By developing a deep and comprehensive understanding of what constitutes “normal” operations inside electric power systems, Georgia Tech cybersecurity researchers hope to identify “abnormal” and “illogical” control system commands that may indicate the presence of insider threats – or malicious attackers.