Evaluation Method and System for Network Security Environment of Substation Power Monitoring System

Abstract

An embodiment of the present invention provides a method and system for evaluating the network security environment of a substation power monitoring system, belonging to the technical field of network security of substation power monitoring systems. The evaluation method includes obtaining the device models of each power device in the network system and the corresponding network information; obtaining the fluctuation state information of the network system; obtaining the power state information of the power device; through the above technical solutions, the evaluation method and system for the network security environment of the substation power monitoring system provided by the present invention calculate the first evaluation value, the second evaluation value and the third evaluation value of the network system respectively by obtaining the device models of each power device in the network system and the corresponding network information, fluctuation state information and power state information, and finally obtain the total evaluation result, thereby facilitating the staff to master the security performance of the substation power monitoring system.

Description

Technical Field

[0001] The present invention relates to the technical field of network security of substation power monitoring systems, and particularly to an evaluation method and system for the network security environment of a substation power monitoring system. Background Art

[0002] The substation monitoring system is designed for the usage characteristics of power industry users. Combining industrial control, security management, and digital video, etc., and utilizing the existing network resources of the power grid, it designs a networked integrated security management system integrating multifunctional subsystems such as a remote vision system, an access control system, a fire protection system, and an environment and power monitoring system.

[0003] The evaluation method for the network security environment of a substation power monitoring system is also an important part of substation monitoring. However, the existing evaluation algorithms for network security environment have low security and relatively single functions, making the security performance of this power monitoring system unable to be accurately monitored, thus affecting the normal operation of this power monitoring system. Summary of the Invention

[0004] An object of an embodiment of the present invention is to provide an evaluation method and system for the network security environment of a substation power monitoring system, which can evaluate the security performance of this substation power monitoring system.

[0005] To achieve the above object, an embodiment of the present invention on the one hand provides an evaluation method and system for the network security environment of a substation power monitoring system, including:

[0006] Obtain the device models of each power device in the network system and the corresponding network information;

[0007] Obtain the fluctuation state information of the network system;

[0008] Obtain the power state information of the power device;

[0009] Determine a first evaluation value of the network system according to the network information;

[0010] Determine a second evaluation value of the network system according to the fluctuation state information;

[0011] Determine a third evaluation value of the network system according to the power state information;

[0012] Obtain a total evaluation result according to the first evaluation value, the second evaluation value, and the third evaluation value.

[0013] Optionally, the determining the first evaluation value of the network system according to the network information includes:

[0014] Calculate the theoretical mean value of network transmission according to formula (1).

[0015] K 均 =(K max +K min ) / 2, (1)

[0016] where K 均 is the theoretical mean value of network transmission, K max is the fastest network transmission speed, and K min is the slowest network transmission speed;

[0017] Calculate the evaluation difference according to formula (2).

[0018] K 差 =|K 均 -K 预 |, (2)

[0019] where K 预 is the preset evaluation value, and K 差 is the evaluation difference;

[0020] Judge whether the evaluation difference is less than or equal to the error threshold;

[0021] If it is judged that the evaluation difference is less than or equal to the error threshold, output the first evaluation value A1;

[0022] If it is judged that the evaluation difference is greater than the error threshold, output the first evaluation value A2.

[0023] Optionally, the determining the second evaluation value of the network system according to the fluctuation state information includes:

[0024] Obtain network speed information;

[0025] Judge whether the number of acquisitions is greater than or equal to 3;

[0026] If it is judged that the number of acquisitions is greater than or equal to 3, output the network speed information set;

[0027] Calculate the network information difference according to formula (3).

[0028] M x-(x+1) =|M x -M x+1 |, (3)

[0029] where M x-(x+1) is the network information difference, M x is the value of the x-th network information in the network information set, and M x+1 is the value of the (x + 1)-th network information in the network information set;

[0030] Traverse each of the network information differences, and determine the number of network information differences that are greater than a preset network information threshold;

[0031] Determine whether the number is less than 2;

[0032] If it is determined that the number is less than 2, output the second evaluation value B1;

[0033] If it is determined that the number is greater than or equal to 2, output the second evaluation value B2.

