A system for cyber-attack detection within cyber-physical systems, the system comprising: a side-channel signal acquisition block, the side-channel signal acquisition block being operable for performing operations of: obtaining a time-varying analog side-channel signal from components within the cyber-physical system; converting the time-varying analog side-channel signal to a digital side-channel signal; a state detection block, the state detection block being operable for performing operations of: identifying a time-series of system states based on the digital side-channel signal, wherein in identifying the time-series of system states based on the digital side-channel signal, the state detection block includes a side-channel template learning and acquisition block that performs an operation of storing new side-channel signal templates and retrieving and updating existing side-channel signal templates; comparing the time-series of system states with software states as generated by the cyber-physical system components, such that when the software states are unmatched with the time-series of system states, designating a side-channel security breach; and causing the cyber-physical system to implement an action based on the side-channel security breach. a side-channel signal acquisition block, the side-channel signal acquisition block being operable for performing operations of: obtaining a time-varying analog side-channel signal from components within the cyber-physical system; converting the time-varying analog side-channel signal to a digital side-channel signal; obtaining a time-varying analog side-channel signal from components within the cyber-physical system; converting the time-varying analog side-channel signal to a digital side-channel signal; a state detection block, the state detection block being operable for performing operations of: identifying a time-series of system states based on the digital side-channel signal, wherein in identifying the time-series of system states based on the digital side-channel signal, the state detection block includes a side-channel template learning and acquisition block that performs an operation of storing new side-channel signal templates and retrieving and updating existing side-channel signal templates; comparing the time-series of system states with software states as generated by the cyber-physical system components, such that when the software states are unmatched with the time-series of system states, designating a side-channel security breach; and causing the cyber-physical system to implement an action based on the side-channel security breach. identifying a time-series of system states based on the digital side-channel signal, wherein in identifying the time-series of system states based on the digital side-channel signal, the state detection block includes a side-channel template learning and acquisition block that performs an operation of storing new side-channel signal templates and retrieving and updating existing side-channel signal templates; comparing the time-series of system states with software states as generated by the cyber-physical system components, such that when the software states are unmatched with the time-series of system states, designating a side-channel security breach; and causing the cyber-physical system to implement an action based on the side-channel security breach.