The author proposes a hybrid IDS-integrated SDN framework to detect and prevent cyber-attacks on IEC 61850-based GOOSE messages in digital substations.