## 4 Results
### Cyber-Attacks and Security Risks
The authors in [88] examined two types of attacks: one that aims to undermine the system's reliability by changing the bid price to extreme values and another that aims to make money over time by keeping the bid price within predetermined limits in order to avoid detection. Prosumers are aware of their maximum bid amount thanks to the service agreement. Signal manipulation can be used by an attacker to get around these restrictions, but their actions will be exposed. Frequency regulation is extensively used in connected power networks. Controlling automatic generation would serve as an example. It guarantees that power moves along the tie-line between control zones at the predetermined rates and that the system's frequency stays within safe bounds. AGC uses data from distant sensors to ascertain a region's frequency and power flow. This enables it to assess how well the area is regulated The ACE shows the discrepancy between the recommended configuration for power exchange and system frequency and the current configuration. Every few seconds, the AGC generators use the ACE to determine the control instructions automatically. Only a few minutes' worth of measurement validation processes, like state estimation, are carried out, which is insufficient to support the second-level frequency required by AGC. Since there is no way to check or locate the accuracy of measurements, AGC is vulnerable to attack. AGC is highly automated and only needs occasional system administrators' maintenance. When damaged, it can quickly alter how the system works [89]. Some of the most frequent outcomes of malware entering a network include the following:  
* It prevents essential network elements. * To spy using malware itself, it installs extra harmful software. * It receives information and has access to personal data. * It interferes with some components, rendering the system unusable for users. Malicious malware, known as ransomware, has users pay in return for keeping their files from being deleted or denied access. Trojan horses are the most dangerous kind of malware because they can seem to be helpful, popular software while attempting to access sensitive financial information. Such \"drive-by\" attacks are a common way for malware to spread. The user must act before these records are created. Users only need to visit a secure website for their PC to become silently infected [90]. A compromised user's computer transforms into an Iframe and sends the victim's browser to a malicious website under the attacker's control after being compromised. Phishing is using email corruptly or falsely, for example, by sending spam or phishing emails. The goal is to gain the victim's private information to be used maliciously to access their bank accounts. This extreme threat is frequently used as part of a more extensive operation to gain access to corporate or governmental networks. As a result, it is commonly used in conjunction with other strategies. A type of phishing called spear phishing targets particular people or organizations, including those working in government or military intelligence. Criminals can get private company information through these attacks, which they can use to steal money or carry out other crimes. Whale phishing is spear phishing that targets powerful people, like the CFO or CEO, to gain sensitive data. When an attacker can place himself between two participants in a transaction or conversation, they commit a man-in-the-middle attack or listen in on a discussion [91]. Man-in-the-middle attackers most typically employ the following entries:  
* Public Wi-Fi that isn't secure when unauthorized users place their devices in between a visitor's device and the network. * If an attacker's virus successfully infiltrates the victim's PC, they can install software to obtain the victim's secure information. IoT is becoming more and more popular because it can be used for a wide range of tasks, including intelligent energy management and industrial automation.