IEC 62351 - Power Systems Communication Security 4:4: Part 4, clause 4: communications reference models, application and transport security profiles, compatibility and native modes, threats and attacks countered

The part secures application protocols that use MMS (ISO 9506) and derivatives (IEC 60870-6 TASE.2 and IEC 61850) at the application layer and above the transport layer: it distinguishes the T-profile (transport security through TLS per part 3) from the A-security profile (application layer authentication in ACSE) and defines two modes, compatibility mode interoperating with implementations of the 2007 technical specification, and native mode with extended integrity, authentication and encryption for both handshake and data transfer providing end-to-end security across zero or more intermediate entities, for OSI and XMPP protocol stacks including XML-encoded protocols; the threats and attacks countered are listed separately for each mode.