A lightweight and non-destructive vulnerability detection method and device for power industrial control system

Abstract

The present invention provides a method and device for lightweight and lossless vulnerability troubleshooting of an electric power industrial control system, wherein the method comprises: obtaining a load sequence of a device to be detected, wherein the load sequence includes the load of the device to be detected at different times; obtaining an amplitude-frequency characteristic vector of the load sequence, and calculating the probability of occurrence of each amplitude-frequency characteristic in different time periods according to the amplitude-frequency characteristic vector to form an amplitude-frequency characteristic probability sequence corresponding to each time period; if the amplitude-frequency characteristic probability sequence is a stationary sequence, predicting the load condition in the target time period according to the amplitude-frequency characteristic probability sequence; determining a corresponding lightweight vulnerability troubleshooting strategy in combination with the load condition; and performing vulnerability troubleshooting based on the lightweight vulnerability troubleshooting strategy to obtain a troubleshooting result. In the present invention, the lightweight vulnerability troubleshooting strategy is formulated according to the load condition of the device to be detected. Therefore, when the lightweight vulnerability troubleshooting strategy obtained according to the present invention is used to troubleshoot the device to be detected, the impact on the power system can be reduced to a certain extent.

Description

Technical Field

[0001] The present invention relates to the technical field of vulnerability detection, and in particular to a lightweight and lossless vulnerability troubleshooting method and device for an electric power industrial control system. Background Art

[0002] Conducting risk inspection and timely elimination of hidden dangers in power industrial control systems is a basic work to ensure the safety of power industrial control systems. At present, conventional vulnerability scanning products and methods have a great impact on network bandwidth and system resources, and there are problems such as uncontrollable impact of the scanning process on the system. They are not suitable for the high real-time and high reliability operating environment of power industrial control systems. At present, asset ledger information comparison and manual on-site inspection are mainly used, which have the problems of high risk false alarm rate and large on-site implementation engineering. It is difficult to accurately check the safety hazards of power industrial control system servers, hosts, and power intelligent terminal equipment. There is an urgent need to carry out research on lightweight server, host, and power intelligent terminal equipment security vulnerability detection technology to improve the active discovery capability of server, host, and power intelligent terminal equipment in uncontrolled environments. Summary of the invention

[0003] Therefore, the technical problem to be solved by the present invention is to overcome the defect in the prior art that the vulnerability scanning process has an uncontrollable impact on the system, thereby providing a lightweight and lossless vulnerability detection method and device for an electric power industrial control system.

[0004] The first aspect of the present invention provides a lightweight and lossless vulnerability troubleshooting method for an electric power industrial control system, comprising the following steps: obtaining a load sequence of a device to be detected, the load sequence including the load of the device to be detected at different times; obtaining an amplitude-frequency characteristic vector of the load sequence, and calculating the probability of occurrence of each amplitude-frequency feature in different time periods according to the amplitude-frequency characteristic vector to form an amplitude-frequency characteristic probability sequence corresponding to each time period; if the amplitude-frequency characteristic probability sequence is a stationary sequence, predicting the load condition in the target time period according to the amplitude-frequency characteristic probability sequence; formulating a lightweight vulnerability troubleshooting strategy in combination with the load condition; and performing vulnerability troubleshooting based on the lightweight vulnerability troubleshooting strategy to obtain a troubleshooting result.

[0005] Optionally, in the lightweight and lossless vulnerability troubleshooting method for the electric power industrial control system provided by the present invention, if the amplitude-frequency characteristic probability sequence is not a stationary sequence, the amplitude-frequency characteristic probability sequence is differentially processed to obtain a new amplitude-frequency characteristic probability sequence, and if the amplitude-frequency characteristic probability sequence is a stationary sequence, the step of predicting the load condition within the target time period according to the amplitude-frequency characteristic probability sequence is returned.

[0006] Optionally, the lightweight and lossless vulnerability troubleshooting method for the electric power industrial control system provided by the present invention also includes: calculating the probability mean of each amplitude-frequency feature according to the amplitude-frequency feature probability sequence; calculating the deviation of the occurrence probability of each amplitude-frequency feature in the amplitude-frequency feature probability sequence according to the probability mean; calculating the fluctuation coefficient of the amplitude-frequency feature probability sequence according to the deviation of the occurrence probability of each amplitude-frequency feature in the amplitude-frequency feature probability sequence; determining the stationary condition according to the fluctuation coefficient; if the amplitude-frequency feature probability sequence meets the stationary condition, determining that the amplitude-frequency feature probability sequence is a stationary sequence.

