Category Archives: Blog

How to Decode IEC 61850 GOOSE Messages in Wireshark (Simple Step-by-Step Guide)

GOOSE messages are high-speed Ethernet signals used in modern substations to share protection and control information between devices. Although they may look technical, decoding them with Wireshark is actually very easy. With just a few filters and clicks, you can see events, state changes, and dataset values in real time. In this guide, you’ll learn step-by-step how to… Read More »

Securing IEC-104 Traffic Over OpenVPN: A Complete Technical Guide for Modern Critical Infrastructure

IEC-60870-5-104 (IEC-104) is one of the most widely used protocols for telecontrol communication in power utilities, substations, renewable energy sites, industrial automation, and critical infrastructure networks. Its simplicity, efficiency, and ability to run over standard TCP/IP networks make it attractive for SCADA systems worldwide. But IEC-104 has a serious security problem: IEC-104 has no built-in security — no… Read More »

DNP3 vs IEC 61850: Full Technical Comparison of SCADA and Digital Substation Protocols

DNP3-IP, designed for distribution SCADA and remote telemetry, and IEC 61850, built for advanced substation automation and high-speed protection schemes, represent two fundamentally different communication approaches in modern power systems. Modern electric power systems depend on digital communication networks that connect substations, field devices, control centers, and automation systems. Two of the most important communication standards in this… Read More »

How to Monitor SCADA Protocol Traffic (Modbus RTU/TCP, IEC-104, DNP3, IEC-61850)

Monitoring SCADA protocol traffic is essential for diagnosing field issues, validating protocol behavior, troubleshooting mapping or timing problems, and improving the reliability of industrial automation systems. Whether the system uses legacy serial-based protocols such as Modbus RTU, IEC 60870-5-101, or DNP3 Serial, or modern TCP/IP-based protocols such as Modbus TCP, IEC 60870-5-104, DNP3 TCP, or IEC 61850, having… Read More »

IEC 104 News 2025: Latest Updates to IEC 60870-5-104 Standard, Security Extensions & Testing Tools

The IEC 60870-5-104 protocol remains one of the most widely implemented telecontrol standards in SCADA systems for electric power transmission and distribution. It extends IEC 60870-5-101 for operation over TCP/IP, enabling real-time data exchange between control centers and remote terminal units (RTUs). As of November 2025, the IEC 104 base standard itself has not changed, but significant progress… Read More »

DNP3 vs IEC 60870-5-104: Which Protocol Is Better for SCADA?

In modern SCADA (Supervisory Control and Data Acquisition) systems, choosing the right communication protocol can determine how efficiently, securely, and reliably data moves between control centers and field equipment. Two of the most widely used open standards are DNP3 (Distributed Network Protocol version 3) and IEC 60870-5-104. While both were designed for real-time monitoring and control, they differ… Read More »

IEC-101 vs IEC-104 — Key Differences Explained

IEC-60870-5-101 (IEC-101) and IEC-60870-5-104 (IEC-104) are two of the most important communication protocols used in electrical power systems, especially in substations and national SCADA systems. Both belong to the IEC-60870-5 family, which defines how remote telecontrol data is exchanged for monitoring, supervision, and automation. Even though the two protocols share the same information structure (ASDUs), they behave very… Read More »

Zero-Trust Architecture for SCADA — Securing IEC 60870-5-104 Systems

Modern SCADA systems are no longer isolated. With the rise of remote substations, cloud monitoring, and IP-based protocols like IEC 60870-5-104, the traditional “trusted internal network” model is obsolete. That’s where Zero-Trust Architecture (ZTA) comes in — a cybersecurity framework that assumes no device, user, or network is inherently trustworthy.Instead, every connection must be verified, authenticated, and continuously… Read More »

RS232 vs RS485: Key Differences, Comparison, and Pinout Explained

When comparing RS232 vs RS485, it’s essential to understand that both are serial communication standards — meaning they send data bit by bit over a single communication line. However, RS232 is designed for short, point-to-point connections, while RS485 supports long-distance, multi-device networks using differential signaling. This guide explains the key differences, pin configurations, wiring, and real-world use cases… Read More »