[0034] Optionally, the determining the third evaluation value of the network system according to the power state information includes:

[0035] Calculate the voltage information difference according to formula (4),

[0036] Dz 差 =|D Z -T Z |, (4)

[0037] where Dz 差 is the voltage information difference, D Z is the real-time voltage information, and T Z is the voltage threshold;

[0038] Calculate the current information difference according to formula (5),

[0039] Dq 差 =|D q -T q |, (5)

[0040] where Dq 差 is the current information difference, D q is the real-time current information, and T q is the voltage threshold;

[0041] Determine whether the voltage information difference is greater than a first preset voltage value and less than a second preset current value, and whether the current information difference is greater than a first preset current value and less than a second preset current value;

[0042] If it is determined that the voltage information difference is greater than a first preset voltage value and less than a second preset current value, and the current information difference is greater than a first preset current value and less than a second preset current value, output the third evaluation value C1;

[0043] If it is determined that the voltage information difference is less than or equal to the first preset voltage value, or the voltage information difference is greater than or equal to the second preset current value, or the current information difference is less than or equal to the first preset current value, or greater than or equal to the second preset current value, output the third evaluation value C2.

[0044] Optionally, the values of the first evaluation value A1, the second evaluation value B1, and the third evaluation value C1 are 1; the values of the first evaluation value A2, the second evaluation value B2, and the third evaluation value C2 are 0.

[0045] Optionally, obtaining the overall evaluation result according to the first evaluation value, the second evaluation value, and the third evaluation value includes:

[0046] Obtaining an evaluation value set of the first evaluation value, the second evaluation value, and the third evaluation value;

[0047] Judging whether the number of evaluation values equal to 1 in the evaluation value set is greater than or equal to 2;

[0048] When it is judged that the number of evaluation values equal to 1 in the evaluation value set is greater than or equal to 2, it is determined that the network security environment of the power monitoring system is excellent;

[0049] When it is judged that the number of evaluation values equal to 1 in the evaluation value set is less than 2, it is determined that the network security environment of the power monitoring system is poor.

[0050] Optionally, the evaluation method further includes:

[0051] When it is judged that the number of evaluation values equal to 1 in the evaluation value set is less than 2, a warning message is sent and a power monitoring report is generated.

[0052] Optionally, the evaluation method further includes:

[0053] When it is judged that the number of evaluation values equal to 1 in the evaluation value set is 1, a minor warning message is sent;

[0054] When it is judged that the number of evaluation values equal to 1 in the evaluation value set is 0, a severe warning message is sent.

[0055] An evaluation system for the network security environment of a substation power monitoring system includes:

[0056] An alarm for starting to send a warning message;

[0057] A controller, connected to the alarm, for executing the method as described in any one of the above.

[0058] A computer-readable storage medium stores instructions for being read by a machine to cause the machine to execute the method as described in any one of the above.

[0059] Through the above technical solution, the evaluation method and system for the network security environment of the substation power monitoring system provided by the present invention obtain the device models of various power devices in the network system, as well as the corresponding network information, fluctuation state information, and power state information, calculate the first evaluation value, the second evaluation value, and the third evaluation value of the network system respectively based on these information, and finally obtain the total evaluation result, thereby facilitating the staff to master the security performance of the substation power monitoring system.

[0060] Other features and advantages of the embodiments of the present invention will be described in detail in the subsequent specific implementation section. BRIEF DESCRIPTION OF THE DRAWINGS

[0061] The drawings are used to provide a further understanding of the embodiments of the present invention, and constitute a part of the specification, and are used to explain the embodiments of the present invention together with the following specific implementation manners, but do not constitute a limitation to the embodiments of the present invention. In the drawings:

[0062] Figure 1 is a flowchart of an evaluation method for the network security environment of a substation power monitoring system according to an embodiment of the present invention;

[0063] Figure 2 is a flowchart of the first evaluation value in the evaluation method for the network security environment of a substation power monitoring system according to an embodiment of the present invention;

[0064] Figure 3 is a flowchart of the second evaluation value in the evaluation method for the network security environment of a substation power monitoring system according to an embodiment of the present invention;

