A layered distributed collaborative network security supervision system and collaborative supervision method

Abstract

The invention discloses a layered and distributed cooperative network security supervision system. The system comprises a region security supervision center server which is located in a region security supervision layer; station domain security supervision devices which are located in a station domain security supervision layer and correspond to stations in a region; and network host security supervision agents which are located in a device security supervision layer and correspond to network hosts in the stations. According to the system and the method, a network security state of a power secondary supervision system is supervised comprehensively from three layers: a region, stations and network host devices, and a network security supervision strategy cooperative mechanism is established from two layers: the region security supervision layer and the station domain security supervision layer. The defect of monitoring the network security state of the power secondary system is compensated, and the deployment comprehensiveness and flexibility of the security supervision system can be greatly improved.

Description

technical field [0001] The invention relates to the technical field of power network security, in particular to a layered distributed collaborative network security supervision system. Background technique [0002] With the networking, digitalization and intelligence of the secondary system of the power system, the situation of the secondary information security of the power system is becoming increasingly severe. The deficiencies mainly include: [0003] 1) From the perspective of system structure, the current network security supervision system is mainly deployed locally at the station or main station, and the scope of supervision is limited to the local area, and there is no integration of multiple stations in the power system region. A large-scale network security supervision system, the scope of supervision does not form a wide-area clear level; [0004] 2) From the perspective of system deployment, the network security supervision system pays more attention to the co...

AI Technical Summary

Problems solved by technology

[0003] 1) In terms of system structure, the current network security supervision system is mainly deployed locally at the station or main station, and the scope of supervision is limited to the local area, and there is no integration of multiple stations in the power system region. A large-scale network security supervision system, the scope of supervision does not form a wide-area clear level;

[0004] 2) From the perspective of system deployment, the network security supervision system pays more attention to the collection, transmission and centralized analysis of security status information, which puts great pressure on the larger regional network security supervision centers;

[0005] 3) From the formulation of the system supervision strategy, the centralized formulation and implementation of the supervision strategy is not flexible enough, and the adaptability to the station domain is poor

Images