Network security attack and defense confrontation scene generation system for novel power system

Abstract

The invention discloses a network security attack and defense confrontation scene generation system for a novel power system. The scene editor module receives user interaction and constructs or modifies an attack and defense scene; the network simulation module generates real network environment data based on a network space surveying and mapping technology, constructs a simulation network environment and manages simulation data through a simulation database; the AI automatic control module integrates an AI algorithm to simulate an attack behavior, intelligently generates and adjusts a defense strategy, and manages an attack and defense rule through a rule engine; the security isolation module deploys security equipment to realize sensitive data isolation; the data flow direction is controlled through strategy configuration, and information leakage is prevented; the evaluation and feedback module is used for collecting data in the drilling process, carrying out multi-evaluation on the drilling effect and generating reports and suggestions; and the business module adopts a plug-in architecture, dynamically loads or unloads each functional module, constructs a multi-layer defense system, and realizes generation, evaluation and feedback of an intelligent confrontation strategy. According to the invention, the authenticity and effectiveness of attack and defense drilling are improved.

Description

Technical Field

[0001] The present invention belongs to the field of network security, and in particular relates to a network security attack and defense confrontation scenario generation system for a new type of power system. Background Art

[0002] With the rapid development of network technology, the generation of network security attack and defense scenarios for new power systems is becoming increasingly important. The security protection capabilities of new power systems are also constantly being strengthened to cope with increasingly complex network threats, such as advanced persistent threats (APT), ransomware attacks, supply chain attacks, etc. Although significant progress has been made in virus defense, vulnerability management, user behavior auditing, etc., in the face of the continuous escalation of external attack methods, it has become an urgent need to achieve all-round and dynamic monitoring of the network security of new power systems.

[0003] Existing technologies have developed cyberspace mapping technology, network simulation data generation technology, network isolation technology for virtualized environments, network virtualization simulation modeling technology, etc., including information security attack and defense drill competition systems suitable for the power industry and new information security attack and defense experimental attack and defense scenarios and their implementation methods. Cyberspace mapping focuses on the basic cyberspace construction of new power system attack and defense confrontation scenarios. Through network simulation data generation, key data is simulated and converted into structured data; network isolation for virtualized environments uses the existing network security management platform to isolate the virtualized environment and provide real-time intelligence for attack and defense confrontation; network virtualization simulation ensures that the attack and defense confrontation scenario is closer to the actual situation. In this context, the attack and defense confrontation scenario generation method integrates diversified attack and defense confrontation methods such as cyberspace mapping, network simulation data generation, network isolation and network virtualization simulation.

[0004] The network security technology in the secondary system of the new power system does not involve hardware-level transformation, and only uses pure software to achieve efficient and flexible network attack and defense confrontation scenario simulation. It not only reduces the implementation cost and does not pose risks to the real system, but also improves the flexibility and scalability of building attack and defense confrontation scenario simulation, providing a strong guarantee for the safe and stable operation of the new power system.

[0005] At present, the field of network security for new power systems faces multiple challenges. Most of the existing solutions are to build a relatively rigid experimental environment with a single attack and defense scenario. Even if they have customized functions, they still lack flexibility and versatility. Since the attack and defense experiments themselves are usually built on an unchanging hardware environment and lack comprehensive and extensible thinking, the functional architecture is rigid, making it difficult to build a large-scale, high-precision, integrated and highly simulated network security attack and defense confrontation scenario. In addition, the lack of security attack and defense experience and the existence of technical barriers make the systematic construction of cross-domain attack and defense information security knowledge difficult, complex and full of unknowns.

[0006] Furthermore, the openness of the attack and defense environment is too high, and sensitive solutions and tools cannot be effectively isolated, which reduces the confidentiality of technology and poses a threat to the protection of core assets. The unclear boundaries of the attack and defense scenarios make the experiment itself face major risks in the attack and defense drills, and the fuzziness of the security boundaries increases the possibility of potential damage.

