Power grid embedded terminal fuzzy test method aiming at GOOSE protocol

Abstract

The invention provides a power grid embedded terminal fuzzy test method for a GOOSE protocol, and the method comprises the steps: designing three mutation strategies based on a GOOSE message field type, an ASN.1 coding mode and bit flipping, carrying out the GOOSE sample message mutation; the invention provides an anomaly monitoring method based on heartbeat messages and system operation information by considering a GOOSE protocol transmission mechanism and the environmental characteristics of an intelligent substation, so as to effectively monitor the abnormal condition of target equipment in a fuzzy test process. By adopting the scheme provided by the invention, the security vulnerabilities of embedded terminals, such as intelligent terminals, measurement and control terminals and the like, which communicate by using the GOOSE protocol in the intelligent substation in the protocol analysis process can be effectively mined.

Description

technical field [0001] The invention belongs to the technical field of intelligent network information security, and relates to a fuzzy testing method for a grid embedded terminal aiming at the GOOSE protocol. Background technique [0002] With the introduction of the smart grid, grid embedded terminals are widely used in all aspects of the smart grid. However, studies have shown that most of the grid embedded terminals in active service and on sale are in an undefended state, and the information security of the smart grid is facing a serious threat. Smart substation is a key link of smart grid. Embedded terminals such as measurement and control terminals, protection terminals, intelligent terminals and merging units are used to complete key services in the substation. Due to system tailoring, application customization, difficulty in online upgrade, and proprietary and complex communication protocols, these embedded terminals And other factors, there are a lot of security r...

AI Technical Summary

Problems solved by technology

Due to the wide variety of industrial control protocols, different manufacturers have different extensions and implementation methods for the protocols. The existing fuzzy testing methods for industrial control protocols lack targeted design for the GOOSE protocol.

And because the calculation and storage capabilities of embedded terminals are weaker than those of ordinary computers, the GOOSE protocol does not use TCP / IP protocol encapsulation due to high real-time requirements, so the existing methods cannot be directly applied to the GOOSE protocol fuzzing test of embedded terminals in power grids.

Images