Power grid Web application mimicry defense system

Abstract

The invention relates to a power grid Web application mimicry defense system. A heterogeneous virtual Web server pool which is equivalent in function, diversified and dynamic is constructed, technologies such as redundancy voting, dynamic executor scheduling and database instruction isomerization are adopted, an attack chain is blocked, the utilization difficulty of vulnerabilities or backdoors isincreased, and the availability and safety of Web services are guaranteed. A dynamic environment is realized through active change of software and hardware elements of different layers such as a network, a platform, a system, software and an application, and therefore, the dependency condition of the network attack on the determinacy and continuity of the operating environment is destroyed, controllable active defense is realized in the toxic bacteria-carrying software and hardware element environment with the vulnerability and the backdoor, the unknown attack defense problem by using the unknown vulnerability and the unknown backdoor is solved, and the network security of the key Web application system in the power industry is effectively enhanced.

Description

Technical field [0001] The invention relates to the field of electric power information security, in particular to a mimic defense system for power grid Web applications. Background technique [0002] With the popularization of power information systems and the continuous accumulation of data, power production, dispatch, and marketing are increasingly dependent on information systems, and more and more Web application systems based on the B / S architecture have been continuously built and put into use. Accompanied by this is the explosive growth of application layer-based attack methods and continuous renovation, which brings serious hidden dangers to the security of business systems. The main risks of the Web application system of electric power enterprises are derived from the operating system vulnerabilities and the vulnerabilities and defects in the system's own development. Attackers can use these vulnerabilities and defects to attack the application system. The current main ...

AI Technical Summary

Problems solved by technology

[0003] Currently widely used or deployed in the firewall, security gateway, intrusion detection system, virus killing, user authentication, access control and other technologies or equipment of the State Grid Corporation of China and its affiliated power companies to improve the network security defense system of system security, its essence is A passive security protection system based on prior knowledge (including characteristics, behaviors, fingerprints, etc. of known attackers), which has genetic defects in dealing with uncertain threats, has only "acquired immunity" and can only "non-stop Find loopholes and keep patching", "keep losing sheep, keep patching up", there is no effective way to detect and prevent pre-installed backdoors, and it is impossible to defend against unknown attacks of unknown vulnerabilities and unknown backdoors

Under the situation that network attacks tend to be automated, intelligent, combined, and software and hardware synergy, the above-mentioned traditional passive defense system is more difficult to effectively resist attacks using unknown vulnerabilities, and it is difficult to defend against potential attacks using various unknown backdoors

Under such circumstances, the State Grid Corporation of China has a serious attack-defense asymmetry of "easy to attack and difficult to defend". application security

Images