[0007] The limitations of system design only support basic confrontation simulations and cannot meet the complex and ever-changing network security needs. At the same time, the evaluation of the effect of the exercise is highly dependent on manual work, with low levels of intelligence and automation, low efficiency and prone to errors. The rigid configuration of the attack and defense scenario environment limits the flexible scheduling of resources and low utilization, especially when a large number of people participate in confrontation or training, the resource bottleneck is particularly prominent and the cost surges. Summary of the invention

[0008] In order to address the deficiencies in the prior art, the present invention provides a network security attack and defense confrontation scenario generation system for new power systems, which achieves highly integrated and flexible configuration of functions by building a modular and scalable attack and defense scenario simulation architecture to meet network security confrontation drills at different levels and with different needs. In addition, the flexibility, versatility and scalability of the simulated attack and defense scenarios constructed by cyberspace mapping and network simulation data generation are greatly enhanced. At the same time, combined with advanced artificial intelligence and automation technology, the intelligence level of the drill is improved, and the automated evaluation and feedback of the drill process are realized to improve the efficiency and accuracy of the drill. In addition, the security isolation and boundary protection of the attack and defense scenarios are strengthened to ensure the security and controllability of sensitive data and technologies, and to achieve network security for new power systems.

[0009] In order to solve the above technical problems, the present invention adopts the following technical solutions.

[0010] The present invention firstly discloses a network security attack and defense confrontation scenario generation system for a new type of power system, including a scenario editor module, a network simulation module, an AI automation control module, a safety isolation module, an evaluation and feedback module and a business module;

[0011] The scenario editor module is used to provide a graphical interface, receive user interaction operations, build or modify attack and defense scenarios, and support multi-level and multi-domain scenario customization;

[0012] The network simulation module is used to automatically generate or import real network environment data based on network space mapping technology, build a highly simulated network environment, and manage simulation data through a simulation database;

[0013] The AI ​​automation control module is used to integrate artificial intelligence algorithms to simulate attack behaviors, intelligently generate and adjust defense strategies, manage attack and defense rules through a rule engine, and realize the intelligence and automation of the confrontation process;

[0014] The security isolation module is used to deploy security devices to achieve security isolation of sensitive data; control data flow through policy configuration to prevent information leakage;

[0015] The evaluation and feedback module is used to automatically collect data during the exercise, use statistical analysis and machine learning techniques to conduct multi-dimensional evaluation of the exercise effect, and generate detailed reports and improvement suggestions;

[0016] The business module is used to adopt a plug-in architecture, dynamically load or unload the above functional modules and newly developed functional modules, access the platform through a standard interface, and build a multi-layer defense system to achieve intelligent confrontation strategy generation and automated evaluation and feedback.

[0017] The present invention further includes the following preferred embodiments:

[0018] The attack and defense scenarios include a power system control network and a data transmission network.

[0019] The network environment data includes topology, device attributes and traffic patterns.

[0020] The artificial intelligence algorithms include machine learning and deep learning.

[0021] The multi-dimensional evaluation includes attack success rate and defense response time evaluation.

[0022] The security equipment includes a firewall and an isolation gate.

[0023] The multi-layer defense system includes physical isolation, network isolation and application isolation.

[0024] The business module also includes a sensitive data desensitization module, which is used to desensitize sensitive data during the drill to prevent data leakage risks.

[0025] Accordingly, the present application also discloses a terminal, including a processor and a storage medium;

[0026] The storage medium is used to store instructions;

[0027] The processor is used to operate according to the instructions to implement a network security attack and defense confrontation scenario generation system for the aforementioned new power system.

[0028] Correspondingly, the present application also discloses a computer-readable storage medium on which a computer program is stored. When the program is executed by a processor, the aforementioned network security attack and defense confrontation scenario generation system for the new power system is implemented.

[0029] The beneficial effect of the present invention is that, compared with the prior art, the present invention provides a network security attack and defense confrontation scenario generation system for a new power system. Through the plug-in architecture, users can quickly adjust or expand system functions according to actual needs without large-scale system reconstruction, which not only reduces the system maintenance cost, but also improves the adaptability and response speed of the system, and better copes with the rapidly changing needs in the field of network security of new power systems; automatically generates attack and defense strategies according to historical data and current situation, reduces manual intervention, and improves the authenticity and effectiveness of the drill. At the same time, the drill data is collected and analyzed in real time, and detailed evaluation reports and improvement suggestions are generated, which improves the efficiency and accuracy of the drill, which not only reduces the burden on the staff, but also makes the drill results more objective and reliable; by building a multi-layer defense system and implementing sensitive data desensitization and other measures, the security isolation and boundary protection capabilities of the system are significantly enhanced, sensitive solutions and tools are effectively isolated, information leakage and core asset damage are prevented, and clear attack and defense scenario boundaries also reduce the risks faced by the experiment itself, ensuring the safety and controllability of the drill process; a multi-dimensional evaluation method is adopted, traditional indicators such as attack success rate and defense response time are considered, and an intelligent algorithm is combined to conduct an in-depth analysis of the drill process. It can more comprehensively reflect the effect of the drill, help users discover potential security loopholes and weak links, and provide strong support for subsequent improvements and optimizations; it can effectively alleviate resource bottlenecks and improve resource utilization when large-scale personnel participate in confrontation or training. At the same time, the intelligent and automated drill process also reduces human errors and duplication of work, reduces cost expenditure, and has higher cost-effectiveness and market competitiveness in the field of new power system network security. BRIEF DESCRIPTION OF THE DRAWINGS