[0065] Figure 4 is a flowchart of the third evaluation value in the evaluation method for the network security environment of a substation power monitoring system according to an embodiment of the present invention;

[0066] Figure 5 is a flowchart of the total evaluation result in the evaluation method for the network security environment of a substation power monitoring system according to an embodiment of the present invention;

[0067] Figure 6 is a flowchart of the warning information in the evaluation method for the network security environment of a substation power monitoring system according to an embodiment of the present invention. DETAILED DESCRIPTION OF THE EMBODIMENTS

[0068] The following will describe in detail the specific implementation manners of the embodiments of the present invention with reference to the drawings. It should be understood that the specific implementation manners described herein are only used to illustrate and explain the embodiments of the present invention, and are not used to limit the embodiments of the present invention.

[0069] Figure 1It is a flowchart of a method for evaluating the network security environment of a substation power monitoring system according to an embodiment of the present invention. In Figure 1 it, the evaluation method may include:

[0070] In step S10, obtain the device models of each power device in the network system, the corresponding network information, the fluctuation state information of the network system, and the power state information of the power device. Among them, the device models of each power device in the network system can be collected through the device acquisition module, and the network information of each device model can be obtained from the Internet; secondly, the network fluctuation state information in the network system can be monitored through the network monitoring module; finally, the power state information of the power device in the network system can be collected through the power acquisition module.

[0071] In step S11, determine the first evaluation value of the network system according to the network information. Among them, the data processing module can process the obtained device models of each power device and the corresponding network information and calculate the first evaluation value of the network system, and this first evaluation value can reflect the stability of the network information in the power monitoring system.

[0072] In step S12, determine the second evaluation value of the network system according to the fluctuation state information. Among them, the data processing module can process the obtained fluctuation state information of the network system and calculate the second evaluation value of the network system, and this second evaluation value can reflect the amplitude of network fluctuations in the power monitoring system.

[0073] In step S13, determine the third evaluation value of the network system according to the power state information. Among them, the data processing module can process the obtained power state information of the power device and calculate the third evaluation value of the network system, and this third evaluation value can reflect the smoothness of the power state of the power device in the power monitoring system.

[0074] In step S14, obtain the overall evaluation result according to the first evaluation value, the second evaluation value, and the third evaluation value. Among them, the data processing module can obtain the overall evaluation result from the first evaluation value, the second evaluation value, and the third evaluation value, and this overall evaluation result can reflect the security performance of the power monitoring system, thereby facilitating the staff to master the real-time security of the power monitoring system and take corresponding emergency measures in a timely manner.

[0075] In steps S10 to S14, according to the device models of various power devices in the network system obtained, as well as the corresponding network information, fluctuation state information, and power state information, the data processing module calculates the first evaluation value, the second evaluation value, and the third evaluation value of the network system respectively, and then obtains the overall evaluation result based on the first evaluation value, the second evaluation value, and the third evaluation value. The work can timely grasp the network security status and performance of the power monitoring system according to the overall evaluation result, and can make corresponding processing plans in a timely manner according to the overall evaluation result, thereby improving the stability of the power monitoring system. In the existing power monitoring system, the evaluation algorithm for the network security environment has low security and a relatively single function, and cannot accurately judge the security performance of the power monitoring system, resulting in the inability to accurately monitor the security performance of the power monitoring system, thereby affecting the normal operation of the power monitoring system. In this embodiment of the present invention, the overall evaluation result is obtained from three dimensions of the first evaluation value, the second evaluation value, and the third evaluation value, which can monitor the power monitoring system in multiple aspects, thereby realizing accurate and effective evaluation of the power monitoring system and improving the stability of the power monitoring system.

[0076] In this embodiment of the present invention, in order to calculate the first evaluation value, it is also necessary to process the device models of various power devices and the corresponding network information. Specifically, the evaluation method may include the steps as Figure 2 shown. In Figure 2 , the evaluation method may include:

[0077] In step S20, calculate the theoretical network transmission mean value according to formula (1),

[0078] K 均 =(K max +K min ) / 2, (1)

[0079] wherein, K 均 is the theoretical network transmission mean value, K max is the fastest network transmission speed, and K min is the slowest network transmission speed.

