Vulnerability description attack graph-based power industrial control system network attack assessment method

Abstract

The invention discloses an electric power industrial control system network attack assessment method based on a vulnerability description attack graph, and belongs to the technical field of intelligent power grid information and equipment safety. The method comprises the steps of collecting original attack cases of the power industrial control system; carrying out the vulnerability feature extraction, data cleaning, vulnerability classification and clustering on the case to form an attack sample; constructing a system network connection topology and a network connection authority topology; constructing a power industrial control system component set and a system state set; constructing a state-based attack graph by using the system state set, the network connection topology and the permission topology; and calculating the feasibility of a single-step path contained in the attack graph and the feasibility and income of an attack link. According to the method, performance characteristicsof vulnerabilities used by network attacks and physical functions of components of the power industrial control system are comprehensively considered, evaluation indexes with universality are selected, and attack mechanism analysis and attack effect evaluation can be carried out on any subsystem of the power industrial control system on the basis of a model of an attack graph.

Description

technical field [0001] The invention belongs to the technical field of smart grid information and equipment security, and in particular relates to a network attack evaluation method of an electric power industrial control system based on a vulnerability description attack graph. Background technique [0002] With the continuous development of computer technology, information technology, big data, artificial intelligence and industrial automation technology, the traditional industrial control system and infrastructure continue to be intelligent, and information technology is widely used in the field of industrial control, making the traditional industrial control system change. It is becoming more and more open, which brings new challenges to the traditional relatively closed industrial control system. [0003] The power industry control system is an indispensable part of the power production and operation control that supports all links of power generation, transmission, tra...

AI Technical Summary

Problems solved by technology

This method does not consider the impact of the network attack vulnerability itself on the cyber-physical system, and only uses the probability that the power system is in a steady state to evaluate the damage of the attack, and the evaluation factor is too single

Images