A network security threat assessment method and system for a substation monitoring system

A substation monitoring and network security technology, applied in transmission systems, electrical components, etc., can solve problems such as lack of assessment of substation network security, and achieve the effect of convenient defense measures

CN105978898BInactive Publication Date: 2019-09-27NR ELECTRIC CO LTD +1
4 Cites 0 Cited by

Patent Information

Authority / Receiving Office
CN · China
Patent Type
Patents(China)
Current Assignee / Owner
Publication Date
2019-09-27
Estimated Expiration
Not applicable · inactive patent

Smart Images

  • Figure 1
    Figure 1
  • Figure 2
    Figure 2
  • Figure 3
    Figure 3
Patent Text Reader

Abstract

The invention provides a network security threat evaluation method for a substation monitoring system. The method comprises the steps of firstly, reading a UML graph which describes a monitoring system application scene, and identifying primary network security threats and attack objects of the substation monitoring system; then analyzing and combining the network security threats, outputting a monitoring system security threat model, and refining the model into an attack tree; and finally, carrying out formalized description on the attack processes and attack behaviors of the specific network security threats, and outputting the attack processes and attack behaviors in an Object-Z format. Correspondingly, the invention also provides a matched network security threat evaluation system for the substation monitoring system. According to the method provided by the invention, the network security threats of the monitoring system can be described qualitatively, and the network security threats are visual and clear; and the threat attack behaviors are described by use of a formalized mathematical language, and therefore, corresponding defensive measures can be provided.
Need to check novelty before this filing date? Find Prior Art

Description

Technical field

[0001] The invention belongs to the field of network security control, in particular to a network security threat assessment method and system for a substation monitoring system. Background technique

[0002] As the power dispatching automation system and the substation monitoring system are basically networked, the network security issues of the power dispatching system and the substation monitoring system have become increasingly prominent. With the sixteen-character proposal of "security partition, network dedicated, horizontal isolation, vertical encryption", the power system has successively deployed vertical encryption authentication devices and horizontal isolation devices on the power dispatch data network, strengthening the network boundary between the substation and the dispatch data network However, the network security analysis and defense in the substation are often ignored.

[0003] Traditional thinking believes that the substation monitoring system n...

Examples

Embodiment Construction

[0041] The embodiments of the present invention are described in detail below. Examples of the embodiments are shown in the accompanying drawings, wherein the same or similar reference numerals indicate the same or similar elements or elements with the same or similar functions. The following embodiments described with reference to the accompanying drawings are exemplary, and are only used to explain the present invention, and cannot be construed as limiting the present invention.

[0042] A network security threat assessment method for substation monitoring system, such as figure 1 As shown, including the following steps:

[0043] Step 1: Read the UML diagram depicting the application scenario of the monitoring system, and identify the preliminary network security threats and attack targets of the substation monitoring system.

[0044] Specifically, it includes analyzing the use case diagram in the UML diagram to abstract the daily operation behavior of the monitoring system; analyz...