Active security defense system and method of power secondary system

Abstract

The invention discloses an active security defense system and method of a power secondary system. On the basis of an existing security defense system of the power secondary system, the active security defense system of the power secondary system further comprises an intrusion knowledge acquisition module, an intrusion knowledge use module and an intrusion prevention system, wherein intrusion knowledge of an internal network of an electric power enterprise and intrusion knowledge of the external network of an electric power enterprise are obtained by the intrusion knowledge acquisition module through a trap network, the intrusion knowledge use module is arranged in the internal network of the electric power enterprise, and is used for using the obtained intrusion knowledge to carry out defense on the internal network of the electric power enterprise, and the intrusion prevention system is deployed at the position of the junction between the internal network and the external network, and is used for improving the active security defense capability of the power secondary system. According to the active security defense system and method of the power secondary system, the capacity of the power secondary system for resisting the internal risk and the external risk can be improved, and passive protection is changed into active defense.

Description

technical field [0001] The invention relates to a safety defense system and method of an electric power system, in particular to an active safety defense system and method of a power secondary system. Background technique [0002] The power system includes primary and secondary systems, and the safety protection of the power secondary system is a power safety protection system that has only been proposed in the past ten years. With the wide application of network technology in various fields of power system, the security of power secondary system is closely related to the security of the network involved. The specific technology mainly involves the security partition of the power secondary system, the security protection between each partition and the security protection between the internal and external networks, especially the field of active defense technology. [0003] At present, the safety protection of the power secondary system at home and abroad is in the process o...

AI Technical Summary

Problems solved by technology

[0004] However, although a lot of research on the safety of the power secondary system has been carried out at home and abroad and some achievements have been made, there is still a long way to go to meet the requirements of ensuring the safety of the power system.

Through the analysis of the application status and security requirements of the secondary power system, it is found that the current safety construction of the secondary power system mainly has the following problems: the goals, strategies and systems of security protection are not perfect enough, and the overreaction of security protection will affect the normal business instead. A security protection system that is consistent with threats and asset protection; in addition, some security measures currently adopted by the power secondary system are mostly passive protection, figure 1 It is a general structure diagram of the security defense system of the electric power secondary system in the prior art

[0022] It can be seen that in the security defense system of the electric power secondary system in the prior art, some are only single-point defense, and there is no complete system, although some have a complete system, such as figure 1 , but most of the security measures it adopts are passive protection, which are prone to security loopholes. Therefore, in view of the growing network attack technology, it is necessary to further improve the security protection system of the power secondary system and establish a more effective active defense system.

Images