[0030] Figure 1 It is a schematic diagram of the system architecture for generating network security attack and defense confrontation scenarios for new power systems in the present invention. DETAILED DESCRIPTION

[0031] In order to make the purpose, technical solution and advantages of the present invention more clear, the technical solution of the present invention will be clearly and completely described below in conjunction with the accompanying drawings in the embodiments of the present invention.

[0032] The embodiments described in this application are only some embodiments of the present invention, not all embodiments. Based on the spirit of the present invention, other embodiments obtained by ordinary technicians in this field without creative work are all within the protection scope of the present invention.

[0033] In view of the shortcomings of the existing technology and the particularity of the network security of the new power system, the present invention proposes an attack and defense confrontation scenario generation system that integrates cyberspace mapping, network simulation data generation, network isolation and network virtualization simulation, aiming to achieve the accuracy, timeliness and comprehensiveness of the attack and defense confrontation scenario of the new power system network, so as to cope with the complex and changeable network threat environment. Through the cyberspace mapping mechanism, the network detection layer, data storage layer, data processing layer and visualization layer are constructed, and protocol analysis, rule matching, topology analysis, vulnerability detection, big data and security situation analysis are carried out; network simulation data generation technology is used to generate data sets for testing, verification and training models, providing a data basis for the construction of attack and defense confrontation scenarios; combined with network isolation in a virtualized environment, multi-dimensional and three-dimensional virtualized network security isolation protection is realized; finally, the network virtualization simulation model is used to continuously monitor the network security attack and defense confrontation scenarios, dynamically generate and optimize the attack and defense confrontation scenarios, in order to cope with the evolving network threats.

[0034] See also Figure 1 As shown, the network security attack and defense confrontation scenario generation system for the new power system disclosed in the present invention adopts a modular design, which is divided into a scenario editor module, a network simulation module, an AI automation control module, a security isolation module, an evaluation and feedback module, and a business module. At the same time, the simulation system supports dynamic loading and unloading of modules, which further enables the system to have flexible configuration and expansion mechanism capabilities. Use AI technology to automatically generate attack and defense strategies to build intelligent and automated attack and defense drills, establish the same security isolation and boundary protection measures as in reality, make the simulation scenario have practical significance, and truly test the vulnerabilities in the existing defense system during the attack and defense drills.

[0035] The scenario editor module is used to provide a graphical interface to accept user operations such as dragging components and configuring parameters to quickly build or modify attack and defense scenarios. It supports multi-level and multi-field scenario customization, such as power system control networks, data transmission networks, etc. The scenario editor module is further used to:

[0036] 1. Build a scenario template library: Provide predefined network security attack and defense scenario templates. Users can select or modify templates as needed to quickly build new attack and defense scenarios.

[0037] 2. Custom editing: Users customize attack and defense scenarios through a graphical interface or scripting language, including setting attackers, defenders, target systems, network topology, etc.

[0038] 3. Parameter configuration: allows users to configure various parameters in the scenario in detail, such as attack intensity, defense strategy, system vulnerability, etc., to simulate different levels of attack and defense confrontation.

[0039] 4. Scenario preview: Provides a scenario preview function to help users check whether the scenario settings are correct before formal operation to ensure the smooth progress of the attack and defense confrontation.

[0040] The network simulation module is used to automatically generate or import real network environment data based on network space mapping technology, including topology structure, device attributes, traffic patterns, etc., to build a highly simulated network environment, manage simulation data through a simulation database, and support dynamic adjustment and expansion. The network simulation module is further used to:

[0041] 1. Simulate network topology: According to the network topology defined in the scenario editor, build the corresponding network simulation environment, including the simulation of network devices such as routers, switches, and servers.

[0042] 2. Traffic generation: Simulates packet transmission in a real network, including normal traffic and attack traffic, to test the response capabilities of the defense system.

