A method and system for constructing virtualized security components of power Internet of Things

Abstract

The present invention discloses a method and system for constructing a virtualized security component of an electric power Internet of Things, the method comprising: obtaining a core basic image corresponding to the current application environment, current security requirements, and the minimum operating environment of the security component of the location to be deployed; based on the current application environment and the current security requirements, screening security component images from a preset security component image library to form a security component image set, the preset security component image library is used to store the application environment, security requirements, and mapping rules between security components; constructing a virtualized security component based on the core basic image and the security component image set. The present invention presets the application environment, security requirements, and mapping rules between security components, and can quickly find the required security component image based on the mapping relationship based on the security requirements and the application environment, thereby quickly realizing the deployment of the security component, ensuring the timely response of security protection, and this construction method is conducive to the rapid change of security components.

Description

Technical Field

[0001] The present invention relates to the field of network security technology, and in particular to a method and system for constructing a virtualized security component of an electric power Internet of Things. Background Art

[0002] The edge IoT agent is located in the perception layer of the power IoT, realizing communication convergence, edge computing, and regional autonomy of the perception layer, and can receive control commands and configuration information issued by the platform layer. As an aggregation node for various sensors, the edge IoT agent simultaneously accesses multiple business terminals, making the security protection problem on the edge IoT agent side extremely complicated. It is necessary to deploy corresponding security equipment for security protection according to different access terminals, application environments, and security requirements. However, existing security solutions rely heavily on dedicated hardware, and in addition to the main functions, many edge functions overlap and lack integration, and hardware encryption modules are difficult to adapt to a large number of IoT terminals.

[0003] The core technology of software-defined security is virtualization technology. The existing software-defined security solution has achieved the separation of hardware platform and security functions by introducing container technology. The required security component images can be deployed on the edge IoT proxy access platform according to the on-site environment. However, when the security requirements or operating environment change, new security component images need to be regenerated and redeployed to the edge IoT proxy hardware platform. The distribution of images takes a lot of time, which makes the container startup process take several seconds or minutes, making it impossible to respond to the changing application environment in a timely manner and change quickly. Summary of the invention

[0004] In view of this, an embodiment of the present invention provides a method and system for constructing a virtualized security component of an electric power Internet of Things to solve the problem of slow deployment and update of security components when security requirements and application environments change.

[0005] In order to achieve the above object, the present invention provides the following technical solutions:

[0006] An embodiment of the present invention provides a method for constructing a virtualized security component of an electric power Internet of Things, comprising:

[0007] Obtain the core basic image corresponding to the current application environment, current security requirements, and minimum operating environment of security components at the location to be deployed;

[0008] Based on the current application environment and the current security requirements, screening security component images from a preset security component image library to form a security component image set, wherein the preset security component image library is used to store mapping rules between application environments, security requirements, and security components;

[0009] A virtualized security component is constructed based on the core base image and the security component image set.

[0010] Optionally, the method for constructing a virtualized security component of the power Internet of Things further includes:

[0011] Obtain different application environments, security requirements, and security component images;

[0012] Based on the requirements of power Internet of Things security management and control, establish mapping rules between the application environment and security requirements and the security component image;

[0013] The preset security component image library is established according to different security component images and their corresponding mapping rules.

[0014] Optionally, the method for constructing a virtualized security component of the power Internet of Things further includes:

[0015] Performing real-time monitoring of the current application environment and the current security requirements;

[0016] When changes are detected in the current application environment and / or the current security requirements, the differences before and after the changes are recorded;

[0017] A new security component image set is formed according to the difference before and after the change and the mapping rule, and the process returns to the step of building a virtualized security component based on the core base image and the security component image set.

[0018] Optionally, forming a new security component image set according to the difference before and after the change and the mapping rule includes:

[0019] Based on the mapping relationship, determining the first security component image corresponding to the application environment and the security requirement corresponding to the difference generated before the change;

[0020] Based on the mapping relationship, determine the application environment corresponding to the difference generated after the change and the second security component image corresponding to the security requirement;

[0021] The first security component image in the security component image set is replaced with the second security component image to form a new security component image set.

