## 2 Methodology  
Before starting the work on this paper, a comprehensive literature search was carried out in major reputed indexed databases including Web of Science, IEEE Xplore, ScienceDirect, and CNKI. In this way, it was ensured that the research results in line with the topic of this paper were taken into consideration, thereby improving the quality of the work in this paper. We used a large number of terms and keywords in our literature search to ensure that we find significant research results that match our research topic, including but not limited to terms such as power systems, integrated energy systems, smart grids, electric vehicles, deliberate attacks, cyber attacks, information-physical co-attacks, collaborative planning, optimal dispatch, attack detection, security, resilience, and so on. By strategically utilizing a combination of these key terms, we were able to efficiently filter irrelevant documents in our indexed database, thereby accurately identifying the academic literature most relevant to our topic. To ensure the quality, applicability, and relevance of the literature, we used a rigorous set of selection criteria. First, we limited our search to the years between 2015 and 2024 and focused on research results from the past three years to ensure that they reflected the latest trends in their field. Second, we briefly screened the titles and abstracts of the literature in order to align the selected literature with the research topic. Then, we further reviewed the keywords of the literature by matching them with the core terms we listed to make sure they were highly relevant to our study, saving time and resources by avoiding unnecessary reading and analysis. Finally, we conducted a meticulous content review of the screened literature to distill the theories, methods, and techniques related to our research topic to form a framework for the literature review. In addition, in order to help readers to understand the key theories, methods and techniques more clearly, we also used some representative literature. In order to provide readers with a more intuitive understanding of the research trends and progress related to the work of this paper, we counted the relevant literature data retrieved from Web of Science for the last ten years. Categorized by research topics, the publication trends shown in Figure 1 were plotted. As can be seen from Figure 1, the amount of literature related to this paper was generally on the rise during the period between 2015 and2024. This shows that the work of this paper aligns with the current research hotspots, and at the same time, the research findings strongly support the work of this paper. This upward trend can be attributed to a number of factors. First, as we mentioned in the introduction, the development of IECPS has been driven by policy support, and all kinds of research and applications related to the development of IECPS have been supported by the policies of many countries. Secondly, various energy security incidents have raised the concern of researchers and governments about the safety of utilities, which has driven utilities and researchers to accelerate the construction of more effective defense systems to ensure the safety of IECPS. Finally, the updating of related equipment and technology has provided strong support for the research on IECPS safety. Flexible devices represented by electric vehicles and energy storage devices provide dispatchable resources for IECPS defense optimization. Also, the emerging technology represented by artificial intelligence (AI) promotes the development of IECPS attack detection and defense technology. To further illustrate the need for the work in this paper, we also conducted a survey of intentional attacks against energy systems over the last decade, the results of which are shown in Table 1.  
In 2015, a cyberattack targeted a power company in western Ukraine, causing widespread power outages for hundreds of thousands of users.