[0043] 3. Provide protocol support: support simulation of multiple network protocols (such as TCP / IP, HTTP, SMTP, etc.) to ensure the authenticity and comprehensiveness of the simulation environment.

[0044] 4. Dynamic adjustment: Dynamically adjust the network simulation environment according to the real-time situation of attack and defense confrontation to simulate the complex and changeable network environment.

[0045] The AI ​​automation control module is used to integrate advanced artificial intelligence algorithms, such as machine learning and deep learning, to simulate attack behaviors, intelligently generate and adjust defense strategies; manage attack and defense rules through the rule engine to achieve intelligent and automated confrontation processes. The AI ​​automation control module is further used to:

[0046] 1. Intelligent decision-making: Use AI algorithms to analyze data in attack and defense confrontation in real time, providing intelligent decision-making support for attackers and defenders.

[0047] 2. Automated attacks: Automatically launch attacks based on preset attack strategies or AI-generated attack plans to simulate hacker behavior in the real world.

[0048] 3. Defense strategy optimization: Automatically adjust the defense strategy according to the attack situation to improve the system's defense capabilities.

[0049] 4. Behavioral simulation: simulate the behavior patterns of attackers and defenders, including attack path selection, defense resource allocation, etc.

[0050] The security isolation module is used to deploy security devices such as firewalls and isolation gateways to achieve security isolation of sensitive data; through policy configuration, data flow is strictly controlled to prevent information leakage. The security isolation module is further used to:

[0051] 1. Physical isolation: Isolate the simulation environment from the real network environment at the physical level to ensure that the simulation process will not have any impact on the real system.

[0052] 2. Logical isolation: Set access control policies at the logical level to limit access to sensitive data in the simulation environment.

[0053] 3. Data desensitization: Desensitize the real data involved in the simulation environment to protect user privacy and sensitive information.

[0054] 4. Monitoring and auditing: Monitor the operating status of the simulation environment in real time and record all operation logs for post-audit and tracing.

[0055] The evaluation and feedback module is used to automatically collect data during the drill, use statistical analysis and machine learning technology to objectively evaluate the drill effect, and generate detailed reports and improvement suggestions, supporting multi-dimensional evaluation, such as attack success rate, defense response time, etc. The evaluation and feedback module is further used to:

[0056] 1. Attack and defense effectiveness evaluation: Based on the results of the attack and defense confrontation, the performance of the attacker and defender is evaluated, including the attack success rate, defense effectiveness, etc.

[0057] 2. Performance analysis: Analyze the performance indicators of the system during the simulation, such as response time, throughput, etc., to evaluate the overall performance of the system.

[0058] 3. Vulnerability discovery: Through the attack and defense process, potential vulnerabilities and weaknesses in the system are discovered, providing a basis for subsequent repairs and improvements.

[0059] 4. Feedback report: Generate a detailed attack and defense confrontation report, including scenario description, attack and defense process, evaluation results, etc., for user reference and decision-making.

[0060] The business module adopts a plug-in architecture, dynamically loads or unloads the above functional modules and newly developed functional modules, accesses the platform through standard interfaces, and builds a multi-layer defense system to achieve intelligent confrontation strategy generation and automated evaluation and feedback.

[0061] Furthermore, the business module includes a dynamic loading and unloading module for dynamically loading or unloading various functional modules at runtime without restarting the entire system, thereby improving the flexibility and scalability of the system.

[0062] The business module also includes a plug-in architecture and adopts a plug-in design to receive new functional modules developed by third-party developers based on demand, access the platform through standard interfaces, and enrich platform functions.

[0063] The business module also includes an intelligent confrontation strategy generation module. The intelligent confrontation strategy generation module works together with the AI ​​automation control module to automatically generate attack and defense strategies based on historical data and current situations, simulating complex confrontation processes in the real world.

[0064] The business module also includes an automated evaluation and feedback module that works with the evaluation and feedback module to automatically analyze data, generate an evaluation report, and make improvement suggestions after the drill is completed. At the same time, the drill process and results are displayed through a visual interface to facilitate user understanding and analysis.

[0065] The business module also includes a multi-layer defense system module, which is used to build a multi-layer defense system including physical isolation, network isolation, and application isolation to ensure the security and controllability of sensitive data and technology.

[0066] The business module also includes a sensitive data desensitization module. During the drill, sensitive data is desensitized to prevent the risk of data leakage.

