⚡ electrical engineering

Multidimensional Resilience for Electrical Power Systems: Systematic Review, Integrated Index, and Validation under Real-World Cyber-Physical Attack Scenarios

This study introduces a Multidimensional Resilience Index (MDRI) that reveals how the coupling of physical, operational, digital-cyber, climatic, and economic-regulatory dimensions under real-world cyber-physical attacks causes a 46-fold increase in resilience loss compared to single-vector assessments, thereby demonstrating the critical failure of conventional isolation-based approaches.

Original authors: Isaac Ortega Romero, Ioannis Zografopoulos

Published 2026-06-09

📖 5 min read🧠 Deep dive

CC BY 4.0

Original authors: Isaac Ortega Romero, Ioannis Zografopoulos

Original paper licensed under CC BY 4.0 (http://creativecommons.org/licenses/by/4.0/). ✨ This is an AI-generated explanation of the paper below. It is not written or endorsed by the authors. For technical accuracy, refer to the original paper. Read full disclaimer

Imagine the electrical power grid not as a simple machine, but as a massive, living orchestra. For a long time, experts have tried to keep this orchestra playing by checking each section separately: the strings (physical wires), the conductor's baton (operational decisions), and the sheet music (digital data). They assumed that if the strings were strong and the conductor was skilled, the music would continue.

This paper argues that this "checklist" approach is dangerously flawed. In the modern world, these sections don't just play side-by-side; they are deeply tangled. If the sheet music gets corrupted, the conductor can't lead, and the strings might snap. If the weather gets too hot, the strings expand and the sheet music fades. The paper claims that to truly understand if the orchestra will survive a disaster, you have to listen to how all these parts scream at each other simultaneously, not just individually.

Here is a breakdown of the paper's findings using simple analogies:

1. The Five "Musicians" of the Grid

The authors say the grid's ability to bounce back (resilience) depends on five distinct but connected areas:

The Physical (The Instruments): The actual wires, towers, and generators. If these break, the music stops.
The Operational (The Conductor): The people and software making real-time decisions to keep the rhythm steady.
The Digital-Cyber (The Sheet Music): The data and communication lines that tell the conductor what is happening. If the sheet music is stolen or altered, the conductor is flying blind.
The Climatic-External (The Weather): The storm outside. A hurricane doesn't just break a string; it might also blow out the lights in the control room.
The Economic-Regulatory (The Budget & Rules): The money and laws that decide if the orchestra can buy new instruments or hire more musicians.

2. The Problem: "Isolated" vs. "Compound" Attacks

The paper reviewed 120 previous studies and found a major blind spot. Most researchers only looked at one or two musicians at a time.

The Old Way: They would ask, "What happens if a tree falls on a wire?" (Physical) or "What happens if a hacker steals the sheet music?" (Cyber).
The New Reality: The paper shows that when these problems happen together, the damage isn't just added up; it multiplies.

The Analogy: Imagine a car crash.

Scenario A: You hit a pothole (Physical damage). The car shakes, but you keep driving.
Scenario B: You hit a pothole while your brakes fail (Physical + Operational) and your GPS is lying to you (Cyber).
The Paper's Finding: The damage in Scenario B isn't just "Pothole + Bad Brakes." It's a total crash that is eight times worse than the sum of the parts. The paper calls this "nonlinear amplification." When the physical, operational, and digital parts fail together, they create a chain reaction that destroys the system much faster than anyone predicted.

3. The "Amplifiers": Weather and Rules

The paper introduces a second layer of danger: Exogenous Stressors. These are outside forces that make the internal problems worse.

The Weather: A blizzard doesn't just break a wire; it makes it harder for the repair crew to get there and harder for the digital signals to travel.
The Rules/Money: If the laws say "don't spend money on winterizing equipment," the system is already weak before the storm even hits.

The authors found that when you add these outside pressures (like a severe winter storm combined with strict budget cuts) to an internal attack, the damage gets amplified by another factor of six.

4. The "MDRI": A New Scorecard

To measure this, the authors created a new tool called the Multidimensional Resilience Index (MDRI). Think of this as a new scorecard for the orchestra that doesn't just count broken instruments, but calculates how badly the sections are failing together.

They tested this scorecard using a "worst-case" scenario inspired by a hypothetical 2025 cyber-attack on Poland's grid:

Attack 1 (Single Vector): One plant is hacked. The system wobbles but recovers. The score is low (0.132).
Attack 2 (Multi-Vector): Six plants are hacked, communications are cut, and the system loses control. Because the physical, operational, and digital failures happened at once, the score jumps 8 times higher (1.054). The system collapses.
Attack 3 (The Perfect Storm): All nine plants are hacked, plus a massive blizzard hits, plus the budget rules prevent a quick fix. The score skyrockets to 6.090. This is a 46-fold increase in damage compared to the first attack.

5. The Big Takeaway

The paper concludes that you cannot fix the grid by just strengthening one part.

If you make the wires stronger (Physical) but ignore the cyber security (Digital), a hacker can still take you down.
If you have great cyber security but no money for repairs (Economic), a storm will still win.

The authors argue that resilience is not a property of a single wire or a single rule. It is an emergent property—a quality that only appears when you look at how all five dimensions interact. If you ignore the connections between them, you are building a house on a foundation you think is solid, but which actually collapses the moment the wind blows from the wrong direction.

In short: The paper proves that in a complex, modern power grid, a small problem in one area can trigger a catastrophic chain reaction across all others, and we need a new way of measuring risk that accounts for this "perfect storm" effect.

