GOOSE Secure

Currently, cybersecurity in digital substations is a topic of wide interest for companies and the academic community, which demands for its study the analysis of datasets (i.e., traffic collected during the operation of a substation). However, generating datasets from operational electrical systems presents certain limitations: 1) The generation of these datasets generally implies the operation under controlled or ideal conditions, disregarding the dynamics of real-world operations within a digital electrical substation; and 2) captured data often contains sensitive information, posing challenges for publication within the research community. This dataset development for cybersecurity research, focusing on the analysis of GOOSE spoofing attacks, given the critical role of GOOSE protocol in executing operational and control actions within digital substations. The dataset exposes the effectiveness of the attack by executing unwanted maneuvers or actions under various operational conditions, including both stable electrical system scenarios and situations where failures are present in the electrical system. The dataset was acquired from a laboratory testbed developed within a physical infrastructure that emulates the actual operation of a digital substation with two bays. It includes control and protection devices like IEDs and GPS time servers, all interconnected by an Ethernet switch.