A security monitoring method for power industrial control terminals based on business logic consistency

Abstract

The invention discloses a safety monitoring method of electric power industrial control terminal based on service logic consistency, the invention aims at the safety problem of the electric power industrial control terminal equipment introduced by the diversified information in the 'Internet +' intelligent grid system, breaks through the existing attack detection method simply relying on the network space information, and puts forward a safety method of the electric power industrial control terminal based on the service logic consistency. By sampling the multi-modal data of physical world information and cyberspace information, normalized processing and temporal correlation, and through training, the safety monitoring set and parameter constraint set are obtained for safety monitoring andanomaly identification. From the business level, the method can effectively early-warn the state abnormality caused by equipment performance difference, equipment failure and hacker intrusion, and realize the 'time-state-service' trinity consistency safety monitoring of the electric power industrial control terminal based on equipment time logic, state logic and business logic.

Description

technical field [0001] The invention relates to a safety monitoring method for electric power industrial control terminals, in particular to a safety monitoring method based on the logic consistency of electric power business. [0002] technical background [0003] In the power system, the main function of the grid is to distribute and transmit electrical energy. In the Internet age of the 21st century, the power grid as an energy infrastructure must also be inseparable from informatization. While informatization is highly flexible, it also brings many threats and uncertainties. As the "siblings" of the power industrial control system, the power industrial control terminal plays a pivotal role in the process of power informatization. "Stuxnet", "Flame" and the viruses in the Ukraine blackout incident are all cyber attack forces, which cause damage to the power system through power industrial control terminals. The attacker is familiar with the system and network structure u...

AI Technical Summary

Problems solved by technology

"Stuxnet", "Flame" and the viruses in the blackout in Ukraine are all cyber attack forces, which cause damage to the power system through power industrial control terminals

The attacker is familiar with the attacked system and network structure, the attack technology used is advanced, the virus spread and damage is very hidden, and the existing terminal anti-virus software cannot detect and kill

Images