一种基于ATT和CK的新型电力系统构建攻击图的方法及系统

By establishing a conditional random field model based on ATT and CK in the power system, the problems of threat intelligence utilization and attack behavior pattern description are solved, and the accurate identification and effective protection against potential threats to the power system are achieved.

CN117834169BActive Publication Date: 2026-07-17CHINA ELECTRIC POWER RESEARCH INSTITUTE CO LTD +1

Patent Information

Authority / Receiving Office
CN · China
Patent Type
Patents(China)
Current Assignee / Owner
CHINA ELECTRIC POWER RESEARCH INSTITUTE CO LTD
Filing Date
2023-10-16
Publication Date
2026-07-17

AI Technical Summary

Technical Problem

Existing technologies struggle to effectively utilize threat intelligence and ATT and CK knowledge bases to generate accurate power system attack maps, and they also struggle to describe attack behavior patterns and formalize attack paths, making it difficult to effectively address complex power system network threats.

Method used

By collecting power system security data, a conditional random field model is established. The observed events are mapped to ATT and CK techniques or tactics using characteristic functions. The model training is parallelized, the optimal attack tactic sequence is solved, and the attack graph is constructed.

Benefits of technology

It has improved our understanding of and ability to protect against potential threats to new power systems, provided effective security protection and response strategies, and enhanced our ability to warn of and respond to attacks.

✦ Generated by Eureka AI based on patent content.

Smart Images

  • Figure CN117834169B_ABST
    Figure CN117834169B_ABST
Patent Text Reader

Abstract

本发明公开了一种基于ATT和CK的新型电力系统构建攻击图的方法及系统,该方法,包括:收集与新型电力系统安全相关的安全数据,获取观测序列;通过特征函数将观测序列中的每个观测事件映射到相应的ATT和CK技术或战术,并建立条件随机场模型;并行化所述条件随机场模模型训练,更新模型参数;将所述观测序列划分为多个块,求解最优攻击战术序列;根据特征函数和条件随机场模型,对求解得到的最优攻击战术序列进行映射,确定每个攻击战术在ATT和CK模型中的位置;根据每个攻击战术在ATT和CK模型中的位置和最优攻击战术序列,构建攻击图。有助于理解新型电力系统中潜在的安全威胁和可能造成的损失,从而提供有效的安全防护和应对策略。
Need to check novelty before this filing date? Find Prior Art