[0007] Optionally, in the lightweight and lossless vulnerability troubleshooting method for the power industrial control system provided by the present invention, the fluctuation coefficient is calculated by the following formula: Where N is the number of time periods, ΔPF j Represents the deviation of the occurrence probability of each amplitude-frequency feature in the amplitude-frequency feature probability sequence corresponding to the jth time period.

[0008] Optionally, in the lightweight and lossless vulnerability troubleshooting method for the power industrial control system provided by the present invention, the load condition within the target time period is predicted by the following formula: in, represents the probability mean of each amplitude-frequency feature in the amplitude-frequency feature probability sequence corresponding to the jth time period, n represents the prediction step length, PF M represents the amplitude-frequency characteristic probability sequence corresponding to the Mth time period, PF M-n It represents the amplitude-frequency characteristic probability sequence corresponding to the Mnth time period, and S represents the fluctuation coefficient.

[0009] Optionally, in the lightweight and lossless vulnerability troubleshooting method for the electric power industrial control system provided by the present invention, a lightweight vulnerability troubleshooting strategy is formulated in combination with the load conditions, including: determining one or more of the vulnerability scanning time period, vulnerability scanning frequency, network concurrency number and detection depth in combination with the load conditions within the target time period to form a lightweight vulnerability troubleshooting strategy.

[0010] Optionally, in the lightweight and lossless vulnerability troubleshooting method for the electric power industrial control system provided by the present invention, Fourier transform is used to obtain the amplitude-frequency characteristic vector of the load sequence.

[0011] The second aspect of the present invention provides a lightweight and lossless vulnerability troubleshooting device for an electric power industrial control system, comprising: a load acquisition module, used to obtain a load sequence of a device to be detected, the load sequence including the load of the device to be detected at different times; an amplitude-frequency characteristic probability calculation module, used to obtain an amplitude-frequency characteristic vector of the load sequence, and calculate the probability of occurrence of each amplitude-frequency characteristic in different time periods according to the amplitude-frequency characteristic vector to form an amplitude-frequency characteristic probability sequence corresponding to each time period; a load prediction module, if the amplitude-frequency characteristic probability sequence is a stationary sequence, the load prediction module is used to predict the load condition in a target time period according to the amplitude-frequency characteristic probability sequence; a troubleshooting strategy determination module, used to determine a corresponding lightweight vulnerability troubleshooting strategy in combination with the load condition; a troubleshooting module, used to perform vulnerability troubleshooting based on the lightweight vulnerability troubleshooting strategy to obtain a troubleshooting result.

[0012] The third aspect of the present invention provides a computer device, comprising: at least one processor; and a memory communicatively connected to the at least one processor; wherein the memory stores instructions executable by the at least one processor, and the instructions are executed by the at least one processor, thereby executing the lightweight and lossless vulnerability troubleshooting method for the electric power industrial control system provided in the first aspect of the present invention.

[0013] A fourth aspect of the present invention provides a computer-readable storage medium storing computer instructions for enabling a computer to execute a lightweight and lossless vulnerability troubleshooting method for an electric power industrial control system as provided in the first aspect of the present invention.

[0014] The technical solution of the present invention has the following advantages:

[0015] The lightweight non-destructive vulnerability detection method and device for the electric power industrial control system provided by the present invention first obtain the load sequence of the equipment to be detected before performing vulnerability detection on the equipment to be detected, and calculate the amplitude-frequency characteristic probability sequence of each time period, and predict the load condition of the equipment to be detected in the target time period according to the amplitude-frequency probability characteristic sequence, and finally formulate a lightweight vulnerability detection strategy according to the load condition. In the method provided by the present invention, the lightweight vulnerability detection strategy is formulated according to the load condition of the equipment to be detected. Therefore, when the lightweight vulnerability detection strategy obtained according to the present invention is used to perform vulnerability detection on the equipment to be detected, the impact on the power system can be reduced to a certain extent. BRIEF DESCRIPTION OF THE DRAWINGS

[0016] In order to more clearly illustrate the specific implementation methods of the present invention or the technical solutions in the prior art, the drawings required for use in the specific implementation methods or the description of the prior art will be briefly introduced below. Obviously, the drawings described below are some implementation methods of the present invention. For ordinary technicians in this field, other drawings can be obtained based on these drawings without paying creative work.

