System and method for anomaly detection in an electrical network

A system for detecting anomalies in an electrical network with a plurality of sensors distributed throughout a plurality of nodes of the electrical network, the system comprising:

• a network topology storage having a network input configured to receive network node information that includes a description of electrical node requirements of the plurality of nodes of the electrical network, the description including node-to-node connectivity information;
• a sensor data storage unit including a sensor data input configured to receive sensor measurements from the plurality of sensors and information associating each measurement with a respective sensor node location within the electrical network;
• an electrical system model storage unit configured to store relationships between the sensor measurements and electrical node requirements at each node of the plurality of nodes of the electrical network;
• a network matrix calculator configured to:
• receive the network node information and the electrical node requirements;
• and
• generate a statistical expected measurement range at each sensor node location;
• a comparison module configured to:
• compare the sensor measurements with the statistical expected measurement range for each sensor node location of the electrical network;
• and
• generate an anomaly detection for each node where the sensor measurements fall outside the statistical expected measurement range;
• an anomaly localization module configured to identify one or more nodes of the plurality of nodes based on the identified one or more nodes being associated with an anomaly detected in the electrical network;
• and
• an anomaly cascade prediction calculator configured to recalculate statistical expected measurement ranges for each respective node of the plurality of nodes of the electrical network based on the anomaly detection in the electrical network.