022). Smart Grid Cyber Security Enhancement: Challenges and Solutions—A Review. Sustainability, 14.10.3390/su142114226 ↗
98. A Comprehensive Review of Cybersecurity in Inverter-Based Smart Power System Amid the Boom of Renewable Energy10.1109/ACCESS.2022.3163551 ↗
99. Security of Wide-Area Monitoring, Protection, and Control (WAMPAC) Systems of the Smart Grid: A Survey on Challenges and Opportunities10.1109/COMST.2023.3251899 ↗
100. Khoei, T.T., Slimane, H.O., and Kaabouch, N. (2022). A comprehensive survey on the cyber-security of smart grids: Cyber-attacks, detection, countermeasure techniques, and future directions. arXiv.10.4236/cn.2022.144009 ↗