Network risk monitoring method and system for substation

Abstract

The invention relates to the substation management control field, and discloses a network risk monitoring method and system for a substation. The network risk monitoring method for a substation includes the steps: according to the operating information of special equipment, general hardware and business application, constructing an operation information model; acquiring the monitoring data which includes operation, performance, alarm and logs of network equipment, business system operation alarm information, and network data record of a station control layer and a data network switch; according to a strategy, performing network safety risk induction, and performing comprehensive analysis on the alarm information from different sources to form intelligent alarm and generate abnormal information and record; uploading the abnormal information and record, and the monitoring data to a main station through an IEC61850-MMS interface; and receiving a control command of the main station, starting a substation hard node switch, and performing corresponding processing on the substation network. The operation information model based on the substation monitoring system can more quickly find the fault, can trace the generation source of the fault, can locate the area of effect of the fault, and can predict the propagating trend of the fault.

Description

Technical field [0001] The invention relates to the field of substation management and control, and in particular to a method and system for monitoring network risks of a substation. Background technique [0002] Substation auxiliary monitoring usually includes many devices such as integrated automation system, remote control system, PMU, power acquisition, trustworthiness subsystem, and dispatch data switch, station control layer switch, firewall, network isolation device, vertical encryption authentication device and so on. Usually each subsystem runs independently, and each subsystem cannot interact with each other. The main problems in operation and maintenance management and network security are as follows: [0003] (1) There is a lack of a network security risk early warning mechanism. Once the system fails, it is difficult for operation and maintenance personnel to find the cause in a large amount of network data. [0004] (2) According to the safety regulations of the power ...

AI Technical Summary

Problems solved by technology

[0007] The present invention provides a network risk monitoring method and system for a substation, which solves the problem that in the prior art, it is difficult for substation network security monitoring operation and maintenance personnel to find out the cause in a large amount of network data in time, and the latest virus detection database cannot be directly updated, and the laptop or mobile Storage access has technical constraints and technical issues

Images