<?xml version="1.0" encoding="utf-8"?>
<!DOCTYPE article PUBLIC "-//NLM//DTD JATS (Z39.96) Journal Publishing DTD v1.3 20210610//EN" "https://jats.nlm.nih.gov/publishing/1.3/JATS-journalpublishing1-3.dtd">
<article article-type="research-article" dtd-version="1.3" xml:lang="ru">
  <front xmlns:xlink="http://www.w3.org/1999/xlink">
    <journal-meta>
      <journal-id journal-id-type="elibrary">9004</journal-id>
      <journal-title-group>
        <journal-title>Problems of information security. Computer systems</journal-title>
        <trans-title-group xml:lang="ru">
          <trans-title>Проблемы информационной безопасности. Компьютерные системы</trans-title>
        </trans-title-group>
      </journal-title-group>
      <issn pub-type="epub">2071-8217</issn>
    </journal-meta>
    <article-meta xmlns:xlink="http://www.w3.org/1999/xlink">
      <article-id pub-id-type="publisher-id">11</article-id>
      <article-id pub-id-type="doi">10.66424/2071-8217-2026-1-11</article-id>
      <title-group>
        <article-title>Cyber resilience of digital substations: intelligent technology for cyber threat detection and adaptive environment management</article-title>
        <trans-title-group xml:lang="ru">
          <trans-title>Киберустойчивость цифровых подстанций: интеллектуальная технология обнаружения киберугроз и адаптивного управления средой</trans-title>
        </trans-title-group>
      </title-group>
      <contrib-group>
        <contrib contrib-type="author">
          <contrib-id contrib-id-type="orcid">0000-0002-0232-7248</contrib-id>
          <contrib-id contrib-id-type="scopus">13103571000</contrib-id>
          <name>
            <surname>Zegzhda</surname>
            <given-names>Dmitry</given-names>
          </name>
          <xref ref-type="aff" rid="aff1"/>
          <email>zegzhda_dp@spbstu.ru</email>
        </contrib>
        <contrib contrib-type="author">
          <name>
            <surname>Gavva</surname>
            <given-names>Georgij</given-names>
          </name>
          <xref ref-type="aff" rid="aff1"/>
          <email>gavva.gd@edu.spbstu.ru</email>
        </contrib>
        <contrib contrib-type="author">
          <contrib-id contrib-id-type="orcid">0000-0002-9732-0099</contrib-id>
          <name>
            <surname>Kalinin</surname>
            <given-names>Maxim</given-names>
          </name>
          <xref ref-type="aff" rid="aff1"/>
          <email>max@ibks.spbstu.ru</email>
        </contrib>
        <contrib contrib-type="author">
          <contrib-id contrib-id-type="orcid">0000-0002-2009-5460</contrib-id>
          <name>
            <surname>Ovasapyan</surname>
            <given-names>Tigran</given-names>
          </name>
          <xref ref-type="aff" rid="aff1"/>
          <email>otd@ibks.spbstu.ru</email>
        </contrib>
        <contrib contrib-type="author">
          <name>
            <surname>Tolstykh</surname>
            <given-names>Maxim</given-names>
          </name>
          <xref ref-type="aff" rid="aff2"/>
          <email>tolstykhma@rosseti-sz.ru</email>
        </contrib>
      </contrib-group>
      <aff id="aff1">Peter the Great St. Petersburg Polytechnic University</aff>
      <aff id="aff2">PJSC Rosseti North-West</aff>
      <pub-date publication-format="electronic" date-type="pub" iso-8601-date="2026-03-30">
        <day>30</day>
        <month>03</month>
        <year>2026</year>
      </pub-date>
      <issue>1</issue>
      <fpage>152</fpage>
      <lpage>167</lpage>
      <self-uri xmlns:xlink="http://www.w3.org/1999/xlink" content-type="pdf" xlink:href="https://jisp.spbstu.ru/userfiles/files/soderzhaniya/2026_1_5-6.pdf"/>
      <abstract xml:lang="en">
        <p>This paper reviews the problem of ensuring cyber resilience for digital substations, critical energy infrastructure facilities vulnerable to targeted cyberattacks. A solution is proposed in the form of a comprehensive technology integrating intelligent attack and anomaly detection using a radial-basis neural network and an adaptive control mechanism built on a stochastic self-learning machine with a variable structure and linear tactics. The detector ensures resource-efficient and highly accurate detection of cyberattacks on low-resource devices of the digital substation network at the connection level. The adaptive control mechanism dynamically restructures the digital substation network’s flows based on environmental responses and undergoes additional learning during incident processing, enabling the neutralization of a wide range of known and unknown threats. Experimental results have demonstrated that the proposed solution meets key requirements for digital substation protection systems: high performance, adaptability, and cybersecurity.</p>
      </abstract>
      <kwd-group xml:lang="en">
        <kwd>Adaptive control</kwd>
        <kwd>cyber resilience</kwd>
        <kwd>cyberattack detection</kwd>
        <kwd>radial basis neural network</kwd>
        <kwd>self-learning machine</kwd>
        <kwd>digital substation</kwd>
      </kwd-group>
    </article-meta>
  </front>
</article>
