Intelligent Electronic Devices With Collaborative Intrusion Detection Systems

This paper proposes the new concept of intelligent electronic devices (IEDs) with built-in distributed intrusion detection systems. The proposed IEDs have the capabilities to monitor and detect anomalies and abnormal behaviors of the host system of IED and IEC 61850-based messages, e.g., sampled values and generic object oriented substation event. The proposed IEDs collaborate with neighboring IEDs to make an accurate decision and find the origin of cyber attacks. The commodity embedded system has been used to verify the performance of the proposed intrusion detection system with power system protection functions of IEDs. The results show that the proposed mitigation methods work accurately and efficiently with protection functions, e.g., overcurrent and distance protections, on the embedded board.