Information security offense and defense drill competition system for power industry

Abstract

The invention discloses an information security offense and defense drill competition system for the power industry, comprising an experimental platform, an experimental environment customization module and an application scenario customization module. The experimental platform is used for implementing offense and defense drill competition, being connected with the experimental environment customization module and the application scenario customization module, building attacks and carrying out security test, and includes a knowledge base management module, an online learning module and an offense and defense competition module. The experimental environment customization module is used for customizing a comprehensive drill scenario, analyzing malicious codes, and carrying out Intranet penetration and hole mining. The application scenario customization module is used for power information security training, information security offense and defense scenario drilling, industrialized depth customizing, security product testing, security technology researching and security assessment testing. According to the invention, the information security independent control capability, the safety monitoring capability, the notification and warning capability, the emergency disposal capability and the whole-process management control capability of companies can be improved.

Description

technical field [0001] The invention relates to an information security attack and defense drill competition system adapted to the electric power industry. Background technique [0002] Under the current circumstances, with the popularization of power system work informatization and the deepening application of information systems, information security has become an important part of the informatization work of power grid companies. Information security work is the foundation and guarantee of enterprise informatization construction, which is directly related to the security and development. [0003] With the extensive development and application of information technology, the information security situation is becoming increasingly severe. The "Prism Gate Incident", "Snowden Incident", and "Heartbleed Vulnerability" all reflect the increasing international information security situation. Under the current situation, power grid security protection is facing deeper security th...

AI Technical Summary

Problems solved by technology

In addition, for the loopholes in the power information system, hackers in the society use various methods, such as: using weak passwords in the server system, implanting virus and Trojan horse files on the server, thereby stealing sensitive information in the power system or tampering with website content, etc.

Many units have not established an information security attack and defense drill platform that simulates hacker attacks, and information security protection is relatively weak. Malicious attackers may use system vulnerabilities to log in to the system to obtain sensitive information, resulting in power supply schemes, security schemes, substation building structure diagrams, Leakage of electrical main wiring diagrams, information room topology diagrams, and related sensitive materials and information

Images