[0022] Optionally, the selecting a security component image from a preset security component image library to form a security component image set based on the current application environment and the current security requirement includes:

[0023] Based on the mapping rule, a security component image corresponding to the current application environment and the current security requirement is screened from the preset security component image library to form a security component image set.

[0024] Optionally, the building of a virtualized security component based on the core base image and the security component image set includes:

[0025] Creating a container associated with each security component image based on the images in the security component image set;

[0026] Building an image layer and a container layer according to the core base image, the security component images in the security component image set, and the corresponding containers;

[0027] Extract the read-only files of the image layer and the container layer respectively;

[0028] The read-only files are combined to form a file system through a combined file system to construct a virtualized security component.

[0029] Optionally, the method for constructing a virtualized security component of the power Internet of Things further includes:

[0030] Create an image directory of an image layer, wherein the image layer includes a core base image and a security component image;

[0031] Creating a container directory of a container layer, wherein the container layer includes a container associated with the security component image;

[0032] The mirror directory is used as a subordinate directory and the container directory is used as a superior directory, and they are mounted together in the same directory to form a file system directory.

[0033] The embodiment of the present invention also provides a virtualization construction system for a power Internet of Things security component, including:

[0034] Acquisition module: used to obtain the core basic image corresponding to the current application environment, current security requirements and minimum operating environment of the security component at the location to be deployed;

[0035] A screening module: used to screen security component images from a preset security component image library to form a security component image set based on the current application environment and the current security requirements, wherein the preset security component image library is used to store mapping rules between application environments, security requirements, and security components;

[0036] Construction module: used to construct a virtualized security component based on the core basic image and the security component image set.

[0037] An embodiment of the present invention further provides an electronic device, including:

[0038] A memory and a processor, wherein the memory and the processor are communicatively connected to each other, the memory stores computer instructions, and the processor executes the method for constructing a virtualized power Internet of Things security component provided by an embodiment of the present invention by executing the computer instructions.

[0039] An embodiment of the present invention further provides a computer-readable storage medium, which stores computer instructions, and the computer instructions are used to enable the computer to execute the method for virtualizing the construction of power Internet of Things security components provided by an embodiment of the present invention.

[0040] The technical solution of the present invention has the following advantages:

[0041] The present invention provides a method and system for constructing a virtualized security component of an electric power Internet of Things, including obtaining a core basic image corresponding to the current application environment, current security requirements, and minimum operating environment of the security component of the location to be deployed; based on the current application environment and current security requirements, screening security component images from a preset security component image library to form a security component image set, the preset security component image library is used to store the application environment, security requirements, and mapping rules between security components; constructing a virtualized security component based on the core basic image and the security component image set. The present invention presets the application environment, security requirements, and mapping rules between security components, and can quickly find the required security component image based on the mapping relationship based on security requirements and application environment, thereby quickly realizing the deployment of security components, ensuring timely response of security protection, and this construction method is conducive to the rapid change of security components. BRIEF DESCRIPTION OF THE DRAWINGS

[0042] In order to more clearly illustrate the specific implementation methods of the present invention or the technical solutions in the prior art, the drawings required for use in the specific implementation methods or the description of the prior art will be briefly introduced below. Obviously, the drawings described below are some implementation methods of the present invention. For ordinary technicians in this field, other drawings can be obtained based on these drawings without paying creative work.

