Information safety penetration testing method for distribution automation system

Abstract

The invention discloses an information safety penetration testing method for a distribution automation system. Penetration testing is carried out on a master station system, a distribution network terminal and a communication channel, the information system vulnerability penetration testing technology is fully used, the safety of the distribution automation system is evaluated by simulating the attack method of a hacker, and the information safety penetration testing method includes the active analysis for any weakness, technical defects or loopholes of the master station system, the communication circuit and the distribution network terminal. The information safety penetration testing method for the distribution automation system can be used for safety risk analysis work before the distribution automation system is connected to the internet, guidance is provided for finishing problem rectification and reformation and retest work of manufacturers with safety risks, and the method is high in pertinence and wide in test range. Compared with a traditional penetration testing method, the test time can be largely shortened, offline repairing events caused by safety problem failures after equipment is on line are reduced, the information safety penetration testing for the distribution automation system is realized, and the information safety penetration testing method can be applied to industrial control systems inside and outside the industry.

Description

technical field [0001] The invention belongs to the technical field of information security risk analysis of industrial control systems, and in particular relates to an information security penetration testing method of a power distribution automation system. Background technique [0002] Driven by informatization, two seemingly irrelevant industries, industrial control systems and traditional information security, have intersected. Especially since the "Stuxnet" incident, information security of industrial control systems has attracted great attention from all countries. The industrial control system is related to various important infrastructures and the national economy and the people's livelihood, so its importance is self-evident. For a long time, the industrial control system has been considered as a relatively professional and closed information island, which maintains a relatively safe state. However, with the rapid networking and interconnection of industrial contr...

AI Technical Summary

Problems solved by technology

[0009] The purpose of the present invention is to overcome the shortcomings of the existing penetration testing method for the distribution automation system test, and make full use of the vulnerability penetration testing technology of the information system to evaluate the security of the distribution automation system by simulating the attack method of hackers. Including active analysis of any weaknesses, technical defects or loopholes in the main station system, communication lines, and power distribution terminals, providing a well-designed, accurate and fast power distribution automation system information security hidden danger penetration testing method

Images