Technical Summary: Multidimensional Resilience for Electrical Power Systems

Problem Statement
The accelerating decarbonization of energy systems has transformed electrical power systems (EPS) into complex infrastructures where threats interact to generate systemic vulnerabilities that conventional, single-dimension resilience approaches fail to capture. While resilience assessment has expanded to include physical, operational, digital-cyber, climatic-external, and economic-regulatory dimensions, existing literature largely examines these in isolation or as adjacent pairs. This fragmentation overlooks cross-dimensional couplings, specifically the nonlinear amplification that occurs when physical, operational, and digital-cyber dimensions are jointly compromised, and the intensification imposed by exogenous climatic and economic-regulatory stressors. Consequently, systems deemed resilient under dimension-specific criteria may exhibit critical vulnerabilities when inter-domain interactions are accounted for.

Methodology
The study employs a hybrid quantitative methodology comprising three main phases:

Systematic Literature Review: Following the PRISMA 2020 protocol with backward and forward snowballing, the authors analyzed 120 studies published between 2021 and 2026. The review categorized literature across five analytical dimensions (physical, operational, digital-cyber, climatic-external, and economic-regulatory) to identify methodological gaps, interaction patterns, and the absence of generalized formulations for cross-dimensional disturbance propagation.
Framework Development (MDRI): A Multidimensional Resilience Index (MDRI) was developed to quantify endogenous couplings and exogenous amplification. The formulation separates resilience loss into:
- Endogenous Core ( $M$ ): Captures coupled degradation among physical, operational, and digital-cyber dimensions. It distinguishes between an additive regime (single-vector attacks) and a coupled regime (simultaneous multi-vector failures), utilizing a coupling parameter $\gamma_i$ to model nonlinear amplification.
- Exogenous Amplifiers: Climatic-external and economic-regulatory dimensions act as unidirectional stressors that multiplicatively scale the endogenous core degradation.
Validation via Case Study: The framework was validated on a modified IEEE 39-bus New England test system (incorporating 14.1% inverter-based PV generation) under three escalating cyber-physical attack scenarios inspired by the December 2025 attack on Polish energy infrastructure:
- Scenario 1: Single-plant baseline attack (isolated cyberattack).
- Scenario 2: Multi-vector cascading attack (coordinated communication disruption and forced disconnection of 74.3% of PV capacity).
- Scenario 3: Realistic state-sponsored attack (simultaneous loss of all PV capacity, concurrent extreme winter weather, and maximum regulatory penalties).

Key Contributions

Multidimensional Systematic Analysis: The review identifies that 81% of existing studies address no more than two resilience dimensions, with zero studies integrating all five. It highlights specific structural gaps, including the lack of closed-loop modeling for physical-cyber feedback and the decoupling of acute shocks from chronic climatic stress.
Integrated Coupling Framework: The paper proposes a quantitative formulation representing unidirectional and bidirectional interactions. The MDRI explicitly incorporates cross-dimensional amplification effects, ensuring comparable assessments across varying coupling regimes.
Quantitative Evidence of Amplification: The study provides empirical evidence that single-dimension assessments fail to capture the degradation produced by simultaneous cross-dimensional failures.

Results
The validation under escalating attack scenarios yielded the following quantitative findings:

Endogenous Coupling: Transitioning from a single-vector attack (Scenario 1) to a multi-vector cascading attack (Scenario 2) resulted in a resilience loss increase of nearly 8-fold (MDRI ratio of 7.97). This degradation was driven entirely by the activation of cross-dimensional coupling among physical, operational, and digital-cyber dimensions, a mechanism invisible to additive models.
Exogenous Amplification: Introducing climatic and economic-regulatory stressors (Scenario 3) further amplified the degradation. The transition from Scenario 2 to Scenario 3 yielded a ratio of 5.78, with 72% of this additional amplification driven by exogenous factors.
Compound Degradation: The combined effect of endogenous coupling and exogenous stressors in Scenario 3 produced a 46-fold increase in resilience loss compared to the baseline single-vector scenario.
Dynamic Response: The case study demonstrated that while Scenario 1 resulted in successful recovery, Scenario 2 led to a cascading system collapse, and Scenario 3 caused an accelerated, unrecoverable catastrophic collapse within seconds, highlighting the non-linear nature of compound stress.

Significance and Claims
The paper claims that its primary contribution is reframing resilience from a discipline-specific attribute into a cross-dimensional property of modern power systems. The authors assert that:

Single-dimension assessments are structurally insufficient: They fail to detect the progression from isolated stress to systemic collapse driven by coupling and amplification.
Coupling dominates early stages: Cross-dimensional coupling is the primary driver of degradation during the initial phases of cascading disruptions.
Exogenous stressors drive final collapse: Under fully compounded conditions, external factors (climate and regulation) become the dominant amplification mechanisms.
Methodological Shift: The MDRI provides an integrated, quantitative basis for identifying compound vulnerabilities, moving beyond proxy-based aggregations to a framework capable of modeling the emergent behavior of interconnected infrastructures.

The study concludes that strengthening individual dimensions without addressing their coupling pathways may reduce local fragility while leaving systemic vulnerability intact, necessitating a fundamental shift in how resilience is assessed and modeled.

1. The Five "Musicians" of the Grid

2. The Problem: "Isolated" vs. "Compound" Attacks

3. The "Amplifiers": Weather and Rules

4. The "MDRI": A New Scorecard

5. The Big Takeaway

More like this