Distributed SCADA intrusion detection across smart-grid substations

Watch the control-system network traffic at many substations, turn what “normal” protocol behavior looks like into machine-readable security rules, and send alerts to a central control room when something suspicious happens.