Summary
The increasing digitalisation of transmission substations has expanded the cyber-attack surface of power system Operational Technology (OT), creating new challenges for Transmission
Read more Read lessSystem Operators (TSOs). While OT cybersecurity monitoring solutions provide valuable technical insights, their outputs are often difficult to interpret by power system engineers due to a lack of physical and operational context.
This paper proposes a cyber–physical digital twin framework, referred to as ”DigiTEL
CyberTwin”, that integrates passive OT cybersecurity monitoring with a Digital Twin representation of a high voltage substation. The framework enables cybersecurity vulnerabilities and communication dependencies to be correlated with physical assets, spatial context, and functional roles, providing an intuitive and engineer centric view of cybersecurity risks.
A Proof-of-Concept (PoC) implementation is presented for a 400/110/20 kV transmission substation, demonstrating the feasibility of linking real-time OT cybersecurity information to a digital twin environment without impacting operational processes. The proposed cyber– physical correlation method supports enhanced cybersecurity awareness, incident analysis, training, and interdisciplinary communication. [1][2][3]
Additional informations
| Publication type | Session Materials |
|---|---|
| Reference | D2_10667_2026 |
| Publication year | |
| Publisher | CIGRE |
| Country | Romania |
| Study committees | |
| File size | 756 KB |
| Price for non member | 30 € |
| Price for member | 30 € |
Authors
LEU Bogdan - Transelectrica; LISMAN Catalin - Transelectrica; IONITA Cristina - Transelectrica; SUDITU Alexandru - Enevo Cybersec; CERNAT Dragos - Enevo Cybersec; STREMTAN Mircea - Enevo Cybersec; NEGREA Dan - TIAB; OXANII Cristian - TIAB
Keywords
Digital Twin, Cybersecurity in Power Systems, Substation Automation, OT, Situational Awareness
