IEC 62351 - Power Systems Communication Security 90-3:7: Part 90-3, clauses 7 and 8: monitoring use cases (substation, DER systems, large hydro, generation) and monitoring profiles for attack scenarios (malicious IED program change, unexpected IEC 61850 configuration, information-gathering malware)

The report works through monitoring for substations, distributed energy resource systems, large hydro and generation, and gives monitoring profiles that detect three attack scenarios: a malicious change to an IED's program, an unexpected IEC 61850 configuration, and information-gathering malware.