Intrusion detection method and system based on IEC61850 GOOSE message operation situation model
A technology of IEC61850GOOSE, operation situation, applied in transmission system, digital transmission system, information technology support system, etc., to achieve the effect of satisfying abnormal detection accuracy
Active Publication Date: 2022-07-12
国网江苏省电力有限公司淮安供电分公司 +2
View PDF12 Cites 0 Cited by
- Summary
- Abstract
- Description
- Claims
- Application Information
AI Technical Summary
Problems solved by technology
[0006] Purpose of the invention: In view of the problems existing in the prior art, the present invention provides an intrusion detection method and system based on the IEC61850 GOOSE message operation situation model, which solves the limitations and inapplicability of the IEC62351 in actual use. The data of the event behavior characteristic attribute items of GOOSE messages during the normal operation of the relevant smart substation system in a certain period of time, using specific machine unsupervised learning technology, to establish the compliance operation of the event behavior characteristic attribute items in the normal operation state of the smart substation Model to realize real-time detection of intrusion behavior in GOOSE messages in IEC61850 smart substation system
Method used
the structure of the environmentally friendly knitted fabric provided by the present invention; figure 2 Flow chart of the yarn wrapping machine for environmentally friendly knitted fabrics and storage devices; image 3 Is the parameter map of the yarn covering machine
View moreImage
Smart Image Click on the blue labels to locate them in the text.
Smart ImageViewing Examples
Examples
Experimental program
Comparison scheme
Effect test
Embodiment Construction
[0049] The present invention will be further described below in conjunction with the accompanying drawings. The following examples are only used to illustrate the technical solutions of the present invention more clearly, and cannot be used to limit the protection scope of the present invention.
[0050] see attached figure 1 to the attached Image 6 The invention discloses an intrusion detection method and system based on the running situation model of the IEC61850 GOOSE message.
[0051] IEC61850 smart grid or substation system uses GOOSE messages to complete data communication and interaction between different IED smart devices in the station and with the dispatching system outside the station. GOOSE, as a general object-oriented substation event (Generic Object-Oriented substation event, GOOSE) message, is used A way to exchange various events that occur in a smart grid or substation system. When a predetermined event occurs in the smart substation system, a GOOSE messa...
the structure of the environmentally friendly knitted fabric provided by the present invention; figure 2 Flow chart of the yarn wrapping machine for environmentally friendly knitted fabrics and storage devices; image 3 Is the parameter map of the yarn covering machine
Login to View More PUM
Login to View More Abstract
The invention relates to the technical field of intelligent power grid safety, and discloses an intrusion detection method and system based on an IEC61850 GOOSE message operation situation model, and the method comprises the steps: collecting the data of GOOSE message event behavior characteristic attribute items in the normal operation process of a related intelligent substation system in a certain time period, and employing a specific machine unsupervised learning technology to achieve the intrusion detection of the GOOSE message event behavior characteristic attribute items. And establishing a compliance operation model of the event behavior characteristic attribute item under the normal operation situation of the intelligent substation, and detecting the abnormal intrusion of the GOOSE message of the IEC61850 through real-time GOOSE message detection based on the compliance operation model of the characteristic attribute item. Compared with the prior art, the method has the advantages that the limitation and the inapplicability of the IEC62351 in the actual use process are solved.
Description
technical field [0001] The invention relates to the technical field of smart grid security, in particular to an intrusion detection method and system based on an IEC61850 GOOSE message running situation model. Background technique [0002] IEC61850 is an international standard for smart grid systems based on a common network communication platform. It provides a robust structure for various types of smart grid devices in smart grids based on IEC61850, and formulates an object-oriented modeling method for smart devices. Interoperability between different smart grid vendors and devices following the standard is ensured thanks to the standardized data objects and modeling methods developed in IEC61850. Among them, the message exchange protocol developed in the IEC61850 standard can be used for data exchange between devices with different purposes, such as device periodic message update or event-triggered message. IEC61850 makes the integration of smart grids simple and reduces...
Claims
the structure of the environmentally friendly knitted fabric provided by the present invention; figure 2 Flow chart of the yarn wrapping machine for environmentally friendly knitted fabrics and storage devices; image 3 Is the parameter map of the yarn covering machine
Login to View More Application Information
Patent Timeline
Login to View More Patent Type & Authority Applications(China)
IPC IPC(8): H04L9/40G06N20/20
CPCH04L63/1416G06N20/20Y04S40/20
Inventor 刘建戈戴欣朱正磊吕兵李茂
Owner 国网江苏省电力有限公司淮安供电分公司