[0080] In step S21, calculate the evaluation difference according to formula (2),

[0081] K 差 =|K 均 -K 预 |, (2)

[0082] wherein, K 预 is the preset evaluation value, and K 差 is the evaluation difference.

[0083] In step S22, it is determined whether the evaluation difference is less than or equal to the error threshold. The evaluation difference is used to determine whether the network transmission speed is stable. By comparing it with the preset evaluation value, it can be obtained whether the network transmission speed is stable.

[0084] In step S23, when it is determined that the evaluation difference is less than or equal to the error threshold, the first evaluation value A1 is output. If the evaluation difference of the network transmission speed is less than or equal to the error threshold, it means that the evaluation difference of the network transmission speed is within the allowable error range, that is, the network transmission speed is stable.

[0085] In step S24, when it is determined that the evaluation difference is greater than the error threshold, the first evaluation value A2 is output. If the evaluation difference of the network transmission speed is greater than the error threshold, it means that the evaluation difference of the network transmission speed exceeds the allowable error range, that is, the network transmission speed is relatively unstable and the power equipment has an abnormal working condition.

[0086] In steps S20 to S24, by calculating the theoretical mean value of network transmission, then calculating the evaluation difference according to the theoretical mean value of network transmission, and comparing the evaluation difference with the error threshold. If the evaluation difference is within the range of the error threshold, it means that the network transmission speed is relatively stable and within the controllable range of the system; if the evaluation difference exceeds the range of the error threshold, it means that the network transmission speed exceeds the controllable range of the system, the network transmission speed is unstable, and then it is determined that the power equipment has an abnormal working condition. At this time, the staff can take corresponding treatment measures according to the specific situation to ensure the normal operation of the power equipment. By comparing the evaluation difference and the error threshold, the working condition of the power equipment can be monitored in real time, and corresponding measures can be taken according to the working condition of the power equipment, so as to ensure the normal operation of the power equipment.

[0087] In this embodiment of the present invention, in order to calculate the second evaluation value, the fluctuation state information also needs to be processed. Specifically, the evaluation method may include as Figure 3 shown in the steps. In Figure 3 , the evaluation method may include:

[0088] In step S30, network speed information is obtained. A fixed time period needs to be preset, and the network speed information is collected once every fixed time period.

[0089] In step S31, it is judged whether the acquisition times is greater than or equal to 3. Herein, the acquisition times represents the collection times. The more the acquisition times are, the more reference values of the available network speed information there are; the fewer the acquisition times are, the fewer reference values of the available network speed information there are. In this embodiment of the present invention, to ensure that there are sufficient reference values of the network speed information to accurately reflect the fluctuation state of the network, the acquisition times of the network speed information is at least 3.

[0090] In step S32, when it is judged that the acquisition times is greater than or equal to 3, a network speed information set is output. Herein, when the collection times of the network speed information is greater than or equal to 3, it indicates that the collection times of the network speed information meets the requirements, and thus the collected network speed information can be summarized and processed.

[0091] In step S33, a network information difference is calculated according to formula (3).

[0092] M x-(x+1) =|M x -M x+1 |, (3)

[0093] Wherein, M x-(x+1) is the network information difference, M x is the value of the x-th network information in the network information set, and M x+1 is the value of the (x + 1)-th network information in the network information set;

[0094] In step S34, each network information difference is traversed to determine the number of network information differences greater than a preset network information threshold. Herein, the network information difference can reflect the fluctuation amplitude and size of the network, that is, it can represent the fluctuation state of the network. To clarify whether the fluctuation of the network is within the controllable range of the system, all the network information differences are compared with the preset network information threshold, and the number of all network information differences greater than the preset network information threshold is determined.

[0095] In step S35, it is judged whether the number is less than 2. Herein, this number can be set according to the actual situation. In this embodiment of the present invention, considering that the number of network information differences is at least 2, it is thus set to judge whether this number is less than 2.

