C.3
Date Code 20171006 Instruction Manual SEL-400 Series Relays
Cybersecurity Features
Malware Protection Features
Malware Protection Features
Firmware Hash Verification
SEL provides firmware hashes as an additional tool to verify the integrity of SEL
firmware upgrade files. This helps ensure that the firmware received from the
factory is complete and unaltered prior to sending the firmware to the SEL
device. Verify that the firmware file in your possession is a known good SEL
firmware release by comparing the calculated hash value of the firmware in your
possession with the hash value provided at selinc.com/products/firmware/.
Operating System/Firmware
SEL-400 series relays are embedded devices that do not allow additional soft-
ware to be installed. SEL-400 series relays include a self-test that continually
checks running code against the known good baseline version of code in nonvol-
atile memory. This process is outlined in more detail in the document titled The
SEL Process for Mitigating Malware Risk to Embedded Devices located at
selinc.com/mitigating_malware/.
SEL-400 series relays run in an embedded environment for which there is no
commercial anti-virus software available.
Software/Firmware Verification
SEL-400 series relays have the ability to install firmware updates in the field.
Authenticity and integrity of firmware updates can be verified by using the Firm-
ware Hash page at selinc.com/products/firmware/.
Logging Features
Internal Log Storage
The Sequential Event Recorder (SER) log is a useful tool for capturing a variety
of relay events. In addition to capturing state changes of user selected Relay
Word bits, it captures all startups, settings changes, and group switches. See
Sequential Events Recorder (SER) on page 9.28 for more information about SER.
Alarm Reporting
The relay provides the following Relay Word bits that are useful for monitoring
relay access:
➤ BADPASS—Pulses for one second if a user enters three successive
bad passwords.
➤ ACCESS—Set while any user is logged into Access Level B or higher.
➤ ACCESSP—Pulses for one second whenever a user gains access to
an Access Level of B or higher.
➤ PASSDIS—Set if the password disable jumper is installed.
➤ BRKENAB—Set if the breaker control enable jumper is installed.
To Next Page
Loading...
