Fwd: Rules for detecting IEC61850 GOOSE messages

[Muhammad Talha Abdul Rashid <uchiha.lat () gmail com>]

Hi there, is it possible for Snort IDS to detect an attacks that exploited
from IEC61850 GOOSE message protocol such as GOOSE DoS attack and GOOSE
packet modification attack?

If this is possible how and which part inside Snort IDS that needed to be
modify or implemented a new code in order for the IDS to detect IEC61850
GOOSE-based attack?

------------------------------------------------------------------------------
Download BIRT iHub F-Type - The Free Enterprise-Grade BIRT Server
from Actuate! Instantly Supercharge Your Business Reports and Dashboards
with Interactivity, Sharing, Native Excel Exports, App Integration & more
Get technology previously reserved for billion-dollar corporations, FREE
http://pubads.g.doubleclick.net/gampad/clk?id=164703151&iu=/4140/ostg.clktrk

_______________________________________________
Snort-users mailing list
Snort-users () lists sourceforge net
Go to this URL to change user options or unsubscribe:
https://lists.sourceforge.net/lists/listinfo/snort-users
Snort-users list archive:
http://sourceforge.net/mailarchive/forum.php?forum_name=snort-users

Please visit http://blog.snort.org to stay current on all the latest Snort news!