[0043] Figure 1 It is a flowchart of a method for constructing a virtualized security component of an electric power Internet of Things in an embodiment of the present invention;

[0044] Figure 2 A flowchart of establishing a preset security component image library and constructing a security component image set in an embodiment of the present invention;

[0045] Figure 3 A flowchart of forming a new security component image set according to the differences and mapping rules generated before and after the change in an embodiment of the present invention;

[0046] Figure 4 A flowchart of building a virtualized security component based on a core basic image and a security component image set in an embodiment of the present invention;

[0047] Figure 5 Schematic diagram of a mirror image architecture in an embodiment of the present invention;

[0048] Figure 6 A schematic diagram of a system for virtualizing and building a security component of an electric power Internet of Things according to an embodiment of the present invention;

[0049] Figure 7 Schematic diagram of the structure of an electronic device in an embodiment of the present invention. DETAILED DESCRIPTION

[0050] In order to make the purpose, technical solution and advantages of the embodiments of the present invention clearer, the technical solution in the embodiments of the present invention will be clearly and completely described below in conjunction with the drawings in the embodiments of the present invention. Obviously, the described embodiments are part of the embodiments of the present invention, not all of the embodiments. Based on the embodiments of the present invention, all other embodiments obtained by those skilled in the art without creative work are within the scope of protection of the present invention.

[0051] According to an embodiment of the present invention, an embodiment of a method for virtualizing the construction of a security component of an electric power Internet of Things is provided. It should be noted that the steps shown in the flowchart of the accompanying drawings can be executed in a computer system such as a set of computer executable instructions, and although a logical order is shown in the flowchart, in some cases, the steps shown or described can be executed in an order different from that shown here.

[0052] In this embodiment, a method for constructing a virtualized security component of an electric power Internet of Things is provided. Figure 1 As shown, the method for constructing a virtualized security component of the power Internet of Things includes the following steps:

[0053] Step S1: Obtain the core base image corresponding to the current application environment, current security requirements and minimum operating environment of the security component at the location to be deployed. Specifically, by creating a core base image, underlying resource sharing can be achieved. Different images can be composed of a core base image and multiple different upper-layer images. Usually, the same parts between different images are placed in the core base image. In the specific implementation, since the kernel of the operating system is the core component common to all images, the core base image is usually used to store the kernel of the operating system.

[0054] Step S2: Based on the current application environment and current security requirements, the security component images are selected from the preset security component image library to form a security component image set. The preset security component image library is used to store the mapping rules between the application environment, security requirements and security components. Specifically, the required security component images are extracted through the mapping rules. When the application environment or security requirements change, the configuration through the mapping rules can save time and improve efficiency, thereby achieving rapid response.

[0055] Step S3: Build a virtualized security component based on the core basic image and the security component image set. Specifically, according to the changes in the security requirements at runtime, when a security component needs to be used, the core basic image is combined with the upper-level security component image to obtain the final image for deployment, ensuring timely response and rapid change of security protection.

[0056] Through the above steps S1 to S3, the power Internet of Things security component virtualization construction method provided by the embodiment of the present invention can quickly find the required security component image according to the mapping relationship based on the security requirements and application environment by presetting the application environment, security requirements and mapping rules between security components, thereby quickly realizing the deployment of security components and ensuring the timely response of security protection. In addition, this construction method is conducive to the rapid change of security components.

[0057] Specifically, in one embodiment, the above-mentioned method for constructing a virtualized security component of the power Internet of Things is as follows: Figure 2 As shown, the following steps are also included:

[0058] Step S01: Obtain different application environments, security requirements and security component images. Specifically, the application environment is formally defined, and a specific application environment is regarded as a multidimensional vector parameter e= containing several operating attributes.<size,link,bandwith,device_type,CPU_performance,payload> , then the application environment set is defined as E = {e1, e2, ..., e n}.

[0059] Among them, size indicates the image data size, link indicates the link mode between the edge IoT agent and the terminal device, bandwith indicates the link bandwidth between the edge IoT agent and the terminal device, device_type indicates the type of device connected to the edge IoT agent, CPU_performance indicates the CPU performance of the hardware platform on which the edge IoT agent deploys security components, and payload is the workload when the hardware platform is running.

[0060] The security requirements are formally defined and regarded as a multi-dimensional vector parameter d=<data_type,run_time,run_interval,user_type,security_level,security_role,security_rule> , then the security requirement set is defined as D = {r1, r2, ..., r n}.

