A penetration testing method for distribution automation system information security

Abstract

The invention discloses an information security penetration test method of a power distribution automation system. The penetration test is carried out on the main station system, the distribution network terminal and the communication channel, and the vulnerability penetration test technology of the information system is fully utilized to evaluate the attack method by simulating the hacker. Distribution automation system security, including active analysis of any weaknesses, technical defects or loopholes in the main station system, communication lines, and distribution terminals. This method can be used for security risk analysis before distribution automation systems are connected to the network. This method provides guidance for potential manufacturers to complete problem rectification and re-testing. This method is highly targeted and has a wide range of tests. Compared with traditional penetration testing methods, it can greatly shorten the testing time and reduce the occurrence of offline maintenance events due to security problems after the equipment goes online. , which not only meets the information security risk penetration test of distribution automation system, but also radiates industrial control systems within and outside the industry.

Description

technical field [0001] The invention belongs to the technical field of information security risk analysis of industrial control systems, and in particular relates to an information security penetration testing method of a power distribution automation system. Background technique [0002] Driven by informatization, two seemingly irrelevant industries, industrial control systems and traditional information security, have intersected. Especially since the "Stuxnet" incident, information security of industrial control systems has attracted great attention from all countries. The industrial control system is related to various important infrastructures and the national economy and the people's livelihood, so its importance is self-evident. For a long time, the industrial control system has been considered as a relatively professional and closed information island, which maintains a relatively safe state. However, with the rapid networking and interconnection of industrial contr...

AI Technical Summary

Problems solved by technology

[0009] The purpose of the present invention is to overcome the shortcomings of the existing penetration testing method for the distribution automation system test, and make full use of the vulnerability penetration testing technology of the information system to evaluate the security of the distribution automation system by simulating the attack method of hackers. Including active analysis of any weaknesses, technical defects or loopholes in the main station system, communication lines, and power distribution terminals, providing a well-designed, accurate and fast power distribution automation system information security hidden danger penetration testing method

Images