WIPP: Towards IEC 62443-3-3 Network Compliance via Software-Defined Networking in Digital Substations

Threats against critical infrastructure in various sectors (power, water, etc.) are constantly present as their cyber-physical control and communication systems introduce a combination of modern and legacy components. Various security standards facilitate the application of security controls in such environments, with systematic guidance about best practices, and priorities for requirements implementation. This article provides a model to assist the compliance of substation automation networks with the IEC 62443-3-3 standard by employing the Software-Defined Networking (SDN) paradigm. First, we explore how the requirements of the standard can be fulfilled by an asset owner by applying SDN solutions. Next, we present the applicability of such a model to a modern smart grid through the context of a distribution system substation. The model will be used to implement the necessary functionality for asset owners to meet the requirements of the industry standard and improve the grid's resilience, while at the same time automating a multitude of network security capabilities.