A network security threat assessment method and system for a substation monitoring system

Abstract

The invention provides a network security threat evaluation method for a substation monitoring system. The method comprises the steps of firstly, reading a UML graph which describes a monitoring system application scene, and identifying primary network security threats and attack objects of the substation monitoring system; then analyzing and combining the network security threats, outputting a monitoring system security threat model, and refining the model into an attack tree; and finally, carrying out formalized description on the attack processes and attack behaviors of the specific network security threats, and outputting the attack processes and attack behaviors in an Object-Z format. Correspondingly, the invention also provides a matched network security threat evaluation system for the substation monitoring system. According to the method provided by the invention, the network security threats of the monitoring system can be described qualitatively, and the network security threats are visual and clear; and the threat attack behaviors are described by use of a formalized mathematical language, and therefore, corresponding defensive measures can be provided.

Description

Technical field [0001] The invention belongs to the field of network security control, in particular to a network security threat assessment method and system for a substation monitoring system. Background technique [0002] As the power dispatching automation system and the substation monitoring system are basically networked, the network security issues of the power dispatching system and the substation monitoring system have become increasingly prominent. With the sixteen-character proposal of "security partition, network dedicated, horizontal isolation, vertical encryption", the power system has successively deployed vertical encryption authentication devices and horizontal isolation devices on the power dispatch data network, strengthening the network boundary between the substation and the dispatch data network However, the network security analysis and defense in the substation are often ignored. [0003] Traditional thinking believes that the substation monitoring system n...

AI Technical Summary

Problems solved by technology

Researchers are often limited to the perspective of the electric power field, and lack the perspective of evaluating substation network security from the perspective of information security.

Images