Network security management and control apparatus for transformer substation

Abstract

The invention discloses a network security management and control apparatus for a transformer substation. The apparatus is integrated with a real-time network message monitoring, analyzing, and recording module, a network white list and black list management module, a network host checking module, and a network security risk evaluation and auditing module. With the apparatus, an original network communication message of a secondary system is analyzed, recorded and stored; and validity of network nodes and network communication connection is monitored in real time, so that security checking of software and hardware systems of network host equipment can be realized. Security auditing and risk evaluation are carried out on a secondary system network in the substation and the identified network abnormity can warned early. Therefore, a problem that boundary prevention is emphasized in security protection of the secondary system of the transformer substation and monitoring and management of the security risk of the network communication behavior are neglected can be solved. On the basis of integration of functions of real-time network monitoring, communication data analysis, host checking, security auditing, and risk evaluation to one apparatus, security management of the network communication behavior can be realized, so that the security of the secondary system can be improved substantially.

Description

technical field [0001] The invention belongs to the field of network security and electric power automation, and in particular relates to the research on the safety protection of the secondary system of the substation. Background technique [0002] With the networking, digitization and intelligence of the secondary system of the substation, the situation of the secondary information security of the substation is becoming increasingly severe. At present, the boundary protection of the secondary system of the substation is relatively mature, and the longitudinal authentication encryption device, network isolation equipment and A firewall can prevent external intrusions and attacks. However, there are two risks in the network of the secondary system. First, if the border protection fails, once illegal external access and attacks invade the internal network, it is equivalent to completely opening the internal secondary system and losing internal monitoring and protection. , Sec...

AI Technical Summary

Problems solved by technology

However, there are two risks in the network of the secondary system. First, if the border protection fails, once illegal external access and attacks invade the internal network, it is equivalent to completely opening the internal secondary system and losing internal monitoring and protection. Second, if the network equipment inside the secondary system has communication abnormalities, or the network configuration is wrong and the wiring is wrong, resulting in communication abnormalities, once these two situations occur, it will seriously affect the operation safety of the secondary system

Images