Analisador Automático de Segurança Cibernética para o Setor Elétrico
Resumo
Este artigo simula a automatização da análise de vulnerabilidades e avaliação de riscos em redes do setor elétrico, utilizando dados de IEDs para extrair a estrutura de comunicação de subestações. A partir de arquivos SCL, conforme a norma IEC 61850, mapeiam-se ativos críticos e verifica-se a conformidade com normas e políticas de segurança em ambientes OT.Referências
Adamiak, M., Baigent, D., and Mackiewicz, R. (2009). Iec 61850 communication networks and systems in substations: An overview for users. The Protection Control Journal, pages 61–68.
Alrashide, A., Abdelrahman, M., Kharchouf, I., and Mohammed, O. (2022). Gns3 communication network emulation for substation goose based protection schemes. pages 1–6.
Ayello, M. and Lopes, Y. (2023). Interoperability based on iec 61850 standard: Systematic literature review, certification method proposal, and case study. Electric Power Systems Research, 220:109355.
Carvalheira, E. and Klien, A. (2019). How the engineering design process can simplify the testing of automation and control systems. In 2019 72nd Conference for Protective Relay Engineers (CPRE), pages 1–7.
Emiliano, R. and Antunes, M. (2015). Automatic network configuration in virtualized environment using gns3. In 2015 10th International Conference on Computer Science Education (ICCSE), pages 25–30.
GNS3 Team (2025). Gns3 documentation. Acesso em: 30 abr. 2025.
Industrial Cyber (2021). The essential guide to the iec 62443 industrial cybersecurity standards. Acesso em: 28 abr. 2025.
Konka, J. W., Arthur, C. M., Garcia, F. J., and Atkinson, R. C. (2011). Traffic generation of iec 61850 sampled values. In 2011 IEEE First International Workshop on Smart Grid Modeling and Simulation (SGMS), pages 43–48.
Silveira, M. (2019). Iec 61850 network cybersecurity : Mitigating goose message vulnerabilities.
WISE-DeviceOn (2025). Cr-110 authenticator feedback sl4. Acesso em: 28 abr. 2025.
Alrashide, A., Abdelrahman, M., Kharchouf, I., and Mohammed, O. (2022). Gns3 communication network emulation for substation goose based protection schemes. pages 1–6.
Ayello, M. and Lopes, Y. (2023). Interoperability based on iec 61850 standard: Systematic literature review, certification method proposal, and case study. Electric Power Systems Research, 220:109355.
Carvalheira, E. and Klien, A. (2019). How the engineering design process can simplify the testing of automation and control systems. In 2019 72nd Conference for Protective Relay Engineers (CPRE), pages 1–7.
Emiliano, R. and Antunes, M. (2015). Automatic network configuration in virtualized environment using gns3. In 2015 10th International Conference on Computer Science Education (ICCSE), pages 25–30.
GNS3 Team (2025). Gns3 documentation. Acesso em: 30 abr. 2025.
Industrial Cyber (2021). The essential guide to the iec 62443 industrial cybersecurity standards. Acesso em: 28 abr. 2025.
Konka, J. W., Arthur, C. M., Garcia, F. J., and Atkinson, R. C. (2011). Traffic generation of iec 61850 sampled values. In 2011 IEEE First International Workshop on Smart Grid Modeling and Simulation (SGMS), pages 43–48.
Silveira, M. (2019). Iec 61850 network cybersecurity : Mitigating goose message vulnerabilities.
WISE-DeviceOn (2025). Cr-110 authenticator feedback sl4. Acesso em: 28 abr. 2025.
Publicado
01/09/2025
Como Citar
OLIVEIRA, Lucas H. V.; GURJÃO, Edmar Candeia.
Analisador Automático de Segurança Cibernética para o Setor Elétrico. In: WORKSHOP DE TRABALHOS DE INICIAÇÃO CIENTÍFICA E DE GRADUAÇÃO EM ANDAMENTO - SIMPÓSIO BRASILEIRO DE CIBERSEGURANÇA (SBSEG), 25. , 2025, Foz do Iguaçu/PR.
Anais [...].
Porto Alegre: Sociedade Brasileira de Computação,
2025
.
p. 293-298.
DOI: https://doi.org/10.5753/sbseg_estendido.2025.10743.
