The eFORT Intelligent Platform has been used in the Spanish demonstration as part of the project’s work to validate cybersecurity monitoring, alerting and data visualisation capabilities in a real energy environment. The demonstration took place in the D1 Spain demo-site, located at the Escúzar Smart Grid Living Lab operated by CUERVA in Granada.
Within this demonstration, the Intelligent Platform acted as an integration and visualisation layer for the cybersecurity monitoring chain. The work was mainly linked to the use case involving SecureBox, the Intelligent Platform, the chatbot, IDS/SIEM capabilities and RTU data. This use case aimed to show how different eFORT tools can work together to support the monitoring of substation status and the detection of anomalous events.
The platform received and processed structured data related to the demonstration environment. Access to the platform is protected through secure connectivity, including site-to-site VPN, and data exchange is supported through REST APIs and JSON-based structures. This approach allows different project components and partners to exchange information in a controlled and consistent way.
During the demonstration, the Intelligent Platform supported several key functions. It stored and visualised data coming from the demo environment, including IDS and RTU-related information. It also displayed statistics on data volumes, event types and alerts, allowing partners to better understand the behaviour of the monitored systems over time.
One of the main results was the visualisation of alerts generated during the cybersecurity monitoring process. The platform showed alert information in a structured way, including timestamps, source tools, devices, paths and alert types. This helps operators and technical teams to review events more easily and to understand where attention may be required.
The platform also contributed to the integration of dynamic risk assessment information. Dedicated views were used to display risk-related results, including dashboards and visual summaries. This functionality helps connect technical monitoring data with a broader view of potential impact and risk, which is one of the main objectives of eFORT.
Another relevant element was the preparation of an endpoint that can be used by the chatbot to retrieve recent substation alert information. This demonstrates how the Intelligent Platform can expose processed information to other tools in the eFORT ecosystem, supporting easier access to relevant data for partners and operators.
The Intelligent Platform also includes a machine learning capability available for training and future anomaly detection improvement. During this phase, this component was validated in controlled conditions and remains ready to be further trained with real operational data from demo-sites. The objective is to improve alert analysis over time and support more effective detection of abnormal behaviours.
Overall, the use of the Intelligent Platform in the Spanish demonstration shows the value of having a common integration layer for the project. It helps connect different tools, organise data, visualise relevant information and support the collection of evidence during demonstrations. This is especially important in complex environments where cybersecurity, operational data and risk information need to be analysed together.
The work carried out in D1 Spain is an important step in showing how the eFORT solution stack can support more resilient and secure electricity systems. By combining SecureBox, IDS/SIEM, RTU data, dynamic risk assessment and chatbot interaction through the Intelligent Platform, the project demonstrates a practical approach to improving situational awareness and supporting faster, better-informed responses to potential incidents.
In the next phase, the work will continue with final platform enhancements, further validation, functional testing and stress testing. Feedback from partners and results from the demo-sites will be used to refine the Intelligent Platform and strengthen its role as a shared component within the eFORT ecosystem.
Contact us
Follow us on: