Applying of network security situation awareness in smart substations

Applying of network security situation awareness in smart substations provides a high level view to understand the security situation of substations. After analyzing security threats faced by smart substations, this paper not only proposes a security situation awareness framework from aspects of physical security, network security, system security, protocol security and data security, but also puts forward a network security monitoring solution for substations, which uses a kind of dedicated smart substation network security situation awareness devices to collect security events, analyze them and generate situation analysis results. Further, we focus on several key technologies used in our framework. Finally, we describe a design scheme including hardware and software for the smart substation network security awareness system and its implementation architecture, in which a multi-layer software architecture is adopted by the system, and a combinatory of the Intel® Sandy Bridge, the bus structure and a modular design technology, is adopted in order to meet the need of high performance.