Next-Generation Smart Grid Cybersecurity: A Systematic Review of OT Cyber Threats, AI-Driven Defense, Cyber Deception Techniques, and Emerging Security Strategies
Hind Lakhal, Mourad Zegrari, Ayoub Bahnasse
Abstract
The swift modernization of conventional power grids into smart grids has substantially increased their attack surface, making them vulnerable to advanced cyber threats. These cyberattacks can jeopardize the seamless operation of a smart grid, leading to significant economic losses and potential malicious control. Securing these infrastructures is now of paramount importance to ensure their resilience and optimal performance. Existing studies often tackle security issues separately without considering the complexity of Operational Technology systems, requiring advanced strategies for threat detection and mitigation. To bridge this gap, this study aims to systematically review recent research in accordance with PRISMA guidelines to examine the role of Artificial Intelligence, Edge Computing, Digital Twin technology, 5G/6G, Software-Defined Networking, Cyber Deception, and Blockchain in enhancing smart grid cybersecurity. This study demonstrates that Artificial Intelligence improves anomaly detection, while Edge Computing reduces latency, conserves bandwidth, and accelerates threat mitigation. Furthermore, Digital Twin technology enables continuous simulations of real-world attacks and defense scenarios. The convergence of 5G/6G and Software-Defined Networking enhances network flexibility and scalability, while Zero Trust and Blockchain provide secure, decentralized frameworks and enhance data integrity. Meanwhile, Cyber Deception strengthens defenses by misleading attackers. This research sheds light on key opportunities for future studies, focusing on the development of AI-driven testbeds, Digital Twin simulations, and the integration of Quantum Machine Learning for sophisticated threat analysis. Additionally, the integration of Explainable Artificial Intelligence can foster trust in automated decisions. Tackling these challenges is essential for strengthening the resilience of smart grids against evolving cyber threats.