[0096] In step S36, when it is judged that the number is less than 2, a second evaluation value B1 is output. Herein, when this number is less than 2, that is, the number of network information differences greater than the preset network information threshold is less than 2, it indicates that the network fluctuation is within the controllable range of the system.

[0097] In step S37, when it is determined that the quantity is greater than or equal to 2, the second evaluation value B2 is output. Among them, when the quantity is greater than or equal to 2, that is, the quantity of the network information difference greater than the preset network information threshold is greater than or equal to 2, it indicates that the network fluctuation change is too large and has exceeded the controllable range of the system. The fluctuation state of the network is abnormal, and corresponding processing measures need to be taken.

[0098] In steps S30 to S37, the network information difference is calculated according to the obtained network speed information, then the network information difference is compared with the preset network information threshold, and the quantity of the network information difference greater than the preset network information threshold is recorded. If the quantity of the network information difference greater than the preset network information threshold is less than 2, it indicates that the fluctuation state of the network is normal and within the controllable range of the system; if the quantity of the network information difference greater than the preset network information threshold is greater than or equal to 2, it indicates that the fluctuation amplitude of the network is too large and exceeds the controllable range of the system. By comparing the network information difference with the preset network information threshold, the fluctuation state of the network of the system can be monitored in real time, and corresponding measures can be taken according to the fluctuation state of the network, thereby maintaining the stability of the fluctuation state of the network.

[0099] In this embodiment of the present invention, in order to calculate the third evaluation value, the power state information also needs to be processed. Specifically, the evaluation method may include the steps as Figure 4 shown. In Figure 4 , the evaluation method may include:

[0100] In step S40, the voltage information difference is calculated according to formula (4),

[0101] Dz 差 =|D Z -T Z |, (4)

[0102] where Dz 差 is the voltage information difference, D Z is the real-time voltage information, and T Z is the voltage threshold.

[0103] In step S41, the current information difference is calculated according to formula (5),

[0104] Dq 差 =|D q -T q |, (5)

[0105] where Dq 差 is the current information difference, D q is the real-time current information, and T q is the voltage threshold.

[0106] In step S42, it is determined whether the voltage information difference is greater than the first preset voltage value and less than the second preset current value, and whether the current information difference is greater than the first preset current value and less than the second preset current value. Herein, the voltage information difference is used to reflect the voltage state of the system, and the lower limit of the voltage information difference is set as the first preset voltage, and the upper limit of the voltage information difference is set as the second preset voltage to ensure the voltage stability of the system. The current information difference is used to reflect the current state of the system, and the lower limit of the current information difference is set as the first preset current, and the upper limit of the current information difference is set as the second preset current to ensure the voltage stability of the system.

[0107] In step S43, when it is determined that the voltage information difference is greater than the first preset voltage value and less than the second preset current value, and the current information difference is greater than the first preset current value and less than the second preset current value, the third evaluation value C1 is output. Wherein, if both the voltage information difference and the current information difference are within the range of their corresponding lower limit values and upper limit values, it can be illustrated that both the voltage and current of the system are in a stable state.

[0108] In step S44, when it is determined that the voltage information difference is less than or equal to the first preset voltage value, or the voltage information difference is greater than or equal to the second preset current value, or the current information difference is less than or equal to the first preset current value, or greater than or equal to the second preset current value, the third evaluation value C2 is output. Wherein, if the voltage information difference and / or the current information difference are outside the range of their corresponding lower limit values and upper limit values, it indicates that the voltage or current of the system is unstable and there is an abnormal fluctuation situation.

[0109] In steps S40 to S44, the voltage information difference and the current information difference are calculated respectively, and the voltage information difference and the current information difference are respectively compared with their corresponding lower limit values and upper limit values. If both the voltage information difference and the current information difference are within the range of their corresponding lower limit values and upper limit values, it indicates that the voltage and current of the system are relatively stable; if the voltage information difference and / or the current information difference are outside the range of their corresponding lower limit values and upper limit values, it indicates that the voltage or current of the system has an abnormal fluctuation situation. By adopting the method of respectively comparing the voltage information difference and the current information difference with their corresponding lower limit values and upper limit values, the stable states of the voltage and current in the system can be monitored in real time, so that the staff can make corresponding responses according to the real-time states of the voltage and current.