[0061] Among them, data_type indicates the data type processed by security protection, run_time indicates the time point when the security function runs, run_interval indicates the length of time the security function runs, user_type indicates the type of access user, security_level indicates the security protection level, security_role indicates the security role played in security protection, and security_rule indicates the security protection rule.

[0062] Define the image generation strategy corresponding to the security component as image=<image_layer,container_layer> , where image_layer is the image layer, and container_layer is the container layer, which is its writable folder. The image set of the security component is defined as I = {image1, image1, ..., image n}.

[0063] Step S02: Based on the requirements of power Internet of Things security management and control, establish mapping rules between application environment and security requirements and security component images. Specifically, for example:

[0064]

[0065] Step S03: Establish a preset security component image library according to different security component images and their corresponding mapping rules.

[0066] Specifically, in one embodiment, the above step S2, such as Figure 2 As shown, the following steps are also included:

[0067] Step S04: Real-time monitoring of the current application environment and current security requirements. Specifically, through real-time monitoring, an alarm event is generated and uploaded when an abnormality occurs, and changes are recorded for subsequent analysis.

[0068] Step S05: When the current application environment and / or the current security requirement are monitored to change, the difference before and after the change is recorded. Specifically, by recording the difference, subsequent mirror adjustment is facilitated.

[0069] Step S06: construct a new security component image set according to the differences before and after the change and the mapping rules, and return to step S3.

[0070] Specifically, in one embodiment, the above step S06, as Figure 3 As shown, the following steps are also included:

[0071] Step S061: Based on the mapping relationship, determine the first security component image corresponding to the application environment and security requirements corresponding to the difference before the change. Specifically, the first security component image is an image corresponding to the changed part before the change after the current application environment and / or the current security requirements change. The first security component image is determined to facilitate the subsequent replacement so that it can be directly replaced to improve efficiency.

[0072] Step S062: Based on the mapping relationship, determine the second security component image corresponding to the application environment and security requirements corresponding to the difference after the change. Specifically, the second security component image is an image of the corresponding changed part obtained according to the mapping relationship after the current application environment and / or current security requirements change.

[0073] Step S063: Replace the first security component image in the security component image set with the second security component image to form a new security component image set.

[0074] Through the above steps S061 to S063, after the current application environment and / or the current security requirements change, the security components can be quickly redeployed by replacing the changed images based on the mapping relationship, thereby being able to cope with the changing application environment and different security requirements.

[0075] Specifically, in one embodiment, the above step S2 includes: based on the mapping rule, screening the security component image corresponding to the current application environment and the current security requirement from the preset security component image library to form a security component image set.

[0076] Specifically, in one embodiment, the above step S3, as Figure 4 As shown, the following steps are included:

[0077] Step S31: Create a container associated with each security component image based on the image in the security component image set. Specifically, when creating a container, first check whether each parameter is legal, including whether the container already exists, whether the configuration file exists, whether the specified image file is complete and available, etc.

[0078] Step S32: Build image layers and container layers based on the core base image, the security component image in the security component image set, and the corresponding container. Specifically, the image layer includes the core base image and the security component image, the container layer includes the container associated with the security component image, the image layer is the executable code of the security component function, and the container layer is the required writable folder.

[0079] Step S33: extract the read-only files of the image layer and the container layer respectively.

[0080] Step S34: The read-only files are combined into a file system through a combined file system to construct a virtualized security component. Finally, a unified whole is formed through a combined file system, and what is finally presented to the user is a container layer file system.

[0081] Specifically, by designing and implementing multi-layer container images based on preset templates, secure component image management can be achieved. The core base image is a read-only template that contains a file system. Users create containers based on images, and a running container is a running instance created from the corresponding image. In order to facilitate the storage and update of images, the implementation of images is a layered structure based on the union file system, that is, the image is actually composed of layers of file views.

