Fig. 7
From: An integrated testbed for locally monitoring SCADA systems in smart grids
Illustration of the effects of an attack scenario on RTU1 with local monitoring. Figure 7 illustrates the effects of an attack on a transformer controlled by RTU1. Here, the traffic monitoring is enabled, however the commands are not discarded in order to present the outcome of those commands. The voltage on bus B_5 is shown in red on the y-axis for different simulation times (in seconds). It can be seen that Bro issues alerts (marked in green) when receiving commands to change the tap switch position, such that the secondary voltage would become to high. Once the command has been executed, a Bro warning is issued upon every sensor reading (marked with the blue diamonds)