Method, system and power system for assessing hidden dangers of information physical security in electric power network

Abstract

The invention discloses a method, system and power system for assessing hidden dangers of power network information physical security, which comprehensively considers basic indicators, time indicators, and network attack ability indicators, and calculates the utilization rate of high-risk loopholes in power information equipment; establishes network security for power information equipment Vulnerability assessment model to calculate the attack success probability of power information equipment defense measures; according to the exploitability rate of high-risk vulnerabilities of power information equipment and the attack success probability of power information equipment defense measures, a network attack graph model is established to calculate the attack success probability of power information equipment ;Establish a power information equipment-physical component failure correlation model to evaluate the physical consequences of power information equipment being attacked by a network. The invention overcomes the deficiencies of the existing method in analyzing the attack behavior and the lack of consideration of the characteristics of the power service, and improves the accuracy and credibility of the risk assessment of the hidden danger of the power network security.

Description

technical field [0001] The invention relates to the field of power system network security analysis, in particular to a power network information physical security risk assessment method, system and power system. Background technique [0002] The safe operation of the power system is directly related to the national economy and national security. The in-depth application of information and communication technology in the power system has exposed more and more hidden dangers and loopholes in the current power network system, making it more vulnerable to network attacks. Malicious attackers can use the high-risk hidden vulnerabilities of the system to launch network attacks to gain control of the main control computer through email spoofing, phishing and other leakage methods, and then send malicious control instructions to the primary device, causing the primary device to malfunction and cause the line to be disconnected. A series of serious safety accidents such as line faul...

AI Technical Summary

Problems solved by technology

[0003] However, there are many shortcomings in the current power network hidden danger assessment method: 1) lack of in-depth analysis of the behavior characteristics of the attacker, and do not fully consider factors such as time factors and network attack capabilities that reflect the game relationship between the attacker and the defender

2) In addition, the current evaluation method only considers the exploitability of high-risk vulnerabilities, ignoring the security risk probability of the network security defense measures and the transmission risk probability of the power information network; 3) The current evaluation method lacks information on information equipment and physical components. The failure relationship analysis does not reflect the business characteristics of power in the modeling of attack consequences, and lacks quantitative evaluation of physical consequences

Therefore, the current power network hidden danger assessment method cannot fully reflect the security level of the system, and is prone to false positives and false positives. It is urgent to invent a new power network hidden danger assessment method and system

Images