[0017] Figure 1 It is a flowchart of a specific example of a lightweight and lossless vulnerability troubleshooting method for an electric power industrial control system according to an embodiment of the present invention;

[0018] Figure 2 It is a principle block diagram of a specific example of a lightweight and lossless vulnerability troubleshooting device for an electric power industrial control system in an embodiment of the present invention;

[0019] Figure 3 The present invention is a block diagram of a specific example of a computer device provided in an embodiment of the present invention. DETAILED DESCRIPTION

[0020] The technical solution of the present invention will be described clearly and completely below in conjunction with the accompanying drawings. Obviously, the described embodiments are only part of the embodiments of the present invention, not all of the embodiments. Based on the embodiments of the present invention, all other embodiments obtained by ordinary technicians in this field without creative work are within the scope of protection of the present invention.

[0021] In the description of the present invention, it should be noted that the technical features involved in the different embodiments of the present invention described below can be combined with each other as long as there is no conflict between them.

[0022] The embodiment of the present invention provides a lightweight and lossless vulnerability troubleshooting method for an electric power industrial control system. Figure 1 As shown, the following steps are included:

[0023] Step S11: Obtain a load sequence of the device to be detected, where the load sequence includes the load of the device to be detected at different times.

[0024] In an optional embodiment, the device to be detected may be a network, a server, a host, a power intelligent terminal, etc.

[0025] In an optional embodiment, a load sequence of the device to be detected is obtained with a day as a statistical unit, and the load sequence includes loads at multiple times in a day.

[0026] In the embodiment of the present invention, the load of the device to be detected at different times is obtained through the device to be detected, and the relationship between the load of the device to be detected and time can be analyzed to predict the load of the device to be detected.

[0027] Step S12: Obtain the amplitude-frequency characteristic vector of the load sequence, calculate the occurrence probability of each amplitude-frequency characteristic in different time periods according to the amplitude-frequency characteristic vector, and form an amplitude-frequency characteristic probability sequence corresponding to each time period. If the amplitude-frequency characteristic probability sequence is a stationary sequence, execute step S13; if the amplitude-frequency characteristic probability sequence is not a stationary sequence, execute step S15.

[0028] In an optional embodiment, Fourier transform is used to obtain the amplitude-frequency characteristic F of the Fourier change. i (i=1,2,…,n), where n represents the number of features.

[0029] The amplitude-frequency characteristic probability sequence corresponding to each time period is: PF j =[P F1 ,P F2 ,…,P Fn ](j=1,2,…,N).

[0030] In an optional embodiment, when analyzing the load sequence, in addition to the amplitude-frequency characteristics, the wavelet transform method can also be used to obtain the low-frequency characteristics D of the wavelet transform. i (i=1,2,…,m), where m represents the number of features.

[0031] Step S13: predicting the load condition within the target time period according to the amplitude-frequency characteristic probability sequence.

[0032] Step S14: Determine a corresponding lightweight vulnerability troubleshooting strategy based on the load condition.

[0033] In an optional embodiment, pre-defined lightweight vulnerability troubleshooting strategies corresponding to different load conditions may be written into a database table, and after the load condition is determined, the corresponding lightweight vulnerability troubleshooting strategy may be determined by searching the database table.

[0034] Step S15: Perform vulnerability detection based on the lightweight vulnerability detection strategy to obtain detection results.

[0035] In the embodiment of the present invention, after the lightweight vulnerability troubleshooting strategy is determined, the lightweight vulnerability troubleshooting strategy is executed to perform vulnerability troubleshooting and obtain a troubleshooting result.

[0036] In the lightweight and lossless vulnerability troubleshooting method for the electric power industrial control system provided in the embodiment of the present invention, before performing vulnerability detection on the device to be detected, the load sequence of the device to be detected is first obtained, and the amplitude-frequency characteristic probability sequence of each time period is calculated. The load condition of the device to be detected in the target time period is predicted according to the amplitude-frequency probability characteristic sequence, and finally a lightweight vulnerability troubleshooting strategy is formulated according to the load condition. In the method provided in the embodiment of the present invention, the lightweight vulnerability troubleshooting strategy is formulated according to the load condition of the device to be detected. Therefore, when the lightweight vulnerability troubleshooting strategy obtained according to the embodiment of the present invention is used to troubleshoot the device to be detected, the impact on the power system can be reduced to a certain extent.

