Unlock instant, AI-driven research and patent intelligence for your innovation.

Method and system for detecting abnormal instruction in power network

A technology of power network and detection method, which is applied in transmission systems, electrical components, etc., can solve problems such as the inability to detect power networks and the inability to detect abnormal commands in real time, and achieve the effects of easy processing and improved safety

Inactive Publication Date: 2019-08-20
SHANGHAI GUAN AN INFORMATION TECH
View PDF4 Cites 0 Cited by
  • Summary
  • Abstract
  • Description
  • Claims
  • Application Information

AI Technical Summary

Problems solved by technology

[0004] However, "sequential control" can only guarantee the occurrence of abnormal accidents to a certain extent. It cannot detect the abnormal commands of the power network in real time, and cannot detect that when the power network is under attack, the hackers will issue orderly commands to the power network. exception instructions, etc.

Method used

the structure of the environmentally friendly knitted fabric provided by the present invention; figure 2 Flow chart of the yarn wrapping machine for environmentally friendly knitted fabrics and storage devices; image 3 Is the parameter map of the yarn covering machine
View more

Image

Smart Image Click on the blue labels to locate them in the text.
Viewing Examples
Smart Image
  • Method and system for detecting abnormal instruction in power network
  • Method and system for detecting abnormal instruction in power network

Examples

Experimental program
Comparison scheme
Effect test

Embodiment 1

[0039] This embodiment provides a method for detecting abnormal instructions in a power network, which includes the following steps:

[0040] (1) Collect the normal instruction message with "source device to destination device" as the instruction transmission path when the power network is normal; specifically, when the power network is normal, first store the message related to the command transmission into the warehouse for backup; then By parsing the message field, filtering out all command messages according to the two dimensions of "source device" and "destination device", and extracting a series of messages with "source device to destination device" as the main line, the normal Collection of command messages.

[0041] (2) Obtain the normal operation instructions involved between the source device and the destination device in the normal command message; specifically, according to the Markov model, for each normal command message, list the source device and the destinatio...

Embodiment 2

[0053] Refer to attached figure 2 , this embodiment provides a detection system for abnormal instructions in a power network, which includes: a first acquisition module, a first acquisition module, a statistical module, a second acquisition module, a second acquisition module, a calculation module, a judgment module and an evaluation module module. Specifically, the first collection module is used to collect the normal instruction message with "source device to destination device" as the instruction transmission path when the power network is normal; the first acquisition module is used to obtain the source device and the destination device in the normal instruction message The normal operation instructions involved between devices; the statistical module, which uses the Markov algorithm to count the probability and sequence of normal operation instructions; the second acquisition module, used to collect the "source equipment to "Destination device" is the real-time instruct...

the structure of the environmentally friendly knitted fabric provided by the present invention; figure 2 Flow chart of the yarn wrapping machine for environmentally friendly knitted fabrics and storage devices; image 3 Is the parameter map of the yarn covering machine
Login to View More

PUM

No PUM Login to View More

Abstract

The invention discloses a method and a system for detecting an abnormal instruction in a power network, and belongs to the technical field of computer information security. The detection method comprises the following steps: collecting a normal instruction message when the power network is normal; obtaining a normal operation instruction in the normal instruction message; counting the occurrence probability and sequence of the normal operation instructions; acquiring a real-time instruction message in the power network in a unit time window; obtaining a real-time operation instruction in the real-time instruction message; calculating the occurrence probability of the real-time operation instruction; and judging whether the real-time operation instruction is an abnormal instruction according to the occurrence probability of the real-time operation instruction. According to the method, through using the Markov model, the state transition matrix between the instructions is used for calculating the probability of occurrence before and after the instructions, and whether the real-time operation instruction is a sequential abnormal instruction or a sudden abnormal instruction is judged through the threshold value, so that the abnormal instruction in the power network can be detected in real time, and the safety of the power network is improved.

Description

technical field [0001] The invention relates to the technical field of computer information security, in particular to the technical field of industrial computer control security, in particular to a method and system for detecting abnormal commands in a power network. Background technique [0002] "Two votes and three systems" is a safety system for the work of hydropower stations, thermal power plants and substations. Among them, "two votes" refers to operation tickets and work tickets, and "three systems" refers to the shift system, Tour inspection system and equipment periodic test rotation system. "Two votes and three systems" is one of the most basic systems in the safety production guarantee system of the electric industry. It is the experience summed up in the operation practice of my country's electric power industry for many years. "Find the reason for the execution problem. [0003] The abnormal instructions of the power network include sudden abnormal instruction...

Claims

the structure of the environmentally friendly knitted fabric provided by the present invention; figure 2 Flow chart of the yarn wrapping machine for environmentally friendly knitted fabrics and storage devices; image 3 Is the parameter map of the yarn covering machine
Login to View More

Application Information

Patent Timeline
no application Login to View More
IPC IPC(8): H04L29/06
CPCH04L63/1416H04L63/1425
Inventor 王文君宋秋霞路国正
Owner SHANGHAI GUAN AN INFORMATION TECH