
126 ◾ Cyber-Physical Systems
In order to become aware of such intrusions on substation networks made by cyber-attackers,
an anomaly detection algorithm that employs benefits such as monitoring in real time, analysis of
possible effects of intrusion, and approaches for mitigation is examined [1]. Monitoring the power
system in real time enables the algorithm to rapidly and efficiently determine the status of com-
puters and equipment in order to allow a maximum number of connections to be implemented,
as well as to authenticate the connection via response times and IP addresses. Such features can
detect and track anomalies such as unsuccessful logon ...