[0110] In this embodiment of the present invention, in order to distinguish different states corresponding to different parameters of the system, the values of the first evaluation value A1, the second evaluation value B1, and the third evaluation value C1 are 1; the values of the first evaluation value A2, the second evaluation value B2, and the third evaluation value C2 are 0.

[0111] In this embodiment of the present invention, in order to obtain the overall evaluation result of the system, it is also necessary to process the first evaluation value, the second evaluation value, and the third evaluation value. Specifically, the evaluation method may include as Figure 5 shown in the steps. In Figure 5 , the evaluation method may include:

[0112] In step S50, an evaluation value set of the first evaluation value, the second evaluation value, and the third evaluation value is obtained. Among them, the first evaluation value (A1 or A2), the second evaluation value (B1 or B2), and the third evaluation value (C1 or C2) obtained from three dimensions respectively are summarized to form an evaluation value set.

[0113] In step S51, it is judged whether the number of evaluation values equal to 1 in the evaluation value set is greater than or equal to 2. Among them, the threshold of the number of evaluation values equal to 1 in the evaluation value set can be set according to the specific situation of the system. In this embodiment of the present invention, considering that the number of parameters of the system in the present invention is 3, the threshold of the number of evaluation values equal to 1 in the evaluation value set is set to 2.

[0114] In step S52, when it is judged that the number of evaluation values equal to 1 in the evaluation value set is greater than or equal to 2, it is determined that the network security environment of the power monitoring system is excellent. Among them, if the number of evaluation values equal to 1 in the evaluation value set is greater than or equal to 2, it means that at least two of the three parameters in the power monitoring system are in a controllable state, that is, it is determined that the network security environment of the power system is excellent.

[0115] In step S53, when it is judged that the number of evaluation values equal to 1 in the evaluation value set is less than 2, it is determined that the network security environment of the power monitoring system is poor. Among them, if the number of evaluation values equal to 1 in the evaluation value set is less than 2, it means that at most only one parameter in the power monitoring system is in a controllable state, that is, it is determined that the network security environment of the power system is poor.

[0116] In steps S50 to S53, the evaluation value set is traversed to determine the number of evaluation values equal to 1 in the evaluation value set, and the number of evaluation values equal to 1 in the evaluation value set is compared with 2. If the number of evaluation values equal to 1 in the evaluation value set is greater than or equal to 2, it is determined that the network security environment of the power system is excellent; if the number of evaluation values equal to 1 in the evaluation value set is less than 2, it is determined that the network security environment of the power system is poor. By traversing the evaluation value set and comparing the number of evaluation values equal to 1 in the evaluation value set with 2, the operating states of the three parameters in the power monitoring system can be determined, and the overall evaluation result can be obtained, which can facilitate the staff to master the security performance of the substation power monitoring system and take corresponding maintenance measures according to the evaluation result.

[0117] In this embodiment of the present invention, the evaluation method may further include:

[0118] When the number of evaluation values equal to 1 in the evaluation value set is less than 2, a warning message is sent and a power monitoring report is generated. Among them, if the number of evaluation values equal to 1 in the evaluation value set is less than 2, it indicates that the network security environment of the power monitoring system is poor, and it is necessary to further analyze and determine the specific problems of the power monitoring system. Therefore, a warning message needs to be sent and a power monitoring report is generated synchronously.

[0119] In this embodiment of the present invention, in order to further refine the problems of the power monitoring system, it is also necessary to divide the warning levels of the power monitoring system. Specifically, the evaluation method may include the steps as Figure 6 shown. In Figure 6 , the evaluation method may include:

[0120] In step S60, it is judged whether the number of evaluation values equal to 1 in the evaluation value set is less than 2. Among them, when the number of evaluation values equal to 1 in the evaluation value set is less than 2, a warning needs to be sent.

