Systems and methods for detecting and mitigating cyber attacks on power systems comprising distributed energy resources

A method for mitigating a cyber attack on a power system that comprises distributed energy resources (DER) and a DER communication system, comprising:

• detecting and mitigating unsafe commands in the DER communication system with an intrusion detection system (IDS) or intrusion prevention system (IPS), by
• establishing a set of allowable ranges for grid support settings for the DER,
• comparing a grid support setting from a DER command to a corresponding established range for that grid-support setting;
• determining if the grid support setting is outside the established range for that grid-support setting;
• in response to determining if the grid support setting is outside the established range for that grid-support setting:
• prevent the DER from executing the DER command;
• initiate an alarm;
• connect the alarm to a computer system that locks a user who originated the command out of the computer system for a period of time;
• restore the user access to the computer system after the period of time.