Power station automation system data network security monitoring method

Abstract

The invention relates to a power station automation system data network security monitoring method. An Snort detecting engine is utilized to realize the monitoring for a power station automation system data network on a traditional electric power system computer network system, an inserted rule of the engine comprises communication rules including CDT, IEC-60870-101 and IEC-61850, and the frame format of the rule is utilized to establish an engine matched condition; the monitoring for network security is realized through the following two modes: a. monitoring the data frame content transmitted on the work, using a rule format transmitted by power station data as a reference, permitting the information satisfying the rule format to continuously circulate, and isolating the information unsatisfying the rule format; b. monitoring the real-time flow of a power station data acquisition network, and if finding abnormal network flows, then indicating that abnormal data is transferred, and giving warning information by a power station automation system data network security monitoring device.

Description

technical field [0001] The invention belongs to the technical field of power electronics, and in particular relates to a data network security monitoring method for a power station automation system. technical background [0002] With the development of computer technology, communication technology and network technology, there are more and more data exchanges between substations, power plants, power grid dispatching centers, users, etc. Modern power systems consider the safety and reliability of basic power facilities. , it is increasingly necessary to strengthen the consideration of information security. The improvement of the automation level of electric power production has led to a large number of event communications such as remote control and monitoring, which poses new severe challenges to the security, reliability, and real-time performance of power control systems and data networks. [0003] The power system computer network system is divided into four safe work a...

AI Technical Summary

Problems solved by technology

[0010] Power plant automation systems usually use a dedicated operating system, and the user interface for the new system is basically based on Windows or Unix systems. Therefore, security holes will be exposed to attackers, especially for a large number of application software using Windows operating systems. is very obvious

[0011] 4) Mass data transmission problem

[0012] The massive data transmission suffered by the power station network cannot be effectively controlled, and the power data has not been effectively filtered, resulting in non-important data occupying limited bandwidth resources and affecting the transmission of important data with high real-time performance

[0013] To sum up, the current network data security loopholes in the power system are very obvious, and there is no electronic security certification capability, there are great hidden dangers

Images