[0121] In step S61, in the case where it is judged that the number of evaluation values equal to 1 in the evaluation value set is less than 2, it is judged again whether the number of evaluation values equal to 1 in the evaluation value set is 1. Among them, if the number of evaluation values equal to 1 in the evaluation value set is less than 2, it indicates that the number of evaluation values equal to 1 in the evaluation value set is 1 or 0. In order to determine the number of evaluation values equal to 1 in the evaluation value set, further judgment is required.

[0122] In step S62, when it is judged that the number of evaluation values equal to 1 in the evaluation value set is 1, a minor warning message is sent. Among them, if the number of evaluation values equal to 1 in the evaluation value set is 1, it indicates that one parameter in the power monitoring system is in a stable state, and at this time, a minor warning message can be sent.

[0123] In step S63, when it is judged that the number of evaluation values equal to 1 in the evaluation value set is not 1, a severe warning message is sent. Among them, if the number of evaluation values equal to 1 in the evaluation value set is 0, it indicates that all three parameters in the power monitoring system are in an unstable state, and the power monitoring system is working abnormally. At this time, a severe warning message can be sent.

[0124] In steps S60 to S63, when the number of evaluation values equal to 1 in the set of evaluation values is less than 2, it is determined again whether the number of evaluation values equal to 1 in the set of evaluation values is 1. If the number of evaluation values equal to 1 in the set of evaluation values is 1, it indicates that two parameters in the power monitoring system are in a state of abnormal fluctuation. At this time, a minor warning message can be issued. If the number of evaluation values equal to 1 in the set of evaluation values is not 1, that is, all three parameters in the power monitoring system are in an unstable state, a serious warning message can be issued at this time. By adopting the method of reconfirming the number of evaluation values equal to 1 in the set of evaluation values, the warning level of the power monitoring system can be divided, and then the operator can take different handling methods according to different warning levels.

[0125] On the other hand, the present invention also provides an evaluation system for the network security environment of a substation power monitoring system. Specifically, the evaluation system may further include an alarm and a controller.

[0126] The alarm is used to be activated to issue a warning message; the controller is connected to the alarm and is used to execute any of the above evaluation methods.

[0127] On yet another aspect, the present invention also provides a computer-readable storage medium, which may store instructions for being read by a machine so that the machine executes any of the above methods.

[0128] Through the above technical solutions, the evaluation method and system for the network security environment of the substation power monitoring system provided by the present invention obtain the device models, corresponding network information, fluctuation state information, and power state information of each power device in the network system, and respectively calculate the first evaluation value, the second evaluation value, and the third evaluation value of the network system based on these information, and finally obtain the overall evaluation result, which is convenient for the staff to master the security performance of the substation power monitoring system.

[0129] It should also be noted that the term "comprising", "including" or any other variant thereof is intended to cover non-exclusive inclusion, so that a process, method, commodity or device including a series of elements not only includes those elements, but also includes other elements not explicitly listed, or further includes elements inherent to such process, method, commodity or device. Without further limitation, the element defined by the statement "including one..." does not exclude the existence of another identical element in the process, method, commodity or device including the element.

[0130] The above are only embodiments of the present invention and are not intended to limit the present invention. For those skilled in the art, various modifications and variations can be made to the present invention. Any modification, equivalent replacement, improvement, etc. made within the spirit and principle of the present invention shall be included within the scope of the claims of the present invention.

