Passive grid-edge OT monitor stays under 0.12 ms of baseline latency
Original title: Latency-Neutral Passive Cyber Monitoring for Grid-Edge Operational Technology Networks
A lab power loop on Modbus TCP and IEC 61850 MMS stayed stable across 32,927 round-trip samples.
Researchers assess the Operational Technology Supervisor, a three-tier passive monitor for timing-sensitive grid-edge networks. Bare-metal gear ingests copies through a SPAN loop with no Layer-3 configuration, and software allows only one-way export. Over 32,927 samples, latency versus an unmonitored baseline was under 0.12 milliseconds, which the authors say did not measurably degrade the reporting path.
Unconfirmed: Results are from a laboratory power-monitoring loop, not a live grid.
- Inspection is kept off the production network by a physical SPAN loop.
- The audit collected 32,927 active-monitoring round-trip time samples.
- The laboratory loop ran Modbus TCP and IEC 61850 MMS.
- Authors report the monitored reporting path was not measurably degraded.
From the original article
1 min read at arxiv.orgDeterministic industrial networks often present an operational trade-off between maintaining microsecond timing of primary control loops and capturing security telemetry. This work investigates the engineering feasibility of the Operational Technology Supervisor (OTSV), a three-tier passive monitoring framework designed to resolve this visibility challenge within timing-sensitive grid-edge infrastructure.
By Damian Byrne · arxiv.org
A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.