Static and dynamic vulnerability analysis and mining method for power industrial control system

Abstract

The invention belongs to the technical field of power grid protection, and particularly relates to a static and dynamic vulnerability analysis and mining method for a power industrial control system.Aiming at the technical problems of openness and complexity of the electric power industrial control system and loopholes of the system, the invention provides the following scheme that the method comprises the following steps: analyzing typical loopholes of the electric power industrial control system by combining information security event characteristics; and analyzing to the vulnerability mining technology,wherein typical vulnerability analysis of the electric power industrial control system of the information security event characteristics comprises typical event vulnerability analysis, and typical event vulnerability analysis comprises digital certificate counterfeiting. According to the invention, typical vulnerabilities existing in the event are analyzed; analysis and research arecarried out on typical vulnerabilities possibly existing in a domestic electric power industrial control system by combining vulnerability classification from the mechanism of vulnerabilities; the test case generation rule in the dynamic fuzzy test containing the typical vulnerability characteristics of the power industrial control system is formed, and different generation rules are matched according to different protocol analysis results, so that the effectiveness of the test case is improved.

Description

technical field [0001] The invention relates to the technical field of power grid protection, in particular to a static and dynamic loophole analysis and mining method for an electric power industrial control system. Background technique [0002] According to its different functions, the power industrial control system is mainly applied in power plants, dispatching, transformation, power distribution and power transmission in the power industry. [0003] The openness, complexity and loopholes of the power industrial control system make the security of the industrial control system face greater threats and challenges. The core issue of information security in the power industrial control system is the loopholes in the power industrial control system. Once the vulnerability is exploited, it will directly cause economic losses, explosions and even casualties. In addition, when the important control system of power generation enterprises is damaged, it will threaten national sec...

AI Technical Summary

Problems solved by technology

[0003] The openness, complexity and loopholes of the power industrial control system make the security of the industrial control system face greater threats and challenges. The core issue of information security in the power industrial control system is the loopholes in the power industrial control system. Once the vulnerability is exploited, it will directly cause economic losses, explosions and even casualties. In addition, when the important control system of power generation enterprises is damaged, it will threaten national security and seriously damage social order and public interests. For this reason, we propose a power industrial control system Static and Dynamic Vulnerability Analysis and Mining Methods

Images