Network attack behavior simulation system for power grid enterprise and simulation method thereof

Abstract

The invention discloses a network attack behavior simulation system for a power grid enterprise, and the system comprises a data package distribution module which is used for distributing a path IP address for a data package entering the simulation system; a plurality of data simulation modules which are used for performing simulation operation on the received data packets, wherein each data simulation module is internally provided with a program calling interface, a data communication interface and a safety probe interface; a preset program database which is used for storing a preset program and is in communication connection with the data simulation module through a program calling interface; a safety probe monitoring module which is connected with the data simulation module through a safety probe interface and is used for monitoring attack behaviors; an attack behavior characteristic monitoring module which is connected with the data simulation module through a data communication interface and used for extracting and comparing the attack behavior characteristics. The defects in the prior art can be overcome, and the attack behavior detection speed and accuracy are effectively improved.

Description

technical field [0001] The invention relates to the technical field of power system information security, in particular to a network attack behavior simulation system and simulation method for power grid enterprises. Background technique [0002] With the continuous development of information technology, the production and operation of power grid enterprises rely more and more on information systems. How to ensure the security of network systems and the information systems and data they carry has also become the focus of information security work. At present, enterprise information security protection mainly relies on traditional technical means such as firewalls and intrusion detection systems. These traditional information security protection methods have obvious limitations and inapplicability when dealing with various current attack methods, and cannot be improved. Improve the accuracy of attack detection while improving the detection speed. Contents of the invention ...

AI Technical Summary

Problems solved by technology

At present, enterprise information security protection mainly relies on traditional technical means such as firewalls and intrusion detection systems. These traditional information security protection methods have obvious limitations and inapplicability when dealing with various current attack methods, and cannot be improved. Improve the accuracy of attack detection under the premise of detection speed

Images