Substation-Aware. An intrusion detection system for the IEC 61850 protocol.
Loading...
Identifiers
Publication date
2022-08-23
Advisors
Journal Title
Journal ISSN
Volume Title
Publisher
Association for Computing Machinery
Abstract
The number of cyberattacks against the Smart Grid has increased in the last years. Considered as a critical infrastructure, power system operators must improve the cybersecurity countermeasures of their installations. Intrusion Detection Systems (IDS) appears as a promising solution to detect hidden activity of the hackers before launching the attack. Most detection tools are generalist, designed to find predefined patterns such as frequency of messages, well-known malware packets, source and destination of the messages or the content of each packet itself. These tools also allow plugging modules for different protocols, offering a better understanding of the analysed data, such as the protocol action (read, write, reset...) or data model/schema understanding. However, the semantics of the data transmitted cannot be inferred. The Substation-Aware (SBT-Aware) tool adds the latest feature for primary and secondary substations, taking into account not only the protocols defined in the IEC 61850 standard, but the substation topology as well. In this paper we present the SBT-Aware, an IDS that has been developed and tested in the course of the H2020 SDN-microSENSE project.
Description
Publisher Copyright: Ā© 2022 Owner/Author.
Keywords
IEC 61850 , Substation protection , Cybersecurity , IEC 61850 , Substation protection , Cybersecurity , Software , Human-Computer Interaction , Computer Vision and Pattern Recognition , Computer Networks and Communications , Project ID , info:eu-repo/grantAgreement/EC/H2020/833955/EU/SDN - microgrid reSilient Electrical eNergy SystEm/SDN-microSENSE , info:eu-repo/grantAgreement/EC/H2020/833955/EU/SDN - microgrid reSilient Electrical eNergy SystEm/SDN-microSENSE , Funding Info , The research presented has been done in the context of SDN-microSENSE project. SDN-microSENSE has received funding from the European Unionās Horizon 2020 research and innovation programme under grant agreement No 833955. The information contained in this publication reflects only the authorsā view. EC is not responsible for any use that may be made of this information. , The research presented has been done in the context of SDN-microSENSE project. SDN-microSENSE has received funding from the European Unionās Horizon 2020 research and innovation programme under grant agreement No 833955. The information contained in this publication reflects only the authorsā view. EC is not responsible for any use that may be made of this information.
Type
Citation
Lopez , J A , Angulo , I & Martinez , S 2022 , Substation-Aware. An intrusion detection system for the IEC 61850 protocol. in unknown . ACM International Conference Proceeding Series , Association for Computing Machinery , pp. 1-7 , 17th International Conference on Availability, Reliability and Security, ARES 2022 , Vienna , Austria , 23/08/22 . https://doi.org/10.1145/3538969.3543818
conference
conference