[0037] In an optional embodiment, for different devices to be detected, the measured load is different. For example, if the device to be detected is a server, the measured load includes CPU occupancy, memory usage and network port occupancy. The relationship vector between the server load and time is L s(t) = [L s1 (t),L s2 (t),L s3 (t)], the amplitude-frequency characteristic vector F and the low-frequency characteristic vector D are:

[0038]

[0039]

[0040] The probability vector PF of all amplitude-frequency characteristics occurring in the jth time period j And the probability vector PD of all wavelet features j They are:

[0041]

[0042]

[0043] In an optional embodiment, after executing the above step S12, it is first determined whether the amplitude-frequency characteristic probability sequence is a stationary sequence. The step of determining whether the amplitude-frequency characteristic probability sequence is a stationary sequence specifically includes:

[0044] First, the probability mean of each amplitude-frequency feature is calculated according to the amplitude-frequency feature probability sequence, that is, PF is calculated j The mean of (j=1,2,…,N)

[0045] Secondly, the deviation of the occurrence probability of each amplitude-frequency feature in the amplitude-frequency feature probability sequence is calculated based on the probability mean:

[0046] Then, the fluctuation coefficient of the amplitude-frequency characteristic probability sequence is calculated according to the deviation of the occurrence probability of each amplitude-frequency characteristic in the amplitude-frequency characteristic probability sequence, and the stationary condition is determined according to the fluctuation coefficient.

[0047] In an optional embodiment, the fluctuation coefficient of the amplitude-frequency characteristic probability sequence is:

[0048] If the amplitude-frequency characteristic probability sequence meets the stationary condition, the amplitude-frequency characteristic probability sequence is determined to be a stationary sequence.

[0049] In an alternative embodiment, when ΔPF j If there are elements in (j=1,2,…,N) greater than 2S, the amplitude-frequency characteristic probability sequence is determined to be a non-stationary sequence, otherwise the amplitude-frequency characteristic probability sequence is determined to be a stationary sequence.

[0050] In an alternative embodiment, if Figure 1As shown, if the amplitude-frequency characteristic probability sequence is determined to be a non-stationary sequence, step S15 is executed: the amplitude-frequency characteristic probability sequence is subjected to differential processing to obtain a new amplitude-frequency characteristic probability sequence PF j ′=PF j+1 -PF j (j=1,2,…,N), and return to the above step S12.

[0051] In an optional embodiment, in the above step S13, the load condition within the target time period is predicted by the following formula:

[0052]

[0053] in, represents the probability mean of each amplitude-frequency feature in the amplitude-frequency feature probability sequence corresponding to the jth time period, n represents the prediction step length, PF M represents the amplitude-frequency characteristic probability sequence corresponding to the Mth time period, PF M-n It represents the amplitude-frequency characteristic probability sequence corresponding to the Mnth time period, and S represents the fluctuation coefficient.

[0054] The embodiments of the present invention can obtain prediction results of different time dimensions within the same day.

[0055] In an optional embodiment, the above step S14 specifically includes:

[0056] Combined with the load conditions within the target time period, determine one or more of the vulnerability scanning time period, vulnerability scanning frequency, network concurrency number and detection depth to form a lightweight vulnerability detection strategy.

[0057] In an optional embodiment, when determining the vulnerability scanning time period according to the load conditions in different time periods, the time period with a smaller load may be determined as the vulnerability scanning time period.

[0058] In an optional embodiment, when determining the vulnerability scanning frequency according to the load condition in the target time period, if the load in the target time period is large, a smaller scanning frequency may be set.

[0059] In an optional embodiment, when determining the number of network concurrency based on the load condition in the target time period, if the load in the target time period is large, a smaller number of network concurrency can be set.

[0060] In an optional embodiment, when determining the detection depth according to the load condition in the target time period, if the load in the target time period is large, a smaller detection depth may be set.

[0061] The embodiment of the present invention provides a lightweight and non-destructive vulnerability detection device for an electric power industrial control system. Figure 2 As shown, including:

[0062] The load acquisition module 21 is used to obtain the load sequence of the device to be detected, and the load sequence includes the load of the device to be detected at different times. For details, please refer to the description of step S11 in the above embodiment, which will not be repeated here.

[0063] The amplitude-frequency characteristic probability calculation module 22 is used to obtain the amplitude-frequency characteristic vector of the load sequence, calculate the occurrence probability of each amplitude-frequency characteristic in different time periods according to the amplitude-frequency characteristic vector, and form an amplitude-frequency characteristic probability sequence corresponding to each time period. For details, please refer to the description of step S12 in the above embodiment, which will not be repeated here.

