Intrusion Detection System (IDS) for the Power Grid
Most national security regulations require the usage of network intrusion detection systems (IDS) for monitoring the process networks of critical infrastructure. There are many attack vectors in operational technology (OT) networks in power plants and substations, for example via maintenance PCs and remote access connections. The risk is even greater when it comes to the known vulnerabilities of SCADA systems, protection, and control devices.
StationGuard has been tailor-made for energy systems and substations. It continuously monitors network traffic and anomalies to detect cyberattacks, security threats, and prohibited activities. With its deep understanding of the power grid, the intrusion detection software StationGuard provides a very low number of false alarms and actionable alert messages. It performs deep packet inspection (DPI) for an unmatched number of energy system protocols. The IDS provides cybersecurity in power grids without complexity: Its interface is easy to understand for OT and IT participants in the incident response process.
StationGuard integrates easily into many 3rd-party security operations center (SOC) solutions, such as security information and event management (SIEM), asset inventory management (CMDB), and ticketing systems.
Expert recommends
StationGuard on the RBX1 platform
StationGuard runs on the RBX1 hardware and is a tailor-made IDS solution for protecting substation automation and SCADA systems against cyber threats and zero-day attacks. It runs autonomously – a permanent connection to a central server is not needed.
The 19”-rack-mountable RBX1 platform is made for harsh power grid environments. It comes with unmatched security features like full-disk encryption, an ISO/IEC-11889-compliant trusted platform module and a secure customized unified extensible firmware interface (UEFI). Binary outputs for easily integrating IDS alerts are included as well.
Read more
We offer more solutions for cybersecurity in energy systems to ease the daily work of Protection and Control Engineers as well as OT/IT security officers:
Functional Security Monitoring in Substations
StationGuard combines cybersecurity and functional monitoring. This allows you to detect cyber threats and attacks, in addition to different types of malfunctions in the substation automation system (SAS). You can monitor the substation network 24/7 to analyze issues later. This includes configuration errors, interoperability issues, time synchronization problems, incorrect communication, and much more.
OT/ICS Asset Inventory Management and Discovery
Different security regulations, such as the EU NIS directive and NERC-CIP, require you to keep an asset inventory as a base for vulnerability management and performing risk analyses.
StationGuard automatically recognizes all devices in the network, creates an asset inventory, and visualizes communication. In addition, it generates detailed information for each asset by combining the actual network analysis with SCL engineering files. This helps to ensure that all the devices from different suppliers meet current regulatory requirements in accordance with your information security management system (ISMS) directive and national security regulations.
Cybersecure IEC 61850 testing
With StationScout and IEDScout on the MBX1 or RBX1 platform, you can test IEC 61850 SCADA and substation automation systems (SAS) with optimum security. The dedicated test sets isolate your PC from the vulnerable substation network and provide you with the performance needed to reliably simulate and test your entire system.
Tailor-made cybersecurity solution for the energy sector
Seamless integration into your systems
Time-saving and actionable alerts
Highly secure, highly available
Easy commissioning and implementation
StationGuard on the MBX1 platform
StationGuard on the portable MBX1 hardware provides the same, high level of security as the rack-mountable solution. With the mobile version of StationGuard you can perform a quick temporary security check of a particular system. It is also perfectly suited for monitoring during commissioning when external service partners are engaged in engineering activity.
StationGuard on virtual machine platform
The StationGuard sensors are available on hardware and virtual machine platforms for permanent installation in substation automation and SCADA systems. Using the virtual machine option, the StationGuard sensors can be installed on existing computing platforms in the substation. The StationGuard sensors can run completely independently, even if the connection to the central server is disconnected.