[0082] A multi-layer image is composed of multiple images stacked on top of each other. Each layer records the image information of the next layer, similar to a linked list structure. Finally, multiple read-only layers are merged through a joint file system, and a unified view is provided to the user.

[0083] The Union File System is implemented on the basis of the existing file system, and does not require formatting or other processing. Customers only need to mount it to use it. It can realize the layered superposition of file systems, and using it in the image can realize layering.

[0084] Specifically, in one embodiment, the above step S3, as Figure 4 As shown, the following steps are also included:

[0085] Step S35: Create an image directory of the image layer, which includes the core base image and the security component image. Specifically, the image layer is the executable code of the security component function. Different images can be composed of a core base image and multiple different upper-layer images. When a security component is needed, the core container image and the upper-layer image of the corresponding security component are combined.

[0086] Step S36: Create a container directory of the container layer, the container layer includes a container associated with the security component image. Specifically, the container layer is a writable folder corresponding to the security component image.

[0087] Step S37: Mount the mirror directory as a lower directory and the container directory as an upper directory to the same directory to form a file system directory. Specifically, a series of directory mounting operations have been encapsulated into a specific function, which only needs to be called.

[0088] Specifically, the overall architecture of edge IoT agent security protection based on software-defined security includes three parts: security applications, security control platform, and security hardware resource pool. The security component resource pool in the security resource pool is composed of virtualized security components. The security services on the original security devices are virtualized and isolated through container technology. Figure 5 As shown in the figure, the security functions of virtualization mainly include security admission, security access and security monitoring:

[0089] (1) Security access: The IoT agent uses a whitelist approach to manage access to downstream service terminals. The platform compiles terminal authentication rules. The IoT agent first downloads the terminal MAC address list from the platform and imports the terminal MAC address list into the security access module. The IoT agent terminal main program calls the terminal access application function, which returns access permission or access denial after calling the permission management module. After the terminal submits an access application, the IoT agent main program sends the terminal's MAC address and terminal type to the security access module, which returns access permission or access denial based on the authentication rules. The IoT agent terminal access access module includes sub-modules such as access rule download, whitelist management, and access authorization control.

[0090] (2) Secure access: Realize secure access between the edge IoT agent and the platform, support the SSAL protocol, and be deployed on the IoT agent as an SSAL protocol processing process. It is responsible for SSAL protocol encapsulation and unloading, large packet segmentation and assembly, basic cryptographic algorithm operations, and session key negotiation with the access gateway. The communication front-end, access gateway, and communication back-end are all deployed in the secure access area. The communication front-end is deployed at the outermost side of the secure access area and is responsible for establishing and maintaining the communication link with the IoT agent and aggregating and forwarding the agent-side business messages. The access gateway is deployed after the communication front-end and is responsible for agent-side identity authentication, secure channel establishment, and encryption and decryption forwarding of business messages. The communication back-end is deployed after the access gateway and is responsible for SSAL protocol encapsulation and unloading, large packet segmentation and assembly, and business message distribution.

[0091] (3) Security monitoring: Implement traffic monitoring, local monitoring, and upload the generated event alarms to the management platform. The traffic monitoring module implements the monitoring of Ethernet data entering the agent device, implements traffic size statistics, traffic legitimacy analysis, traffic protocol analysis, and generates alarm events. The local monitoring module implements the upload platform of some states and events of the agent security component resource layer device.

[0092] Specifically, virtualization uses lightweight virtualization technology based on containers. Lightweight virtual machines can directly load and run applications on the host platform to share the host machine's kernel, and the performance loss is relatively small. At the same time, during the operation process, it avoids the complexity caused by the alternation of system calls, and adopts a lightweight isolation method, which can realize resource sharing while providing an isolation mechanism.

[0093] In this embodiment, a power Internet of Things security component virtualization construction system is also provided, and the device is used to implement the above-mentioned embodiments and preferred implementation modes, and the descriptions that have been made will not be repeated. As used below, the term "module" can implement a combination of software and / or hardware for a predetermined function. Although the devices described in the following embodiments are preferably implemented in software, the implementation of hardware, or a combination of software and hardware, is also possible and conceivable.

