Theoretical Foundations and Empirical Validation of a Smart Grid Cybersecurity Architecture for Nigerian Electricity Distribution Networks

Nigeria's ongoing electricity sector reform involves increasing digitalisation of distribution network management through smart metering, SCADA integration, and automated demand response systems, and their cybersecurity architecture requires original theoretical and engineering development adapted to Nigeria's specific infrastructure and threat landscape. This study develops theoretical foundations and empirically validates a cybersecurity architecture for smart grid components in Nigerian electricity distribution networks. The theoretical development draws on the Purdue Enterprise Reference Architecture extended for smart grid applications and the IEC 62351 power systems information security standard, identifying gaps specific to Nigerian distribution networks characterised by mixed analogue-digital infrastructure, frequent third-party maintenance access, and limited security operations capacity. An original security architecture incorporating defence-in-depth principles, industrial anomaly detection using One-Class Classification methods, and lightweight authenticated key exchange adapted for resource-constrained smart meters is developed and formally specified. The architecture was implemented in a testbed environment simulating a 33kV secondary substation network representative of Abuja Electricity Distribution Company infrastructure. Security performance was evaluated through penetration testing, red team exercises, and functional safety testing under simulated cyberattack scenarios. Available smart grid cybersecurity literature from Sub-Saharan African utility contexts identifies legacy protocol exposure and unmanaged device proliferation as the highest-risk infrastructure characteristics. The Defence-in-Depth Principle and the Industrial Control System Security Framework of NIST SP 800-82 provide the theoretical basis. The architecture withstands all simulated attack scenarios without service disruption. Keywords: smart grid cybersecurity, electricity distribution, Nigeria, SCADA security, IEC 62351.