A fingerprint construction method for power terminals based on power consumption and emi

Abstract

The invention discloses a power terminal fingerprint construction method based on power consumption and EMI. The method utilizes power consumption and EMI signals to construct the fingerprint of the power terminal, including the following steps: 1) collecting the power and EMI data of the power terminal; 2) analyzing and processing the data; 3) extracting the key features of the sample and normalizing them to obtain eigenvector; 4) using the eigenvector to train the classifier to obtain the terminal fingerprint. The present invention can authenticate the power terminal equipment according to whether the fingerprint generated by the EMI data and the characteristics of power consumption matches the fingerprint of the equipment. This method can effectively deal with the current pseudo-terminal attack without adding additional hardware.

Description

technical field [0001] The invention belongs to the field of power grid security, and in particular relates to a power terminal fingerprint construction method based on power consumption and EMI. Background technique [0002] The normal operation of various industries cannot be separated from the power grid. However, with the acceleration of the informatization process, the emergence of the smart grid brings convenience to the operation department and users, but also brings certain hidden dangers. Although the network security attacks represented by the "Stuxnet" and "Black Energy" viruses have not yet caused major losses to our country, they have sounded the alarm for the security work of my country's industrial control. As the data collection terminal and the underlying control unit of the power grid, the smart grid terminal occupies a pivotal position in the smart grid. Once it is maliciously attacked and controlled, it will cause unreliable data, power outages for individ...

AI Technical Summary

Problems solved by technology

[0003] 1) False terminal security threats. Attackers use false identities to tamper with and release false information between the main station of distribution automation work and the distribution intelligent terminal to make the terminal unable to work normally, or hijack the terminal and distribution automation. Clear text communication data between master stations to obtain private data

[0004] 2) Physical security threats: including man-made damage and damage caused by natural disasters, attackers can directly operate unprotected or insufficiently protected terminals, obtain user privacy data, and maliciously change user configurations

Although this software upgrade method can timely defend against software attacks such as viruses and Trojan horses, it still cannot effectively defend against fake terminals because the device is not authenticated during the software installation process.

[0007] 2) Hardware security, since power terminal hardware upgrade is a costly and slow process

And in the process of upgrading the hardware, it is often impossible to effectively identify the pseudo-terminal, and the pseudo-terminal will also be upgraded with the upgrade of the terminal.

[0008] Therefore, the above two security strategies cannot effectively defend against attacks using pseudo-terminals

Images