A kind of power terminal safety protection method and system

Abstract

The invention discloses a power terminal safety protection method and system, belonging to the technical field of power terminal equipment. The existing protection technology only controls and isolates application services, and cannot truly solve the network security problem of the existing power Internet of Things. The invention provides a power terminal security protection method. A zero-trust module is constructed to perform strong monitoring on power terminal equipment. Before data collection, the power terminal equipment needs to be trusted with a score. The method of evaluating first and collecting later can effectively reduce physical attacks. , to ensure the accuracy of data collection, and to achieve lightweight collection of terminal data information; at the same time, build a security situational awareness module to conduct situational awareness of the collected data to ensure data security compliance; further build a real-time management and control module, to sense data, Carry out management and control, and generate safety instructions to protect power terminal equipment, so as to respond to abnormal situations in a timely and efficient manner and carry out emergency response.

Description

technical field [0001] The invention relates to a power terminal safety protection method and system, and belongs to the technical field of power terminal equipment. Background technique [0002] In response to the development needs of the new power system business, the original fence-type protection system with heavy boundary and strong protection has been difficult to adapt to. [0003] In terms of terminals, massive power IoT terminals are widely connected, and the difficulty of security management and control is further increased. For example, distributed wind power and photovoltaic business terminals are located in remote areas, and it is difficult to guarantee the security of the ontology, and there is a lack of real-time perception and disposal methods. [0004] In terms of boundaries, first, the method of direct data collection will expose unnecessary attack surfaces, and it is difficult to limit the lateral movement of the platform side and the edge side; The effi...

AI Technical Summary

Problems solved by technology

[0008] The above solution classifies terminal application services, divides terminal application services into trusted terminal services and ordinary terminal services, and performs parallel isolation control on the trusted terminal services and ordinary terminal services, but does not have any protective measures for terminal equipment. After the terminal device is invaded, it is possible to upload false information, even Trojan horses and viruses, and it is impossible to ensure that the collected information will not be tampered with. Therefore, it is only to control and isolate the application business, which cannot really solve the network security problems of the existing power Internet of Things.

Images