Threat-driven power monitoring system network security deep protection method and system

Abstract

The invention relates to the field of power monitoring systems. The invention discloses a threat-driven power monitoring system network security deep protection method and a threat-driven power monitoring system network security deep protection system. The system comprises a longitudinal protection function unit, a transverse protection function unit, an intranet vulnerability detection function unit and an extranet threat situation awareness function unit, wherein the intranet vulnerability detection function unit and the extranet threat situation awareness function unit cooperatively complete threat detection of an intranet and an extranet of the power monitoring system, the longitudinal protection function unit and the transverse protection function unit cooperatively complete deep security protection, and the threat detection guides deep security protection. The core content of the invention is that threat detection and security protection of the power monitoring system are innovatively proposed, and network security dynamic protection is guided by threat discovery. And longitudinal encryption authentication security resources and transverse security protection resources are combined to realize cooperative protection, so that the directional protection problem driven and guided by threats in the power monitoring system is solved.

Description

technical field [0001] The invention relates to the field of power monitoring systems, in particular to a threat-driven power monitoring system network security deep protection method and system. Background technique [0002] The isolated stacking of multi-type network security devices in the power monitoring system cannot effectively defend against new network attacks on the power system. In recent years, power system network attacks have occurred continuously at home and abroad, indicating that the network security protection capabilities of power monitoring systems need to be improved. In recent years, during the construction of the security protection of the power monitoring system, local over-protection, lack of local protection, and the ambiguity of emergency response targets for sudden attacks need to be improved. not there. [0003] At present, there is a lack of literature on network security of power monitoring systems and literature on threat-driven power monito...

AI Technical Summary

Problems solved by technology

Therefore, it is difficult to effectively defend against APT attacks with systemic attack characteristics

Images