Patent ID: 8893216

Claim:
A method for enabling security in an electrical system, the method comprising: examining, by a controller device in an electrical substation, a configuration file for the electrical substation, wherein the electrical substation includes an electrical device and a network device in an electrical system, wherein the electrical device is associated with generation and transmission of electricity, and the network device is connected to the electrical device and associated with managing data communications exchanged by the electrical device with other devices in the electrical system; based on examining the configuration file, obtaining determining, by the controller device, a new role of the electrical device in the electrical substation; in response to obtaining the new role of the electrical device in the electrical substation, determining, by the controller device, communication patterns that are allowed for the new role of the electrical device; generating, by the controller device, a rule that specifies the communication patterns that are allowed for the new role of the electrical device; and configuring, by the controller device, a security policy in the network device in the electrical substation to incorporate the generated rule, such that data communications exchanged by the electrical device with other devices in the electrical system are managed at the network device based on the generated rule incorporated into the security policy configured in the network device.