Attack path parallel prediction method for power system network

Abstract

The invention discloses an attack path parallel prediction method for a power system network, and relates to the field of industrial control system security, and the technical scheme is as follows: (1) assuming an attack target of an attacker: identifying security vulnerabilities existing in SCADA (Supervisory Control And Data Acquisition) which can be utilized by the attacker; (2) identifying possible security vulnerabilities in SCADA and constructing an attack tree; (3) evaluating the safety condition of each leaf node, and calculating the attack success probability of each leaf node; and (4) the attack success probability of each attack path is calculated, and the security of the SCADA system is enhanced.

Description

technical field [0001] The invention relates to the field of industrial control system security, and more particularly, to a parallel prediction method of attack paths oriented to power system networks. Background technique [0002] As computer network technology is widely used in the power system, the power system is closely related to the information system. The network security is as important as the physical security, because the reliability of the power system can be affected by attacking key network assets. As a key network asset, SCADA is There are a wide range of applications in industrial monitoring and power system control. More and more software and hardware of IT systems are integrated into SCADA. Servers and engineering stations, remote terminal units (RTUs), and intelligent electronic devices (IEDs) in SCADA are used. Commercial off-the-shelf products or technologies, and network protocols are gradually being made public. [0003] However, in the above-mention...

AI Technical Summary

Problems solved by technology

[0003] However, in the above-mentioned prior art, SCADA is interconnected with commercial networks such as enterprise networks and the Internet to share transmission data, which causes a large number of security holes in the entire network system of SCADA, making it easier for attackers to launch attacks and increasing the security of the system risk