Protecting the power grid against cyber attacks requires a security strategy that takes hold at all levels. This includes not only controlling physical and digital access from outside, but also monitoring and detecting suspicious or unauthorized activity within the substation network.
Suitable real-time intrusion detection systems should offer not only a high degree of security in the long term, but they should also require little maintenance, and be easily integrated into the automated processes used in maintaining and operating substation systems.