[0064] The load prediction module 23, if the amplitude-frequency characteristic probability sequence is a stationary sequence, the load prediction module 23 is used to predict the load status within the target time period according to the amplitude-frequency characteristic probability sequence. For details, please refer to the description of step S13 in the above embodiment, which will not be repeated here.

[0065] The troubleshooting strategy determination module 24 is used to determine the corresponding lightweight vulnerability troubleshooting strategy in combination with the load condition. For details, please refer to the description of step S14 in the above embodiment, which will not be repeated here.

[0066] The troubleshooting module 25 is used to perform vulnerability troubleshooting based on the lightweight vulnerability troubleshooting strategy to obtain a troubleshooting result. For details, please refer to the description of step S15 in the above embodiment, which will not be repeated here.

[0067] An embodiment of the present invention provides a computer device, such as Figure 3 As shown, the computer device mainly includes one or more processors 31 and a memory 32. Figure 3 A processor 31 is taken as an example.

[0068] The computer device may further include: an input device 33 and an output device 34 .

[0069] The processor 31, the memory 32, the input device 33 and the output device 34 may be connected via a bus or other means. Figure 3 The example of connecting through bus is taken in the following.

[0070] The processor 31 may be a central processing unit (CPU). The processor 31 may also be other general-purpose processors, digital signal processors (DSP), application-specific integrated circuits (ASIC), field-programmable gate arrays (FPGA) or other programmable logic devices, discrete gates or transistor logic devices, discrete hardware components, or a combination of the above chips. The general-purpose processor may be a microprocessor or the processor may be any conventional processor, etc. The memory 32 may include a program storage area and a data storage area, wherein the program storage area may store an operating system, an application required for at least one function; the data storage area may store data created according to the use of the lightweight and lossless vulnerability troubleshooting device for the power industrial control system, etc. In addition, the memory 32 may include a high-speed random access memory, and may also include a non-transitory memory, such as at least one disk storage device, a flash memory device, or other non-transitory solid-state storage device. In some embodiments, the memory 32 may optionally include a memory remotely arranged relative to the processor 31, and these remote memories may be connected to the lightweight and lossless vulnerability troubleshooting device for the power industrial control system via a network. The input device 33 can receive the calculation request (or other digital or character information) input by the user, and generate key signal input related to the lightweight non-destructive vulnerability troubleshooting device for the power industrial control system. The output device 34 can include a display device such as a display screen to output the calculation result.

[0071] The embodiment of the present invention provides a computer-readable storage medium, which stores computer instructions, and the computer storage medium stores computer executable instructions, which can execute the lightweight and lossless vulnerability troubleshooting method of the power industrial control system in any of the above method embodiments. Among them, the storage medium can be a disk, an optical disk, a read-only memory (ROM), a random access memory (RAM), a flash memory, a hard disk (HDD) or a solid-state drive (SSD), etc.; the storage medium can also include a combination of the above types of memory.

[0072] Obviously, the above embodiments are merely examples for the purpose of clear explanation, and are not intended to limit the implementation methods. For those skilled in the art, other different forms of changes or modifications can be made based on the above description. It is not necessary and impossible to list all the implementation methods here. The obvious changes or modifications derived therefrom are still within the scope of protection of the invention.

Claims

1. A lightweight and lossless vulnerability troubleshooting method for an electric power industrial control system, characterized in that: The steps include: Acquire a load sequence of the device to be detected, wherein the load sequence includes the load of the device to be detected at different times; Acquire the amplitude-frequency characteristic vector of the load sequence, calculate the occurrence probability of each amplitude-frequency characteristic in different time periods according to the amplitude-frequency characteristic vector, and form an amplitude-frequency characteristic probability sequence corresponding to each time period; If the amplitude-frequency characteristic probability sequence is a stationary sequence, predicting the load condition within the target time period according to the amplitude-frequency characteristic probability sequence; Determine a corresponding lightweight vulnerability troubleshooting strategy based on the load condition; Perform vulnerability troubleshooting based on the lightweight vulnerability troubleshooting strategy to obtain a troubleshooting result; The load condition within the target time period is predicted by the following formula: in, represents the probability mean of each amplitude-frequency feature in the amplitude-frequency feature probability sequence corresponding to the jth time period, n represents the prediction step length, PF M represents the amplitude-frequency characteristic probability sequence corresponding to the Mth time period, PF M-n represents the amplitude-frequency characteristic probability sequence corresponding to the Mnth time period, and S represents the fluctuation coefficient; Develop a lightweight vulnerability troubleshooting strategy based on the load conditions, including: In combination with the load conditions within the target time period, one or more of the vulnerability scanning time period, vulnerability scanning frequency, network concurrency number and detection depth are determined to form a lightweight vulnerability investigation strategy.

