Cybersecurity in Critical Infrastructures, especially Digital Substations, has garnered significant attention from both the industrial and academic sectors. A commonly adopted approach to support research in this area involves the use of datasets, which consist of network traffic samples gathered during the operation of an infrastructure. However, creating such datasets from real-world electrical systems presents some challenges: (i) These datasets are often generated under controlled or idealized conditions, potentially overlooking the complexities of real-world operations within a digital substation; (ii) the captured data frequently contain sensitive information, making it difficult to share openly within the research community. This paper presents the creation of a new dataset aimed at advancing cybersecurity research, specifically focused on GOOSE spoofing attacks, given the crucial role of the GOOSE protocol in managing operational and control tasks within Digital Substations. The dataset highlights the real-world impacts of these attacks, demonstrating the execution of unintended operations under different operational scenarios, including both stable conditions and situations involving system failures. The data were collected from a laboratory testbed that replicates the actual functioning of a real digital substation with two bays. The experiments provided insights into key characteristics of GOOSE protocol traffic and the vulnerability of DS infrastructure to Spoofing Attacks.

The Fourth Industrial Revolution is transforming global industries. However, Latin America faces significant challenges in adopting these technologies. Particularly, small- and medium-sized enterprises constitute the backbone of the economy in the region. This study analyzes the technological gap between Latin America and more developed regions, focusing on public policies, infrastructure, and gap-closing training. Based on a systematic literature review and secondary data analysis, this research highlights key indicators such as digital infrastructure, investment in research and development, and the effectiveness of government strategies in promoting Industry 4.0 and Industry 5.0. Results reveal that Latin America lags behind Europe and Asia in applications related to Internet of Things, cloud infrastructure, and artificial intelligence. However, there are opportunities for improvement through targeted public policies, increased investment in research and development, and enhanced collaboration between the public and private sectors. The study concludes that bridging the digital divide requires a holistic approach that includes improving infrastructure, fostering digital skills, and creating favorable regulatory environments. This research stands out from similar studies by providing a detailed analysis of the regional barriers to adopting Industry 4.0 and Industry 5.0 and offering concrete recommendations for policymakers.

Cybersecurity in Critical Infrastructures, and in particular Digital Substations is a topic of wide interest for industry and academic community. One of the approaches widely used to support research on this field is the use of datasets (i.e., traffic samples collected during the operation of an infrastructure). However, generating datasets from operational electrical systems presents certain challenges: i) The generation of these datasets generally implies the operation under controlled or ideal conditions, which possible ignores the dynamics of real-world operations within a digital electrical substation; and ii) Captured data often contains sensitive information, posing challenges for publication within the research community. This paper introduces the development of a dataset for cybersecurity research, focusing on the analysis of GOOSE spoofing attacks, given the critical role of GOOSE protocol in executing operational and control actions within Digital Substations. The dataset exposes the real effect of the attack by executing unwanted operations or actions under various operational conditions, including both stable electrical system scenarios and situations where failures are present in the electrical system. The dataset was acquired from a laboratory testbed developed within a physical infrastructure that emulates the actual operation of a digital substation with two bays. Experiments allowed to observe relevant properties of the traffic associated to GOOSE protocol, and the actual vulnerability of a DS infrastructure regarding Spoofing Attacks.

This study focuses on the adjustment and coordination of overcurrent protections in an electrical protection system to ensure system reliability. The study defines the behavior of overcurrent protection, including the instantaneous function (ANSI protection 50) and time-delayed function (ANSI protection 51). A case study of a power system is presented to illustrate the implementation of trigger logic in commercial relays from different manufacturers. The coordination of relay trip curves is achieved using the IEC inverse curve equation. The analysis emphasizes the importance of proper protection coordination during fault scenarios to maintain system reliability. The proposed dynamic protection scheme utilizes the advantages of IEC 61850 digital substation technology, incorporating the GOOSE protocol for communication between relays. The study validates the effectiveness of the coordination logic through simulated fault events. The results demonstrate the successful adaptation of protection settings to changing system dynamics, ensuring reliable and safe operation. The model has proven to be effective in protecting the system against contingencies, even in cases of multiple faults. However, it has limitations on the number of devices. It is suggested to explore alternative approaches to improve coordination capacity.

Este artículo se enfoca en un estudio de ajuste y coordinación de protecciones en sistemas eléctricos para garantizar la operación continua y la seguridad ante fallas. Se analizan las protecciones de sobrecorriente de tiempo definido (protección 50) y temporizada (protección 51) según la norma ANSI. Se propone un caso de estudio de un sistema de potencia con tres generadores y un generador sincrónico como nodo slack. Se ajustan los parámetros de las protecciones utilizando la ecuación de la curva IEC inversa. Se enfoca en los relés de las líneas 4 y 5 en un escenario de cortocircuito en la línea 4. Se explica la lógica de coordinación dinámica basada en el cambio de grupo de protecciones y el uso del protocolo IEC 61850. Se describe la secuencia de operación de los relés y la arquitectura implementada para las pruebas además de simular eventos de falla con un inyector de secundarias.

La digitalización del sector eléctrico ha transformado la arquitectura operativa de las subestaciones, promoviendo el uso de estándares como IEC 61850 para lograr interoperabilidad y eficiencia en la transmisión de datos críticos. No obstante, esta evolución ha expuesto nuevos vectores de ataque que comprometen la integridad y disponibilidad de los sistemas de automatización. En este contexto, las Redes Definidas por Software (SDN) emergen como una alternativa tecnológica para incrementar la resiliencia cibernética y optimizar la gestión del tráfico en entornos de misión crítica. Este artículo presenta un estudio experimental sobre la integración de SDN en subestaciones digitales mediante una arquitectura híbrida que combina dispositivos SDN y de comunicaicón tradicionales. Se implementó una metodología dual basada en simulaciones con Mininet y pruebas físicas en un entorno de laboratorio que replica condiciones reales. Se evaluaron métricas técnicas como latencia GOOSE, integridad de SV, tiempo de detección de anomalías y capacidad de reconfiguración dinámica bajo escenarios de ataque. Los resultados demuestran que SDN permite cumplir con los requisitos temporales del estándar IEC 61850, incluso ante amenazas activas, y facilita la segmentación lógica y el control centralizado de flujos críticos. La arquitectura híbrida se valida como una solución escalable, adaptable y compatible con infraestructuras existentes. Se concluye que SDN representa un habilitador estratégico para la automatización segura de subestaciones inteligentes, y se proponen líneas de investigación futura basadas en inteligencia artificial, y estándares de ciberseguridad.