Power control protection industrial control protocol security test method and system

Abstract

The invention discloses a power control protection industrial control protocol security test method and system. The method comprises the steps of: simulating a typical fault of a power system, and testing the correctness of a protection operation, the operation delay and the correctness of an information uploading monitoring system; using a message generation and playback technology in the environment to simulate and generate multiple clients and multiple servers to realize communication node pressure testing; generating various random fields and message playback strategies according to a setrule base, simulating fuzzy attacks of the protocol, and testing the security of the industrial control protocol; judging the communication state and the logic correctness of an application layer by analyzing structural bodies of a reply message of the device, and testing the robustness of a power control protection industrial control protocol; under the working conditions of network pressure andfuzzy attack, comprehensively assessing the correctness of a device protection function, the stability of performance and the reliability of communication. According to the method and the system, a message playback technology is irrelevant to specific protocol implementation, and the technical universality is high.

Description

technical field [0001] The invention relates to the technical field of electric power system relay protection, in particular to a safety testing method and system for an electric power control protection industrial control protocol. Background technique [0002] The degree of intelligence of the power system is getting higher and higher, the construction of unattended substations is increasing, and the dependence on the network is getting stronger and stronger. How to test the security of the power system industrial control protocol and how to verify the impact on control and protection products is a Urgent problems. [0003] With the intelligentization of primary equipment and the widespread application of the Internet of Things in power systems, more and more types of equipment are connected, and the industrial control protocols used are becoming more and more abundant. Device access methods are diversified, and wireless access forms put forward higher requirements for in...

AI Technical Summary

Problems solved by technology

[0011] The control process in the message replay of the existing solution is relatively simple, only the connection status is judged, and the logical correctness of the content of the reply message structure is not judged, and more complex application situations cannot be simulated

[0012] The existing solution has a single judgment condition for equipment survival confirmation

In the power control and protection system, there are often multi-layer protocol stack controls such as TCPIP and 61850. Only judging ICMP can only judge the status of the underlying protocol stack, and the depth of exploiting industrial control protocol vulnerabilities is insufficient.

Images