Network N-1 security-region-boundary calculation and security evaluation method

Abstract

The invention discloses a network N-1 security-region-boundary calculation and security evaluation method and relates to the field of analysis of network security. The method includes: defining network operation work points, network N-1 security and network security regions. The method is a security evaluation method based on the security regions. The security evaluation method based on the security regions is capable of judging the security of a system rapidly without simulating N-1 events one by one and giving measurement of the security. The network N-1 security-region-boundary calculation and security evaluation method is widely applicable to undirected authorized networks such as power grids and communication networks and the like. The general security-region method which is applicable to general networks provides a basis for adjustment of work points and planning of topology and capacity when the general networks are subjected to random attacks. It is found that in the security-region method, a security-distance calculation result is highly identical with an anti-destroying-ability calculation result so that correctness of the security-domain method in security measurement is proved.

Description

technical field [0001] The invention relates to the field of network security analysis, in particular to a network N-1 security domain boundary calculation and security evaluation method. Background technique [0002] Safety, reliability and efficiency are the goals pursued by the system. Whether it is a computer network, power network, urban traffic network, communication network or cell metabolism system, it is necessary to maintain normal operation through redundant paths when some components fail. Therefore, security and reliability require the network to have a certain ability to complete specified functions even when some components fail due to external random disturbances or malicious attacks. Invulnerability is a typical method to evaluate this capability, which has been widely studied and applied in recent years. [0003] As an important indicator of network reliability, invulnerability research began on strategic communication networks, and after Albert's paper i...

AI Technical Summary

Problems solved by technology

[0005] The existing invulnerability research methods, whether simulation or analytical [1] They all focus on using a numerical value to measure the reliability of the network, and have the following defects: 1) Calculation amount and speed: simulation of each operating point and each component, the calculation amount is large, time-consuming, and does not meet the needs of real-time online; 2 ) security control: not intuitive enough, inconvenient for real-time security control

3) The effect and accuracy of safety evaluation: it can only provide binary information on safety or unsafety or the averaged overall safety index value, and the information is less; it can only be judged from a part, and cannot fully reflect the overall safety margin. Distinguishes the different network states during safe operation, so capacity allocation planning and security evaluation cannot be accurately performed

Images