2. The method for lightweight and lossless vulnerability detection of electric power industrial control systems according to claim 1 is characterized in that: If the amplitude-frequency characteristic probability sequence is not a stationary sequence, Performing differential processing on the amplitude-frequency characteristic probability sequence to obtain a new amplitude-frequency characteristic probability sequence, and returning to the step of predicting the load condition within the target time period according to the amplitude-frequency characteristic probability sequence if the amplitude-frequency characteristic probability sequence is a stationary sequence.

3. The lightweight and lossless vulnerability troubleshooting method for electric power industrial control system according to claim 1 is characterized in that: Also includes: Calculating the probability mean of each amplitude-frequency feature according to the amplitude-frequency feature probability sequence; Calculating the deviation of the occurrence probability of each amplitude-frequency feature in the amplitude-frequency feature probability sequence according to the probability mean; Calculating the fluctuation coefficient of the amplitude-frequency feature probability sequence according to the deviation of the occurrence probability of each amplitude-frequency feature in the amplitude-frequency feature probability sequence; determining a stationary condition based on the fluctuation coefficient; If the amplitude-frequency characteristic probability sequence meets the stationary condition, the amplitude-frequency characteristic probability sequence is determined to be a stationary sequence.

4. The method for lightweight and lossless vulnerability detection of electric power industrial control system according to claim 3 is characterized in that: The volatility coefficient is calculated using the following formula: Where N is the number of time periods, ΔPF j Represents the deviation of the occurrence probability of each amplitude-frequency feature in the amplitude-frequency feature probability sequence corresponding to the jth time period.

5. The lightweight and lossless vulnerability troubleshooting method for electric power industrial control system according to claim 1 is characterized in that: Fourier transform is used to obtain the amplitude-frequency characteristic vector of the load sequence.

6. A lightweight and non-destructive vulnerability detection device for an electric power industrial control system, characterized in that: include: A load acquisition module, used to obtain a load sequence of the device to be detected, wherein the load sequence includes the load of the device to be detected at different times; An amplitude-frequency characteristic probability calculation module is used to obtain the amplitude-frequency characteristic vector of the load sequence, calculate the occurrence probability of each amplitude-frequency characteristic in different time periods according to the amplitude-frequency characteristic vector, and form an amplitude-frequency characteristic probability sequence corresponding to each time period; A load prediction module, if the amplitude-frequency characteristic probability sequence is a stationary sequence, the load prediction module is used to predict the load condition within a target time period according to the amplitude-frequency characteristic probability sequence; A troubleshooting strategy determination module, used to determine a corresponding lightweight vulnerability troubleshooting strategy in combination with the load condition; A troubleshooting module, used to perform vulnerability troubleshooting based on the lightweight vulnerability troubleshooting strategy and obtain troubleshooting results; The load condition within the target time period is predicted by the following formula: in, represents the probability mean of each amplitude-frequency feature in the amplitude-frequency feature probability sequence corresponding to the jth time period, n represents the prediction step length, PF M represents the amplitude-frequency characteristic probability sequence corresponding to the Mth time period, PF M-n represents the amplitude-frequency characteristic probability sequence corresponding to the Mnth time period, and S represents the fluctuation coefficient; Develop a lightweight vulnerability troubleshooting strategy based on the load conditions, including: In combination with the load conditions within the target time period, one or more of the vulnerability scanning time period, vulnerability scanning frequency, network concurrency number and detection depth are determined to form a lightweight vulnerability investigation strategy.

7. A computer device, characterized in that: include: at least one processor; And a memory communicatively connected to the at least one processor; wherein the memory stores instructions executable by the at least one processor, and the instructions are executed by the at least one processor, thereby executing the lightweight and lossless vulnerability troubleshooting method for the electric power industrial control system as described in any one of claims 1-5.

8. A computer-readable storage medium, characterized in that: The computer-readable storage medium stores computer instructions, and the computer instructions are used to enable the computer to execute the lightweight and lossless vulnerability troubleshooting method for the electric power industrial control system according to any one of claims 1 to 5.

Images