[0067] Through the above specific scheme, the network security attack and defense confrontation scenario generation system for the new power system of the present invention not only solves the problems of single attack and defense scenario, poor flexibility, and low intelligence level in the prior art, but also realizes high integration and flexible configuration of functions through modular and scalable architecture design, and meets the network security confrontation drill requirements of different levels and different needs. At the same time, by strengthening security isolation and boundary protection, the security and controllability of sensitive data and technology are ensured, providing a strong guarantee for the network security of the new power system.

[0068] In the process of generating intelligent confrontation strategies, in addition to using machine learning algorithms, other intelligent algorithms such as deep learning and reinforcement learning can also be explored as alternatives. For example, an immersive rehearsal experience can be provided by building an attack and defense confrontation platform based on virtual reality; or data security and traceability can be enhanced by integrating blockchain technology.

[0069] The beneficial effect of the present invention is that, compared with the prior art, the present invention provides a network security attack and defense confrontation scenario generation system for a new power system. Through the plug-in architecture, users can quickly adjust or expand system functions according to actual needs without large-scale system reconstruction, which not only reduces the system maintenance cost, but also improves the adaptability and response speed of the system, and better copes with the rapidly changing needs in the field of network security of new power systems; automatically generates attack and defense strategies according to historical data and current situation, reduces manual intervention, and improves the authenticity and effectiveness of the drill. At the same time, the drill data is collected and analyzed in real time, and detailed evaluation reports and improvement suggestions are generated, which improves the efficiency and accuracy of the drill, which not only reduces the burden on the staff, but also makes the drill results more objective and reliable; by building a multi-layer defense system and implementing sensitive data desensitization and other measures, the security isolation and boundary protection capabilities of the system are significantly enhanced, sensitive solutions and tools are effectively isolated, information leakage and core asset damage are prevented, and clear attack and defense scenario boundaries also reduce the risks faced by the experiment itself, ensuring the safety and controllability of the drill process; a multi-dimensional evaluation method is adopted, traditional indicators such as attack success rate and defense response time are considered, and an intelligent algorithm is combined to conduct an in-depth analysis of the drill process. It can more comprehensively reflect the effect of the drill, help users discover potential security loopholes and weak links, and provide strong support for subsequent improvements and optimizations; it can effectively alleviate resource bottlenecks and improve resource utilization when large-scale personnel participate in confrontation or training. At the same time, the intelligent and automated drill process also reduces human errors and duplication of work, reduces cost expenditure, and has higher cost-effectiveness and market competitiveness in the field of new power system network security.

[0070] Based on the spirit of the present invention, those skilled in the art can easily think that a computer program product can be obtained based on the aforementioned network security attack and defense confrontation scenario generation system for new power systems. The computer program product may include a computer-readable storage medium, which carries computer-readable program instructions for enabling a processor to implement various aspects of the present disclosure. That is, the present application also includes a terminal, including a processor and a storage medium; the storage medium is used to store instructions; the processor is used to operate according to the instructions to implement the aforementioned network security attack and defense confrontation scenario generation system for new power systems.

[0071] Computer readable storage medium can be a tangible device that can keep and store the instructions used by the instruction execution device. Computer readable storage medium can be, for example, - but not limited to - electrical storage device, magnetic storage device, optical storage device, electromagnetic storage device, semiconductor storage device or any suitable combination of the above. More specific examples (non-exhaustive list) of computer readable storage medium include: portable computer disk, hard disk, random access memory (RAM), read-only memory (ROM), erasable programmable read-only memory (EPROM or flash memory), static random access memory (SRAM), portable compact disk read-only memory (CD-ROM), digital versatile disk (DVD), memory stick, floppy disk, mechanical encoding device, for example, punch card or groove protrusion structure with instructions stored thereon and any suitable combination of the above. Computer readable storage medium used here is not interpreted as instantaneous signal itself, such as radio wave or other free propagating electromagnetic wave, electromagnetic wave propagated by waveguide or other transmission medium (for example, light pulse by optical fiber cable) or electrical signal transmitted by wire.

[0072] The computer-readable program instructions described herein can be downloaded from a computer-readable storage medium to each computing / processing device, or downloaded to an external computer or external storage device via a network, such as the Internet, a local area network, a wide area network, and / or a wireless network. The network can include copper transmission cables, optical fiber transmissions, wireless transmissions, routers, firewalls, switches, gateway computers, and / or edge servers. The network adapter card or network interface in each computing / processing device receives the computer-readable program instructions from the network and forwards the computer-readable program instructions for storage in the computer-readable storage medium in each computing / processing device.

