A system comprising: a first physical asset; a control system for controlling the first physical asset; a monitoring system coupled to the first physical asset, the monitoring system comprising one or more monitoring devices configured to acquire one or more performance parameters of the first physical asset when the first physical asset is placed in an operating condition; and an asset protection system for protecting the first physical asset against an attack, said asset protection system comprising a computer configured to: obtain from a monitoring system, at least one performance parameter of the physical asset; retrieve from a database, at least one threat signature: detect a threat to the physical asset, based at least in part on identifying a relationship between the at least one performance parameter of the physical asset and the at least one threat signature: and transmit a signal to the physical asset to modify an operation of the physical asset in response to the threat; wherein the asset protection system is configured to transmit one or more control signals to the first physical asset directly in response to a threat; and wherein detecting the threat comprises identification of a speed anomaly on the basis of a gradual increase in rotational speed of a turbine, and wherein the asset protection system is configured to increase the rotational speed of the turbine. a first physical asset; a control system for controlling the first physical asset; a monitoring system coupled to the first physical asset, the monitoring system comprising one or more monitoring devices configured to acquire one or more performance parameters of the first physical asset when the first physical asset is placed in an operating condition; and an asset protection system for protecting the first physical asset against an attack, said asset protection system comprising a computer configured to: obtain from a monitoring system, at least one performance parameter of the physical asset; retrieve from a database, at least one threat signature: detect a threat to the physical asset, based at least in part on identifying a relationship between the at least one performance parameter of the physical asset and the at least one threat signature: and transmit a signal to the physical asset to modify an operation of the physical asset in response to the threat; wherein the asset protection system is configured to transmit one or more control signals to the first physical asset directly in response to a threat; and wherein detecting the threat comprises identification of a speed anomaly on the basis of a gradual increase in rotational speed of a turbine, and wherein the asset protection system is configured to increase the rotational speed of the turbine. obtain from a monitoring system, at least one performance parameter of the physical asset; retrieve from a database, at least one threat signature: detect a threat to the physical asset, based at least in part on identifying a relationship between the at least one performance parameter of the physical asset and the at least one threat signature: and transmit a signal to the physical asset to modify an operation of the physical asset in response to the threat; wherein the asset protection system is configured to transmit one or more control signals to the first physical asset directly in response to a threat; and wherein detecting the threat comprises identification of a speed anomaly on the basis of a gradual increase in rotational speed of a turbine, and wherein the asset protection system is configured to increase the rotational speed of the turbine.