# Enhancing Cybersecurity in Smart Grids: False Data Injection and Its Mitigation
## 2 Cybersecurity Vulnerabilities in Smart Grids and Mitigation Requirements
### Security Standards of Control Systems Mitigation  
Control systems in SGs are generally used in a distributed or centralized manner to manage power generation facilities. DCS can be thought of as a process control architecture that controls, in particular, more than one region's integrated subsystem. The DCS is designed to oversee a smaller group of supervisors who share responsibilities in order to run the entire production operation [65]. Control is often used in conjunction with bilateral communication systems. During the process, parameters that should be controlled should be provided with high security through communication and control systems. Distributed Network Protocol 3 (DNP3) and Generic Object Oriented Substations Events (GOOSE), IEC 61,850 and IEC 608750-5 standards have been developed for control systems [14] to use the implementation of consistent security solutions, but adequate standardization has not been achieved yet [66]. Isolated industrial and distributed control systems are safely accepted, and cybersecurity dimension is substantially negligible in the first years of its installation. However, over time, the industrial control system and communication protocol standards have shifted to open international standards to control and monitor a geographically dispersed structure far apart from each other to increase productivity and efficiency and the need for internet or intranet connectivity [67]. Transportation, energy, medical, security, and logistical control systems are used for different purposes, such as using other protocols and services despite sharing similar characteristics [68]. For this reason, the additional control systems are used similar methods against cybersecurity threats. Control systems used for different purposes can be found in the SG as follows [53]: AMI, Building Automation Systems (BAS), Building Management Control Systems (BMCS), Closed-Circuit Television (CCTV) Surveillance Systems, CO2 Monitoring, Digital Signage Systems (DSS), Digital Video Management Systems (DVMS), Electronic Security Systems (ESS), Emergency Management Systems (EMMS), Energy Management Systems (EMS), Intrusion Detection Systems (IDS), Physical Access Control Systems (PACS), Public Safety/Land Mobile Radios, Renewable Energy Geothermal Systems (REGS), Renewable Energy Photovoltaic Systems (PVS), etc. With these various purposes, the changes of paradigm, digitalization, standardization, and their impacts on the smart grids are summarized in Table 2.  
As shown in Table 2, standardization is needed for easy connection, integration, and operation. The digitalization has advantages as serving scalability, easy operation, and access to the communication networks and this connection can be used for malicious aims. However, this means attackers can model themselves as a legal device as a relay or circuit breaker, exchange information with other entities as the parameters and messages are well-known [13]. In order to ensure the stability, especially in Supervisory Control and Data Acquisition systems, Modbus: Master/Slave--Port 502, BACnet2: Master/Slave--Port 47,808, LonWorks/LonTalk3: Peer to Peer--Port 1679, DNP3: Master/Slave--Port 19,999, IEEE 802.x, ZigBee, and Bluetooth--Master/Slave Protocols [53] and standards in the following should be used. * NIST SP 800-53, Standard titled security and privacy management for Federal Information Systems and Organizations (FISO), includes selecting a security control center, adapting the power lines to security control, recording control selection process, new methods and legal systems [36]. * ISA-SP99 production and control systems safety standard has been published in 2 technical report parts. The standard covers improving the accessibility, integrity and confidentiality of the elements and systems used in control. It aims to establish security control systems. It includes technical reports, specifically data to control systems, safety standards and publications [43].