Method for carrying out attack detection and reconstruction on electric power information physical system

Abstract

The invention discloses a method for carrying out attack detection and reconstruction on an electric power information physical system. The method is characterized in that a robust differentiator is designed by aiming at a special attack which cannot realize attack detection by comparing a residual signal with a threshold value and a novel attack signal reconstruction method for an electric powerinformation physical system is provided. The attack reconstruction signal of the electric power information physical system can be accurately obtained, the attack signal exceeding a certain thresholdvalue can be detected, and attack judgment is carried out on the reconstructed attack signal according to attack detection logic; the method is further popularized to the situation that the electric power information physical system is attacked by the sensor, and detection and reconstruction of the sensor attack on the electric power information physical system are achieved. According to the method, attack detection and reconstruction are carried out when the electric power information physical system comprising three motors and six buses is attacked. The method has the advantages of good robustness, excellent anti-interference performance, high applicability, high accuracy, high response speed and the like.

Description

technical field [0001] The invention relates to the field of information security of electric power cyber-physical systems, and relates to a method for attack detection and reconstruction of electric power cyber-physical systems. Background technique [0002] With the deep integration of the power network and the information network of the power cyber-physical system, the technical means of maliciously attacking power terminal equipment are also increasing. Timely detection of attacks on the power cyber-physical system is of great significance for the safe operation of the system and the avoidance of economic losses. Existing attack detection methods are based on finite-length sequences, such as: Chinese patent application number 201910389561.8, which has poor robustness and anti-disturbance performance, is difficult to meet actual production needs, has poor practicability, and poor implementability. Contents of the invention [0003] The purpose of the present invention i...

AI Technical Summary

Problems solved by technology

Existing attack detection methods are based on finite length sequences, for example: Chinese patent application number 201910389561.8, its robustness and anti-disturbance performance are not good, it is difficult to meet the actual production needs, the practicability is not strong, and the implementability is poor

Images