Claims

1. An evaluation method for the network security environment of a substation power monitoring system, characterized in that, it includes: Obtain the device models of each power device in the network system and the corresponding network information; Obtain the fluctuation state information of the network system; Obtain the power state information of the power device; Determine the first evaluation value of the network system according to the network information; Determine the second evaluation value of the network system according to the fluctuation state information; Determine the third evaluation value of the network system according to the power state information; Obtain the total evaluation result according to the first evaluation value, the second evaluation value and the third evaluation value; Obtaining the device models of each power device in the network system and the corresponding network information includes: Calculate the theoretical mean of network transmission according to formula (1), K 均 = (K max + K min ) / 2, (1) Among them, K 均 is the theoretical mean of network transmission, and K max is the fastest network transmission speed, and K min is the slowest network transmission speed; Calculate the evaluation difference according to formula (2), K 差 = |K 均 -K 预 |, (2) Among them, K 预 is a preset evaluation value, and K 差 is an evaluation difference; Obtaining the fluctuation state information of the network system includes: Obtain network speed information; Judge whether the number of acquisitions is greater than or equal to 3; When it is judged that the number of acquisitions is greater than or equal to 3, output the set of network speed information; Calculate the network information difference according to formula (3), M x-(x+1) = |M x - M x+1 |, (3) Among them, M x-(x+1) is the network information difference value, M x is the value of the x-th network information in the network information set, M x+1 is the value of the (x + 1)-th network information in the network information set; Obtaining the power state information of the power device includes: Calculate the voltage information difference according to formula (4), Dz 差 = |D Z - T Z |, (4) Among them, Dz 差 is the difference in the voltage information, D Z is the real-time voltage information, and T Z is the voltage threshold; Calculate the current information difference according to formula (5), Dq 差 = |D q - T q |, (5) Among them, Dq 差 is the difference in the current information, D q is the real-time current information, and T q is the voltage threshold.

2. The evaluation method according to claim 1, characterized in that, The determining the first evaluation value of the network system according to the network information includes: Judge whether the evaluation difference is less than or equal to the error threshold; When it is judged that the evaluation difference is less than or equal to the error threshold, output the first evaluation value A1; When it is judged that the evaluation difference is greater than the error threshold, output the first evaluation value A2.

3. The evaluation method according to claim 2, characterized in that, The determining the second evaluation value of the network system according to the fluctuation state information includes: Traverse each network information difference, and determine the number of network information differences greater than a preset network information threshold; Judge whether the number is less than 2; When it is judged that the number is less than 2, output the second evaluation value B1; When it is judged that the number is greater than or equal to 2, output the second evaluation value B2.

4. The evaluation method according to claim 3, characterized in that, The determining the third evaluation value of the network system according to the power state information includes: Judge whether the voltage information difference is greater than the first preset voltage value and less than the second preset current value and whether the current information difference is greater than the first preset current value and less than the second preset current value; When it is judged that the voltage information difference is greater than the first preset voltage value and less than the second preset current value and the current information difference is greater than the first preset current value and less than the second preset current value, output the third evaluation value C1; When it is judged that the voltage information difference is less than or equal to the first preset voltage value or the voltage information difference is greater than or equal to the second preset current value or the current information difference is less than or equal to the first preset current value or greater than or equal to the second preset current value, output the third evaluation value C2.

5. The evaluation method according to claim 4, characterized in that, The values of the first evaluation value A1, the second evaluation value B1, and the third evaluation value C1 are 1; the values of the first evaluation value A2, the second evaluation value B2, and the third evaluation value C2 are 0.

6. The evaluation method according to claim 5, wherein, obtaining the overall evaluation result according to the first evaluation value, the second evaluation value, and the third evaluation value includes: obtaining an evaluation value set of the first evaluation value, the second evaluation value, and the third evaluation value; judging whether the number of evaluation values equal to 1 in the evaluation value set is greater than or equal to 2; when it is judged that the number of evaluation values equal to 1 in the evaluation value set is greater than or equal to 2, it is determined that the network security environment of the power monitoring system is excellent; when it is judged that the number of evaluation values equal to 1 in the evaluation value set is less than 2, it is determined that the network security environment of the power monitoring system is poor.

7. The evaluation method according to claim 6, wherein, the evaluation method further includes: when it is judged that the number of evaluation values equal to 1 in the evaluation value set is less than 2, sending a warning message and generating a power monitoring report.

8. The evaluation method according to claim 7, wherein, the evaluation method further includes: when it is judged that the number of evaluation values equal to 1 in the evaluation value set is 1, sending a minor warning message; when it is judged that the number of evaluation values equal to 1 in the evaluation value set is 0, sending a severe warning message.

9. An evaluation system for the network security environment of a substation power monitoring system, wherein, comprising: an alarm for starting to send a warning message; a controller connected to the alarm for executing the method according to any one of claims 1 to 8.

10. A computer-readable storage medium, wherein, the computer-readable storage medium stores instructions for being read by a machine so that the machine executes the method according to any one of claims 1 to 8.

Images