Power distribution automation master station network security risk identification method and system

Abstract

The invention discloses a power distribution automation master station network security risk identification method and system. The method comprises the following steps: introducing attack data generated by a master station in a set period into a pre-constructed security event representation model to obtain a plurality of security events; performing redundancy elimination processing on the plurality of security events; performing DS evidence reasoning on the security events subjected to redundancy elimination processing to obtain the occurrence probability of each security event in the power distribution master station, wherein the security event characterization model is constructed based on the feature quantity for characterizing security. The blank of the current distribution master station in the field of safety monitoring and risk identification is filled, network safety risk identification of the distribution master station is realized, the safety defense level of the distribution master station in a new situation is improved, the capability of resisting unknown malicious codes and potential malicious attacks is enhanced, and traditional passive defense is converted into prospective active defense.

Description

technical field [0001] The invention relates to the technical field of network security protection for distribution automation systems, in particular to a network security risk identification method and system for a distribution automation master station. Background technique [0002] At present, the network security defense methods of the master station of the distribution automation system (referred to as "distribution master station") are mainly from the master station server, operating system, access control of application programs, redundant ports and service shutdown, online or offline vulnerability scanning, And through the configuration of firewall, IDS / IPS, cipher machine server, etc., the main station boundary and external security access control and interactive equipment and data legality inspection are realized, while the requirements for the main station's own security monitoring and risk identification are blank. [0003] With the diversification of application...

AI Technical Summary

Problems solved by technology

[0003] With the diversification of application forms of power distribution master stations, the open development of communication methods, and the increasing concealment and dynamics of hacking methods, traditional protection methods have poor flexibility and the ability to identify unknown malicious codes and potential attacks Low, unable to meet the network security protection requirements of power distribution master stations under the new security situation

Images