A power information system security testing system and method

Abstract

The invention discloses a power information system security testing system and method, and relates to the field of power safety technology. The system of the invention comprises a power information acquisition module, a vulnerability scanning and analysis module, an attack mode prediction module, a vulnerability attack testing module, a system security testing module and a control terminal. A corresponding virtual power information system is built through virtualization technology to perform corresponding penetration testing. First, a vulnerability scan is performed to determine whether there are vulnerabilities in the power information system, and then the corresponding vulnerability attack mode of the hacker is predicted. Vulnerability test groups and data test groups are set to obtain the evaluation coefficients corresponding to the test groups through testing, and the evaluation coefficients of the test groups are added to obtain the attack evaluation coefficients. The corresponding security of the power information system is determined, so as to realize multi-faceted security testing of the power information system and effectively ensure the corresponding security of the power information system.

Description

Technical Field

[0001] The present invention relates to the technical field of electric power safety, and in particular to a power information system safety testing system and method. Background Art

[0002] Electricity is an indispensable application in today's era, and the power information system is the key to supervising the entire power operation. Therefore, testing the security of the power information system is crucial so that electricity can be operated and applied smoothly and safely. By conducting security tests on power information system vulnerabilities and power information systems respectively, we can achieve multi-faceted security testing to ensure the security of the power information system, reduce the risk of attacks on the power information system, and maintain the normal operation of the power information system.

[0003] The current technology for testing power information systems is relatively superficial and does not conduct security tests from multiple perspectives. It is unable to guarantee the safe operation of the power information system and the safe storage of power information system data. At the same time, since it is impossible to detect vulnerabilities in the power information system in a timely manner, it is impossible to repair the vulnerabilities in a timely and effective manner, which will greatly increase the risk of power information systems being invaded and increase maintenance and operating costs. Summary of the invention

[0004] In view of the above-mentioned technical deficiencies, an object of the present invention is to provide a power information system security testing system and method.

[0005] In order to solve the above technical problems, the present invention adopts the following technical solutions: The present invention provides a power information system security testing system, including: a power information acquisition module, used to obtain basic information corresponding to the power information system, wherein the basic information includes IP address, open ports, service version, and build a corresponding virtual power information system through virtualization technology to perform corresponding security tests.

[0006] The vulnerability scanning and analysis module is used to perform vulnerability scanning on the virtual power information system. The vulnerability scanning tool is used to scan various parts of the virtual power information system to determine whether there are vulnerabilities in the virtual power information system.

[0007] The attack method prediction module is used to predict the corresponding attack method of the hacker when there is a vulnerability in the virtual power information system.

[0008] The vulnerability attack test module is used to set up various vulnerability test groups when the corresponding vulnerability attack method of the hacker is predicted, use virtualization technology to perform attack tests on each vulnerability test group, and collect the attack test information corresponding to each vulnerability test group, where the attack test information includes the usage rate of the attack method and the attack speed, and then test to obtain the attack assessment coefficient corresponding to each vulnerability test group.

[0009] The system security test module is used to set up each data test group, use virtualization technology to perform attack tests on each data test group, and collect attack test information corresponding to each data test group, where the attack test information includes attack duration and attack success rate, and then test to obtain the attack assessment coefficient corresponding to each data test group, and calculate the attack assessment coefficient corresponding to the power information system based on the attack assessment coefficient corresponding to each vulnerability test group, and judge the corresponding security of the power information system.

[0010] The control terminal is used to issue early warning prompts when there are loopholes in the virtual power information system or when the power information system is unsafe.

[0011] In a second aspect, the present invention provides a method for testing the security of an electric power information system, comprising: step one, electric power information collection: obtaining basic information corresponding to the electric power information system, and building a corresponding virtual electric power information system through virtualization technology, so as to perform corresponding security testing.

[0012] Step 2: Vulnerability scanning and analysis: Perform vulnerability scanning on the virtual power information system to determine whether there are vulnerabilities in the virtual power information system.