[0073] The computer program instructions for performing the operation of the present disclosure may be assembly instructions, instruction set architecture (ISA) instructions, machine instructions, machine-related instructions, microcode, firmware instructions, state setting data, or source code or object code written in any combination of one or more programming languages, including object-oriented programming languages-such as Smalltalk, C++, etc., and conventional procedural programming languages-such as "C" language or similar programming languages. Computer-readable program instructions may be executed completely on a user's computer, partially on a user's computer, as an independent software package, partially on a user's computer, partially on a remote computer, or completely on a remote computer or server. In the case of a remote computer, the remote computer may be connected to the user's computer via any type of network-including a local area network (LAN) or a wide area network (WAN), or may be connected to an external computer (e.g., using an Internet service provider to connect via the Internet). In some embodiments, an electronic circuit, such as a programmable logic circuit, a field programmable gate array (FPGA), or a programmable logic array (PLA) may be personalized by utilizing the state information of a computer-readable program instruction, and the electronic circuit may execute a computer-readable program instruction, thereby realizing various aspects of the present disclosure.

[0074] Finally, it should be noted that the above embodiments are only used to illustrate the technical solutions of the present invention rather than to limit it. Although the present invention has been described in detail with reference to the above embodiments, ordinary technicians in the relevant field should understand that the specific implementation methods of the present invention can still be modified or replaced by equivalents, and any modifications or equivalent replacements that do not depart from the spirit and scope of the present invention should be covered within the scope of protection of the claims of the present invention.

Claims

1. A network security attack and defense confrontation scenario generation system for new power systems, characterized in that: It includes scenario editor module, network simulation module, AI automation control module, safety isolation module, evaluation and feedback module and business module; The scenario editor module is used to provide a graphical interface, receive user interaction operations, build or modify attack and defense scenarios, and support multi-level and multi-domain scenario customization; The network simulation module is used to automatically generate or import real network environment data based on network space mapping technology, build a highly simulated network environment, and manage simulation data through a simulation database; The AI ​​automation control module is used to integrate artificial intelligence algorithms to simulate attack behaviors, intelligently generate and adjust defense strategies, manage attack and defense rules through a rule engine, and realize the intelligence and automation of the confrontation process; The security isolation module is used to deploy security devices to achieve security isolation of sensitive data; control data flow through policy configuration to prevent information leakage; The evaluation and feedback module is used to automatically collect data during the exercise, use statistical analysis and machine learning techniques to conduct multi-dimensional evaluation of the exercise effect, and generate detailed reports and improvement suggestions; The business module is used to adopt a plug-in architecture, dynamically load or unload the above functional modules and newly developed functional modules, access the platform through a standard interface, and build a multi-layer defense system to achieve intelligent confrontation strategy generation and automated evaluation and feedback.

2. The network security attack and defense confrontation scenario generation system for the new power system according to claim 1 is characterized in that: The attack and defense scenarios include a power system control network and a data transmission network.

3. The network security attack and defense confrontation scenario generation system for the new power system according to claim 2 is characterized in that: The network environment data includes topology, device attributes and traffic patterns.

4. The network security attack and defense confrontation scenario generation system for the new power system according to claim 3 is characterized in that: The artificial intelligence algorithms include machine learning and deep learning.

5. The network security attack and defense confrontation scenario generation system for the new power system according to claim 4 is characterized in that: The multi-dimensional evaluation includes attack success rate and defense response time evaluation.

6. The network security attack and defense confrontation scenario generation system for the new power system according to claim 5 is characterized in that: The security equipment includes a firewall and an isolation gate.

7. The network security attack and defense confrontation scenario generation system for the new power system according to claim 6 is characterized in that: The multi-layer defense system includes physical isolation, network isolation and application isolation.

8. The network security attack and defense confrontation scenario generation system for the new power system according to claim 7 is characterized in that: The business module also includes a sensitive data desensitization module, which is used to desensitize sensitive data during the drill to prevent data leakage risks.

9. A terminal comprising a processor and a storage medium; characterized in that: The storage medium is used to store instructions; The processor is used to operate according to the instructions to implement the network security attack and defense confrontation scenario generation system for the new power system according to any one of claims 1-8.

10. A computer-readable storage medium having a computer program stored thereon, characterized in that: When the program is executed by a processor, a network security attack and defense confrontation scenario generation system for a new power system as described in any one of claims 1-8 is implemented.

Images