[0094] This embodiment provides a virtualization construction system for power Internet of Things security components, such as Figure 6 As shown, including:

[0095] The acquisition module 101 is used to obtain the core basic image corresponding to the current application environment, current security requirements and minimum operating environment of the security component of the location to be deployed. For details, please refer to the relevant description of step S1 in the above method embodiment, which will not be repeated here.

[0096] The screening module 102 is used to screen security component images from a preset security component image library to form a security component image set based on the current application environment and current security requirements. The preset security component image library is used to store the mapping rules between the application environment, security requirements and security components. For details, please refer to the relevant description of step S2 in the above method embodiment, which will not be repeated here.

[0097] The construction module 103 constructs a virtualized security component based on the core basic image and the security component image set. For details, please refer to the relevant description of step S3 in the above method embodiment, which will not be repeated here.

[0098] The power Internet of Things security component virtualization construction system in this embodiment is presented in the form of functional units, where the units refer to ASIC circuits, processors and memories that execute one or more software or fixed programs, and / or other devices that can provide the above functions.

[0099] The further functional description of each of the above modules is the same as that of the above corresponding embodiments and will not be repeated here.

[0100] According to an embodiment of the present invention, there is also provided an electronic device, such as Figure 7As shown, the electronic device may include a processor 901 and a memory 902, wherein the processor 901 and the memory 902 may be connected via a bus or other means. Figure 7 The example of connecting through bus is taken in the following.

[0101] The processor 901 may be a central processing unit (CPU). The processor 901 may also be other general-purpose processors, digital signal processors (DSP), application-specific integrated circuits (ASIC), field-programmable gate arrays (FPGA) or other programmable logic devices, discrete gate or transistor logic devices, discrete hardware components, or a combination of the above chips.

[0102] The memory 902 is a non-transitory computer-readable storage medium that can be used to store non-transitory software programs, non-transitory computer executable programs and modules, such as program instructions / modules corresponding to the methods in the method embodiments of the present invention. The processor 901 executes various functional applications and data processing of the processor by running the non-transitory software programs, instructions and modules stored in the memory 902, that is, implementing the methods in the above method embodiments.

[0103] The memory 902 may include a program storage area and a data storage area, wherein the program storage area may store an operating system, an application required by at least one function; the data storage area may store data created by the processor 901, etc. In addition, the memory 902 may include a high-speed random access memory, and may also include a non-volatile memory, such as at least one disk storage device, a flash memory device, or other non-volatile solid-state storage device. In some embodiments, the memory 902 may optionally include a memory remotely arranged relative to the processor 901, and these remote memories may be connected to the processor 901 via a network. Examples of the above-mentioned network include, but are not limited to, the Internet, an intranet, a local area network, a mobile communication network, and combinations thereof.

[0104] One or more modules are stored in the memory 902 , and when executed by the processor 901 , the method in the above method embodiment is executed.

[0105] The specific details of the above electronic device can be understood by referring to the corresponding descriptions and effects in the above method embodiments, and will not be repeated here.

[0106] Those skilled in the art can understand that all or part of the processes in the above-mentioned embodiments can be implemented by instructing the relevant hardware through a computer program, and the program can be stored in a computer-readable storage medium. When the program is executed, it can include the processes of the embodiments of the above-mentioned methods. Among them, the storage medium can be a disk, an optical disk, a read-only memory (ROM), a random access memory (RAM), a flash memory, a hard disk drive (HDD) or a solid-state drive (SSD), etc.; the storage medium can also include a combination of the above-mentioned types of memory.

[0107] Although the embodiments of the present invention have been described in conjunction with the accompanying drawings, those skilled in the art may make various modifications and variations without departing from the spirit and scope of the present invention, and such modifications and variations are all within the scope defined by the appended claims.

