Intelligent Electronic Device (IED)

An Intelligent Electronic Device (IED) is a type of specialized field device that is designed to perform specific operational functions, frequently for protection, monitoring, or control within the electric sector. IEDs are typically used to both acquire telemetry and execute tailored control algorithms/actions based on customizable parameters/settings. An IED is usually implemented as a dedicated embedded device and supports various network automation protocols to communicate with RTUs and Control Servers.

ID: A0005
ⓘ
Platforms: Embedded
Sectors: Electric
Version: 1.1
Created: 28 September 2023
Last Modified: 12 May 2026

Related Assets

Name Sectors Description
Protection Relay Electric

A protection relay is a type of IED used within the electric sector to monitor for faults or problematic operating conditions on power lines, busses, or transformers. While traditionally protection relays were electromechanical or electromagnetic devices, modern relays utilize microprocessors, embedded operating system, and SCADA communications.

Field Device / Controller General

IEDs may be referred to as Field Controllers or Field Devices as a general function name.

Techniques

Domain ID Name
ICS T0800 Activate Firmware Update Mode
ICS T0830 Adversary-in-the-Middle
ICS T0878 Alarm Suppression
ICS T1695 Block Communications
.001 Serial COM
.002 Ethernet
.003 Wi-Fi
ICS T1691 Block Operational Technology Message
.001 Command Message
.002 Reporting Message
ICS T0806 Brute Force I/O
ICS T0892 Change Credential
ICS T1701 .003 Command and Scripting Interpreter: Unix Shell
ICS T0885 Commonly Used Port
ICS T0884 Connection Proxy
ICS T0809 Data Destruction
ICS T0814 Denial of Service
ICS T0816 Device Restart/Shutdown
ICS T0871 Execution through API
ICS T0820 Exploitation for Evasion
ICS T0890 Exploitation for Privilege Escalation
ICS T0866 Exploitation of Remote Services
ICS T0874 Hooking
ICS T0872 Indicator Removal on Host
ICS T1694 Insecure Credentials
.001 Default Credentials
ICS T0838 Modify Alarm Settings
ICS T1693 .001 Modify Firmware: System Firmware
ICS T0836 Modify Parameter
ICS T0801 Monitor Process State
ICS T0834 Native API
ICS T0840 Network Connection Enumeration
ICS T0842 Network Sniffing
ICS T0861 Point & Tag Identification
ICS T0846 Remote System Discovery
.001 Port Scan
.002 Broadcast Discovery
.003 Multicast Discovery
ICS T0888 Remote System Information Discovery
ICS T0847 Replication Through Removable Media
ICS T0848 Rogue Master
ICS T0851 Rootkit
ICS T0881 Service Stop
ICS T0869 Standard Application Layer Protocol
.001 DNS
.002 Publish/Subscribe Protocols
ICS T0862 Supply Chain Compromise
ICS T1692 Unauthorized Message
.001 Command Message
.002 Reporting Message
ICS T0859 Valid Accounts