Cybersecurity Detection and Protection Solution in Substations

Moxa´s solution detects cybersecurity attacks by examining the IEC-61850 communication in switches.

Moxa has launched a new feature for its IEC-61850 switches to analyze Goose traffic. Each packet is examined in real time looking at a set of parameters, e.g. AppID, that represent a typical fingerprint of a Goose communication stream. After a learning phase the switches can immediately identify incoming packets that show an abnormal fingerprint.

This mechanism provides not only fast detection but also the precise location of cyberattacks such as Goose replay, DoS and others. Due to its state-of-the-art alarming capabilities, the MMS protocol is perfectly suited for integration in various supervision systems ranging from standard Power SCADA to Intrusion Detection Systems.