Network security threat evaluation method and system for substation monitoring system

Abstract

The invention provides a network security threat evaluation method for a substation monitoring system. The method comprises the steps of firstly, reading a UML graph which describes a monitoring system application scene, and identifying primary network security threats and attack objects of the substation monitoring system; then analyzing and combining the network security threats, outputting a monitoring system security threat model, and refining the model into an attack tree; and finally, carrying out formalized description on the attack processes and attack behaviors of the specific network security threats, and outputting the attack processes and attack behaviors in an Object-Z format. Correspondingly, the invention also provides a matched network security threat evaluation system for the substation monitoring system. According to the method provided by the invention, the network security threats of the monitoring system can be described qualitatively, and the network security threats are visual and clear; and the threat attack behaviors are described by use of a formalized mathematical language, and therefore, corresponding defensive measures can be provided.

Description

technical field [0001] The invention belongs to the field of network security control, in particular to a network security threat assessment method and system for a substation monitoring system. Background technique [0002] As the power dispatching automation system and substation monitoring system are basically networked, the network security issues of power dispatching system and substation monitoring system are becoming increasingly prominent. Accompanied by the sixteen-character proposal of "safe partition, dedicated network, horizontal isolation, and vertical encryption", the power system has successively deployed vertical encryption authentication devices and horizontal isolation devices on the power dispatching data network, strengthening the network boundary between substations and dispatching data networks However, the network security analysis and defense in the substation are often ignored. [0003] Traditional thinking holds that the substation monitoring syste...

AI Technical Summary

Problems solved by technology

Researchers are often limited to the perspective of the electric power field, and lack the perspective of evaluating substation network security from the perspective of information security.

Images