Safety monitoring method of electric power industrial control terminal based on service logic consistency

Abstract

The invention discloses a safety monitoring method of electric power industrial control terminal based on service logic consistency, the invention aims at the safety problem of the electric power industrial control terminal equipment introduced by the diversified information in the 'Internet +' intelligent grid system, breaks through the existing attack detection method simply relying on the network space information, and puts forward a safety method of the electric power industrial control terminal based on the service logic consistency. By sampling the multi-modal data of physical world information and cyberspace information, normalized processing and temporal correlation, and through training, the safety monitoring set and parameter constraint set are obtained for safety monitoring andanomaly identification. From the business level, the method can effectively early-warn the state abnormality caused by equipment performance difference, equipment failure and hacker intrusion, and realize the 'time-state-service' trinity consistency safety monitoring of the electric power industrial control terminal based on equipment time logic, state logic and business logic.

Description

technical field [0001] The invention relates to a safety monitoring method for electric power industrial control terminals, in particular to a safety monitoring method based on power business logic consistency. technical background [0002] In the power system, the main function of the grid is to distribute and transmit electrical energy. In the Internet age of the 21st century, the power grid as an energy infrastructure must also be inseparable from informatization. While informatization is highly flexible, it also brings many threats and uncertainties. As the "siblings" of the power industrial control system, the power industrial control terminal plays a pivotal role in the process of power informatization. "Stuxnet", "Flame" and the viruses in the Ukraine blackout incident are all cyber attack forces, which cause damage to the power system through power industrial control terminals. The attacker is familiar with the attacked system and network structure, and uses advanc...

AI Technical Summary

Problems solved by technology

"Stuxnet", "Flame" and the viruses in the Ukraine blackout incident are all cyber attack forces, which cause damage to the power system through power industrial control terminals

The attacker is familiar with the attacked system and network structure, and the attack technology used is advanced. The spread of the virus and the damage are very hidden, and the existing terminal anti-virus software cannot detect and kill it.

Images