Security access assessment method and device for power terminal equipment

Abstract

The invention discloses a security access assessment method and device for power terminal equipment, and the method is used for continuously assessing the credibility and security threat of the terminal equipment in a zero-trust network, and comprises the steps: installing an acquisition probe on the terminal equipment, and collecting the security state of the terminal; constructing a network topological graph based on a network connection relationship of servers on a power business system, and converting the constructed network topological graph into an R-hop weighted attack tree by adopting a WL subtree accounting method; calculating a risk value in a server node R-hop for the accessed terminal equipment, and pruning the weighted attack tree to obtain a final safe and accessible power service system. The method not only considers the security state of the terminal equipment, but also considers the access authority of the terminal equipment at the cloud, the security protection capability of the service system and the like, and finally gives the minimum security service set which can be safely accessed by the terminal.

Description

technical field [0001] The invention belongs to the technical field of communication security, and in particular relates to a security access evaluation method and device for power terminal equipment. Background technique [0002] In the power Internet of Things scenario, the traditional access control model generally combines the network structure, adopts a static deployment, modular design method, does not combine the business process of the application and the behavior characteristics of the end user, mainly adopts "one authentication, one authorization, long-term Effective” protection measures, once the network is breached, attackers will infiltrate internal applications to perform malicious operations. Contents of the invention [0003] The purpose of the present invention is to provide a security access assessment method and device for electric power terminal equipment, so that the business system can quickly assess security threats based on collected data, realize s...

AI Technical Summary

Problems solved by technology

[0002] In the power Internet of Things scenario, the traditional access control model generally combines the network structure, adopts a static deployment, modular design method, does not combine the business process of the application and the behavior characteristics of the end user, mainly adopts "one authentication, one authorization, long-term Effective” protection measures, once the network is breached, attackers will infiltrate internal applications to perform malicious operations

Images