Cyber Vulnerabilities of Energy Systems

Abstract

In an era characterized by extensive use of and reliance on information and communications technology (ICT), cyber–physical power systems (CPPSs) have emerged as a critical integral of modern power infrastructures, providing vital energy sources to consumers, communities, and industries worldwide. The integration of ICT in these systems, while beneficial, introduces a rapidly evolving range of cybersecurity challenges that significantly threaten their confidentiality, integrity, and availability. To address this, our article offers a comprehensive and timely survey of the current landscape of cyber vulnerabilities in CPPS, reflecting the latest developments in the field up to the present. This includes an in-depth analysis of the diverse types of cyber threats to CPPS and their potential consequences, underscoring the necessity for a broad, multidisciplinary approach. Our review is distinguished by its thoroughness and timeliness, covering recent research to offer one of the most current overviews of cybersecurity in CPPSs. We adopt a holistic perspective, integrating technical, societal, environmental, and policy implications, thereby providing a more comprehensive understanding of cybersecurity in CPPSs. We delve into the complexities of cyberattacks, exploring sophisticated, targeted attacks alongside common threats, and emphasize the dynamic nature of cyber threats, providing insights into their evolution and future trends. Additionally, our review highlights critical yet often overlooked challenges, such as system visibility and standardization in security protocols, arguing their significance in enhancing CPPS resilience. Furthermore, our work gives special attention to the aspects of restoration and recovery postcyberattack, an area less emphasized in the existing literature. Through this comprehensive overview of the current state and evolving challenges of CPPS security, our article serves as an indispensable resource for research, practice, and policymaking dedicated to safeguarding the safety, reliability, and resilience of ICT-empowered energy systems.