Power Utility Automation Cybersecurity: IEC 61850 Specification of an Intrusion Detection Function

Maëlle Kabir-Querrec (1, 2) , Stéphane Mocanu (3) , Jean-Marc Thiriet (1) , Eric Savary (2)

1 GIPSA-SAIGA - GIPSA - Signal et Automatique pour la surveillance, le diagnostic et la biomécanique
2 Euro-System
3 GIPSA-SYSCO - GIPSA - Systèmes non linéaires et complexité

The IEC 61850 standard defines a global framework for designing power utility automation systems. The main goal of IEC 61850 being interoperability, it brings information and tools for both system modelling and communication architecture. But cybersecurity measures and propositions are scarce. They should be a priority. To help fill this lack of cybersecurity, we specify a fully IEC 61850-compatible intrusion detection function. This paper explains the procedure of defining functions and necessary model objects consistent with the standard requirements. We then detail our intrusion detection function.

Mots clés: IDS; cybersecurity; function specification; IEC 61850; Intrusion Detection

Domaines: Sciences de l'ingénieur [physics]

Maëlle Kabir-Querrec, Stéphane Mocanu, Jean-Marc Thiriet, Eric Savary. Power Utility Automation Cybersecurity: IEC 61850 Specification of an Intrusion Detection Function. ESREL 2015 - 25th European Safety and Reliability Conference, Sep 2015, Zurich, Switzerland. ⟨10.1201/b19094-205⟩. ⟨hal-01237713⟩