Intrusion detection system for IEC 61850 based smart substations

With the development of IEC 61850 smart substations, emerging cybersecurity vulnerabilities in supervisory control and data acquisition (SCADA) systems are becoming an urgent engineering issue for modern substations. This paper proposes a novel intrusion detection system (IDS) tailored for cybersecurity of IEC 61850 substations. The proposed IDS analyzes multidimensional physical knowledge and behaviors to provide a comprehensive and effective solution that is able to mitigate various cyber threats. This IEC 61850 based detection approach comprises access control detection, protocol-based detection, anomaly behavior detection, and multi-parameter detection. This SCADA-specific IDS is implemented and validated using presented cyber-physical test-bed of a 500kV smart substation.