Behavior analysis and anomaly detection for a digital substation on cyber-physical system

Yoojin Kwon, Sangyoum Lee, Ralph King, Jong In Lim, Huy Kang Kim

Research output: Contribution to journalArticlepeer-review

12 Citations (Scopus)


The electric power system infrastructure has begun to adopt digital information technologies such as transmission control protocol/internet protocol (TCP/IP) and Ethernet infrastructures. With this adoption, information technology-centric network and system management (NSM) tools are used to manage the intermediate communication systems and electric devices in digital substations. However, the technology to monitor the cyber–physical System (CPS) statistics for the intelligent electronic devices (IEDs) and serial communication for a digital substation does not exist yet. In this paper, we aim to propose cyber-physical analysis methodologies of a digital substation system, concerning issues of (1) International Electrotechnical Commission (IEC) 62351-7 based network and system management, (2) behavior analysis of the CPS, (3) cyber–physical anomaly detection systems, and (4) a testbed for a digital substation. By collaborating with Electric Power Research Institute (EPRI), a cyber security testbed for the digital substation has been developed to implement the use cases and analyze potential security threats. Newly integrated methodologies for information handling are expected to lead to improved safety and reliability for the CPS of electric power grid systems.

Original languageEnglish
Article number326
JournalElectronics (Switzerland)
Issue number3
Publication statusPublished - 2019 Mar


  • CPS testbed
  • Cyber-physical system
  • Digital substation
  • IEC 61850
  • IEC 62351-7
  • Network management system

ASJC Scopus subject areas

  • Control and Systems Engineering
  • Signal Processing
  • Hardware and Architecture
  • Computer Networks and Communications
  • Electrical and Electronic Engineering


Dive into the research topics of 'Behavior analysis and anomaly detection for a digital substation on cyber-physical system'. Together they form a unique fingerprint.

Cite this