Published in

Journal of the Korea Institute of Information Security and Cryptology, 6(23), p. 1181-1190

DOI: 10.13089/jkiisc.2013.23.6.1181

Links

Tools

Export citation

Search in Google Scholar

Development of Intrusion Detection System for GOOSE Protocol Based on the Snort

Journal article published in 2013 by Hyeong-Dong Kim, Ki-Hyun Kim, Jae-Cheol Ha
This paper was not found in any repository; the policy of its publisher is unknown or unclear.
This paper was not found in any repository; the policy of its publisher is unknown or unclear.

Full text: Unavailable

Question mark in circle
Preprint: policy unknown
Question mark in circle
Postprint: policy unknown
Question mark in circle
Published version: policy unknown

Abstract

The GOOSE(Generic Object Oriented Substation Event) is used as a network protocol to communicate between IEDs(Intelligent Electronic Devices) in international standard IEC 61850 of substation automation system. Nevertheless, the GOOSE protocol is facing many similar threats used in TCP/IP protocol due to ethernet-based operation. In this paper, we develop a IDS(Intrusion Detection System) for secure GOOSE Protocol using open software-based IDS Snort. In this IDS, two security functions for keyword search and DoS attack detection are implemented through improvement of decoding and preprocessing component modules. And we also implement the GOOSE IDS and verify its accuracy using GOOSE packet generation and communication experiment.