Design of Intelligent Substation Communication Network Security Audit System

As the security threats of industrial control networks such as smart grids continue to escalate, smart substations, as the core facilities of smart grids, are becoming an important target of malicious attacks. It is very necessary to strengthen the security audit of intelligent substation communication network, and it is an important way to improve the protection capability of intelligent substation. In this paper, the intelligent substation communication standard IEC61850 and its three main communication protocols are studied. The basic functions of GOOSE, SV, and MMS are introduced. By designing a system based on deep analysis of network traffic, the communication security audit of GOOSE network, SV network, and MMS network provides an intelligent means for intrusion detection, abnormal analysis, and monitoring audit. Firstly, the system is initially constructed from the functional architecture and the overall technology. Then, the different functional modules are designed in detail, and the GOOSE, SV, and MMS messages are parsed to determine the technical solutions for identifying threats and security audits.