Operation risk assessment method and device based on network security situation awareness system

Abstract

The invention discloses an operation risk assessment method and device based on a network security situation awareness system. The method comprises the steps: collecting historical data of the networksecurity situation awareness system in advance and analyzed; performing feature selection and data preprocessing on historical data of the network security situation awareness system to generate a training set and a test set for training a learning model; completing training of a learning model by adopting a machine learning algorithm, and exporting an intelligent analysis model after the learning model meets the average accuracy requirement; calculating expected recovery power supply time and loss load of the intelligent analysis model by adopting a general recovery target algorithm of the power system; and performing risk assessment calculation according to the expected power restoration time, the loss load and the threat intrusion probability of the intelligent analysis model to obtaina corresponding network security operation loss risk value. The method and device can combine the power system intrusion probability model and the network security situation awareness system to evaluate and calculate the operation risk, thus improving the risk evaluation accuracy.

Description

technical field [0001] The invention relates to the technical field of power system security, in particular to an operation risk assessment method and device based on a network security situational awareness system. Background technique [0002] With the continuous development of power system informatization and the high integration of information technology and business, power system security threats tend to be informatized, but at the same time, power system informatization also has hidden, sudden and uncertain risks. Many countries and regions in the world have suffered huge losses due to such emergencies. Power system security risk analysis is changing from a physical security analysis focusing on engineering failures to a comprehensive security risk analysis that considers both information networks and physical systems. [0003] Existing power system network security risk assessment schemes are generally launched from the aspects of attack mechanism, cyberspace securit...

AI Technical Summary

Problems solved by technology

[0004] However, during the research and practice of the prior art, the inventors of the present invention found that the prior art had the following defects: no effective description method was proposed for the impact of potential network security risks on system operation, and it was impossible to quantify the system In the potential security state when not under attack, the applicability of online applications is limited; the risk basic data is missing, it is difficult to use reasonable statistical modeling for the intrusion probability, and the accuracy of the evaluation model is limited

Images