Method and system for establishing electric power information network model for electric cps risk assessment

Abstract

The invention discloses an electric power information network vulnerability threat evaluation model establishment method faced to electric power CPS risk evaluation and an evaluation system based on the model, the model selects three groups of security vulnerability evaluation factors including vulnerability distribution threat degree, access approach and utilization complexity; an analytic hierarchy process is adopted to establish a vulnerability threat degree evaluation model, and a parameter construction method is provided; on the basis of quantitative evaluation, the evaluation result defines a vulnerability threat level, and the objectivity of quantitative evaluation and visibility of qualitative evaluation are considered; and the system related to the invention comprises a vulnerability detection part and a server part which adopt distributed structure. According to the invention, a vulnerability scanning system and a security area of the electric power information network are combined, an electric power information network vulnerability threat evaluation algorithm based on CVSS and analytic hierarchy process is adopted to perform vulnerability threat evaluation, so that the system can be safer and more accurate for performing vulnerability scanning and safety evaluation on the electric power information network.

Description

technical field [0001] The invention relates to a vulnerability threat assessment model, in particular to a power information network vulnerability threat assessment system and assessment method oriented to power information security risk assessment. Background technique [0002] Various vulnerabilities (loopholes) in the power information network are important internal causes of power CPS information space security risks. Vulnerabilities exist in all levels and links of the power information network. Once exploited by malicious subjects, it will affect the normal operation of the power information system and its services, and may affect the reliable operation of the power primary system through the power information business. As a result, huge losses are caused, and vulnerability scanning of the power information network is a necessary step to ensure the security of the power system. [0003] Traditional network vulnerability scanners are generally stand-alone systems, whi...

AI Technical Summary

Problems solved by technology

CVSS is a general evaluation system. It does not give the internal logic of determining the weight in the algorithm. It cannot take its network structure and security requirements into account when evaluating the vulnerabilities in the power information network. Therefore, the evaluation results have large errors and are not suitable for Vulnerability Threat Evaluation in Electric Power Information Network

Images