A diagnostic system and method for power network security protection based on fuzzy theory

Abstract

The invention provides a power network safety protection diagnosis system and method based on fuzzy theory. The system classifies the equipment involved in the power monitoring system network, mainly including firewall, vertical encryption, horizontal isolation, router, switch and so on. Firstly, the device configuration policy is obtained through on-site reading and network connection reading, and the correctness of the corresponding device configuration policy is scored according to the definition, and the score of the corresponding device is calculated. Then, according to the equipment score and the defined security impact weight, the score of such equipment is calculated again. Finally, the scores of various types of equipment are used as lower factors to calculate the security protection level score of the power monitoring system network. The system can provide analysis of multiple time sections, which is convenient for users to compare trends. The formed score is also convenient for users to intuitively feel the overall status and weak links of the power monitoring system security.

Description

technical field [0001] The invention belongs to the technical field of electric power network, and in particular relates to a power network safety protection diagnosis system and method based on fuzzy theory. Background technique [0002] At present, my country's power sector has basically formed a network-in-depth protection system for power monitoring systems with border protection as the key point and multiple lines of defense. As the network equipment of the power monitoring system carries out business, faces threats, and keeps changing maintenance and management requirements, in order to ensure the firmness and effectiveness of the network system of the power monitoring system, China Southern Power Grid Corporation needs to conduct regular internal and external evaluations of the network security of the power monitoring system of various companies Work. With the continuous deterioration of the information network security situation at home and abroad, the network secur...

AI Technical Summary

Problems solved by technology

[0003] The network security protection work has not yet formed a systematic quantitative analysis method, and management and professionals cannot quickly understand the differences and changes in the security level of the network equipment of the power monitoring system, which brings inconvenience to the decision-making work of security defect disposal; at the same time, the power monitoring system There are various types of network devices, various policy configuration commands, network partitions, and management machine software that is difficult to be compatible with equipment from various manufacturers. As a result, the collection and analysis of equipment security protection strategies have long been done manually, and the lack of effective centralized and rapid management methods also affects The efficiency of security protection work

The construction, reconstruction and expansion of various power monitoring systems have brought certain hidden dangers to the safety protection of the power monitoring system. The internal and external information network security evaluation work is also in progress. The common problems of lack of tools and low analysis efficiency are relatively common. obvious

Images