intrusion monitoring system / Ethernet
Cyber security and functional monitoring for substations
The Intrusion Detection System StationGuard can monitor Ethernet networks in substations and detects suspicious behavior, unauthorized actions and malfunctions on the IEC 61850 station or process bus.
StationGuard uses the substation's SCL file to create a complete system model of the IEC 61850 SAS and substation and then compares each individual packet in the network with the live system model. StationGuard performs a detailed verification of all data traffic. StationGuard is configured without a learning phase, using only the SCL description of the system and a few manual entries.
With this worldwide unique and patented approach, a combination of cyber security and functional monitoring, its not only new threats and still unknown attack scenarios that can be detected, but also different types of malfunctions in the system, such as communication errors in GOOSE, MMS, or Sampled Values and problems with time synchronization