Power grid topology discovery via time correlation of passive measurement events

A non-transitory computer-readable medium storing program instructions that, when executed by a processor, cause the processor to determine a topology of a power grid by performing the steps of:

• receiving a first timestamped event classification from a first node residing within a network of nodes;
• receiving a second timestamped event classification from a second node residing within the network of nodes;
• determining that the first timestamped event classification is correlated with the second timestamped event classification;
• and
• determining that the first node and the second node are both coupled to a particular device within the power grid based on the first timestamped event classification being correlated with the second timestamped event classification.

A system, comprising:

• a first node configured to:
• detect that a first characteristic fluctuation occurred,
• generate a first timestamped event classification based on the first characteristic fluctuation, and
• transmit the first timestamped event classification to a server machine.
• a second node configured to:
• detect that a second characteristic fluctuation occurred;
• generate a second timestamped event classification based on the second characteristic fluctuation, and
• transmit the second timestamped event classification to the server machine.