Claims

1. A method for constructing a virtualized security component of an electric power Internet of Things, characterized in that: include: Obtain the core basic image corresponding to the current application environment, current security requirements, and minimum operating environment of security components at the location to be deployed; Based on the current application environment and the current security requirements, screening security component images from a preset security component image library to form a security component image set, wherein the preset security component image library is used to store mapping rules between application environments, security requirements, and security components; Building a virtualized security component based on the core base image and the security component image set; The step of constructing a virtualized security component based on the core base image and the security component image set includes: Creating a container associated with each security component image based on the images in the security component image set; Build an image layer and a container layer according to the core base image, the security component images in the security component image set, and the corresponding containers; Extract the read-only files of the image layer and the container layer respectively; The read-only files are combined to form a file system through a combined file system to construct a virtualized security component.

2. The method for constructing a virtualized security component of the power Internet of Things according to claim 1 is characterized in that: Also includes: Obtain different application environments, security requirements, and security component images; Based on the requirements of power Internet of Things security management and control, establish mapping rules between the application environment and security requirements and the security component image; The preset security component image library is established according to different security component images and their corresponding mapping rules.

3. The method for constructing a virtualized security component of the power Internet of Things according to claim 2 is characterized in that: Also includes: Performing real-time monitoring of the current application environment and the current security requirements; When changes are detected in the current application environment and / or the current security requirement, the difference before and after the changes is recorded; A new security component image set is formed according to the difference before and after the change and the mapping rule, and the process returns to the step of building a virtualized security component based on the core base image and the security component image set.

4. The method for constructing a virtualized security component of the power Internet of Things according to claim 3 is characterized in that: The new security component image set is formed according to the difference before and after the change and the mapping rule, including: Based on the mapping rule, determining the first security component image corresponding to the application environment and the security requirement corresponding to the difference generated before the change; Based on the mapping rule, determining the second security component image corresponding to the application environment and security requirement corresponding to the difference generated after the change; The first security component image in the security component image set is replaced with the second security component image to form a new security component image set.

5. The method for constructing a virtualized security component of the power Internet of Things according to claim 1, characterized in that: The step of selecting a security component image from a preset security component image library based on the current application environment and the current security requirement to form a security component image set includes: Based on the mapping rule, a security component image corresponding to the current application environment and the current security requirement is screened from the preset security component image library to form a security component image set.

6. The method for constructing a virtualized security component of the power Internet of Things according to claim 1, characterized in that: Also includes: Create an image directory of an image layer, wherein the image layer includes a core base image and a security component image; Creating a container directory of a container layer, wherein the container layer includes a container associated with the security component image; The mirror directory is used as a subordinate directory and the container directory is used as a superior directory, and they are mounted together in the same directory to form a file system directory.

7. A power Internet of Things security component virtualization construction system, characterized in that: include: Acquisition module: obtains the core basic image corresponding to the current application environment, current security requirements and minimum operating environment of the security component at the location to be deployed; Screening module: based on the current application environment and the current security requirements, screening security component images from a preset security component image library to form a security component image set, wherein the preset security component image library is used to store mapping rules between application environment, security requirements and security components; Building module: building a virtualized security component based on the core basic image and the security component image set; The step of constructing a virtualized security component based on the core base image and the security component image set includes: Creating a container associated with each security component image based on the images in the security component image set; Build an image layer and a container layer according to the core base image, the security component images in the security component image set, and the corresponding containers; Extract the read-only files of the image layer and the container layer respectively; The read-only files are combined to form a file system through a combined file system to construct a virtualized security component.

8. An electronic device, characterized in that: include: A memory and a processor, wherein the memory and the processor are communicatively connected to each other, the memory stores computer instructions, and the processor executes the method for constructing a virtualized power Internet of Things security component according to any one of claims 1 to 6 by executing the computer instructions.

9. A computer-readable storage medium, characterized in that: The computer-readable storage medium stores computer instructions, and the computer instructions are used to enable the computer to execute the method for virtualizing the construction of power Internet of Things security components according to any one of claims 1 to 6.

Images