Overview of Intrusion Detection in Smart Substation

The development of Cyber-Physical Fusion Technology gradually takes the power grid in the direction of intelligence, making the smart substation a typical cyber-physical fusion system. However, while the introduction of the IEC61850 standard solves the interoperability problem of smart substations, it also brings new types of cybersecurity threats. Therefore, traditional network intrusion detection techniques do not apply to smart substations, and it is particularly important to analyze and summarize the current relevant research on the security of smart substations. The main contribution of this paper is to discuss the security of smart substations in terms of threat behaviors and defense measures. In-depth analysis is carried out from the three attack perspectives of the information domain, physical domain, and cyber-physical intersection domain, and the detection methods, detection objects, and detection evaluation methods for smart substation security are summarized. Finally, the problems to be solved in smart substations and possible future research directions are discussed.