# Enhancing Cybersecurity in Smart Grids: False Data Injection and Its Mitigation
## 2 Cybersecurity Vulnerabilities in Smart Grids and Mitigation Requirements
### Security Standards of Communication Systems Mitigation
A VPN system can make on top of existing CP networks, providing a safe communications contrption for message and information transmitted among two addresses. The data exchange in the middle of the web browser and the VPN device is encrypted with the Secure Sockets Layer (SSL), Transport Layer Security (TLS), SSL/TLS [46] or Secure Shell (SSH), which are high layer security mechanisms, can also be used [46; 47]. * ISO/IEC 62,351 standard covers communication security issues for energy systems management and information sharing. It deals with communication protocols and network and operating systems [48]. IEC Standards provide communication and information security, security for profiles containing TCP/IP, Quality of service (QoS), mobility, multi-homing, and other enhancements essential for SG applications to be efficiently secured and well-controlled if TCP/IP is to be adopted [36]. * IEC 563 report generally includes status and advisory standards for smart grid cybersecurity requirements. It covers industrial security standards, access controls, identity management, secure network, wired and wireless connection standards [48]. * Security for profiles with Manufacturing Messaging Specifications (MMS) [49], Security for IEC 60870-5, and its derivatives (DNP) [50] Security for IEC 61,850 profiles, Elements (targets) to grid security can be counted [43]. * The level of security provided by the different degrees of wireless communication protocols is also varied. IEEE 802.11i [50] and IEEE 802.16e [51] standards can be used to safety wireless grids. * IEC 61,850 structure provides digital fast communication and use Internet Protocol (IP) based addresses [52]. * Federal Information Processing Standard (FIPS) certifies the Advanced Encryption Standard (AES) [53]. * Triple Data Encryption Standard (3 DES) [54] for robust security and high performance. SG communication system has an architecture in which data collection and control can be performed [13]. Distributed control centre (DCC) supports metering and metering systems, power system stability, data management, power system activities, and data exchange control. Transformer centre includes Remote Management Units (RTU) and fuses, Human Machine Interfaces (HMI), Control and communication assets (equipment of switchers or routers), log servers, data collectors, and protocol gateways. Intelligent Electronic Devices (IED) are field equipment which includes a set of converter tools, tap changers, circuit terminators, phase measuring units (PMUs), and protection relays. It is defined in the IEC 61,850, when data transmitted with the IED contains the MAC (Media access control) address. When this address determines which device or equipment will receive this message, they allow data transmission with DCS securely. Accessibility means that data can be used to open, close, hold, and allow the system; they work in compliance with communication protocols. Therefore, this authentication allows authorization. The purpose of security in the SG is to protect the user's integrity [6]. The advanced smart grid system should prevent sensitive data from being exposed to unauthorized persons or harmed by others. The security definition should ensure that the smart grid system's use does not endanger the individual's privacy. Different stakeholders' combined efforts, including government, consumers, industry, and academia, are needed [29]. Table 1 summarizes communication technologies which have to work simultaneously with standards and protocols.