Power communication backbone network safety risk assessment method based on network topology

Abstract

The invention discloses a power communication backbone network safety risk assessment method based on network topology. The method comprises the following steps of: identifying a network unit in a power communication backbone network topology chart; respectively calculating the service importance and safety risk event probability of the network unit; and respectively calculating safety risk values of the network unit and the link and performing risk assessment. The safety risk assessment of the power communication backbone network is performed by combining the network topology and the network service importance, the network and link in the backbone network are subjected to safety risk assessment, the safety risk level of the whole backbone network can be counted, the assessment result is specific and credible, the actual field requirements can be met, and the method is convenient for management of managers and has practical guiding significance.

Description

technical field [0001] The invention relates to the technical field of information security, in particular to a security risk assessment method for a power communication backbone network based on a network topology. Background technique [0002] The power communication network is a dedicated communication network serving the power system. It consists of multiple subnets such as transmission, exchange, and data. Multi-level complex network structure. Failure of any one of them will affect the service quality of the communication system, and even pose a serious threat to the safe and stable operation of the power grid. [0003] At present, there are mainly three methods to study the security risk assessment of power communication network: (1) according to the risk assessment index system of power communication network, use fuzzy comprehensive evaluation method, analytic hierarchy process, etc. to conduct comprehensive assessment; (2) ) Apply the system security engineering c...

AI Technical Summary

Problems solved by technology

[0004] However, among the above three methods, methods (1) and (2) only evaluate the security risk of the power communication network as a whole, which is not only greatly affected by subjective factors, but also the evaluation results are rough, impractical, and lack of credibility; method (3) When calculating the asset value of a component and thus calculating the degree of risk impact, the network service importance of the component is not considered according to the network topology and network services. If multiple services of different importance are run on a component at the same time, Even if the asset value of the component is not high, its impact will be very large in the event of a failure. Moreover, the method of calculating the risk value by using the series-parallel equivalent method lacks theoretical basis, so the evaluation result may not meet the actual requirements.

Images