[0013] Step 3: Attack method prediction: When there is a vulnerability in the virtual power information system, the corresponding attack method of the hacker is predicted.

[0014] Step 4: Vulnerability attack test: Set up each vulnerability test group, collect the attack test information corresponding to each vulnerability test group, and then test to obtain the attack assessment coefficient corresponding to each vulnerability test group.

[0015] Step 5. System security test: Set up each data test group and collect the attack test information corresponding to each data test group, and then test to obtain the attack assessment coefficient corresponding to each data test group, and calculate the corresponding attack assessment coefficient of the power information system according to the attack assessment coefficient corresponding to each vulnerability test group, and judge the corresponding security of the power information system.

[0016] Step 6: Test control: Issue early warning when there are loopholes in the virtual power information system or when the power information system is unsafe.

[0017] Compared with the prior art, the beneficial effects of the present invention are as follows: the present invention provides a power information system security testing system and method, and a corresponding virtual power information system is built through virtualization technology to perform corresponding security tests, firstly, vulnerability scanning is performed to determine whether there are vulnerabilities in the power information system, and then the corresponding vulnerability attack mode of the hacker is predicted, and each vulnerability test group and each data test group are set, and the attack assessment coefficient corresponding to each vulnerability test group and the data attack assessment coefficient corresponding to each data test group are tested, and then the coefficients are added to obtain the attack assessment coefficient corresponding to the power information system, and the corresponding security of the power information system is determined, so as to realize multi-faceted security testing of the power information system, effectively ensure the corresponding security of the power information system, solve the deficiencies existing in the current technology, and timely discover the security vulnerabilities and weaknesses existing in the power information system through the power information system security test, effectively identify potential security risks and threats, and realize rapid vulnerability patching and security prevention, thereby reducing the risk rate of the power information system being invaded, and the power information system involves a large amount of key information and data, so as to ensure the safe storage of data and effectively ensure the security of the power information system. BRIEF DESCRIPTION OF THE DRAWINGS

[0018] In order to more clearly illustrate the embodiments of the present invention or the technical solutions in the prior art, the drawings required for use in the embodiments or the description of the prior art will be briefly introduced below. Obviously, the drawings described below are only some embodiments of the present invention. For ordinary technicians in this field, other drawings can be obtained based on these drawings without paying creative work.

[0019] Figure 1 It is a schematic diagram of the system structure connection of the present invention.

[0020] Figure 2 The present invention is a schematic flow chart of the steps for implementing the method. DETAILED DESCRIPTION

[0021] The following will be combined with the drawings in the embodiments of the present invention to clearly and completely describe the technical solutions in the embodiments of the present invention. Obviously, the described embodiments are only part of the embodiments of the present invention, not all of the embodiments. Based on the embodiments of the present invention, all other embodiments obtained by ordinary technicians in this field without creative work are within the scope of protection of the present invention.

[0022] See also Figure 1 As shown, the present invention provides a power information system security testing system in a first aspect, including a power information acquisition module, a vulnerability scanning and analysis module, an attack mode prediction module, a vulnerability attack testing module, a system security testing module and a control terminal.

[0023] The vulnerability scanning and analysis module is connected to the vulnerability scanning and analysis module and the attack mode prediction module respectively, and the vulnerability attack test module is connected to the system security test module and the control terminal respectively.

[0024] The power information collection module is used to obtain the basic information corresponding to the power information system, including IP address, open ports, service version, and build the corresponding virtual power information system through virtualization technology to perform corresponding security tests.

[0025] It should be noted that the basic information corresponding to the virtual power information system is obtained through network scanning tools, including Nmap, Masscan, etc. The network scanning tools can quickly scan the target network corresponding to the power information system, and then obtain the host's IP address and open port information, and identify the services and service versions running on the port.

[0026] The vulnerability scanning and analysis module is used to perform vulnerability scanning on the virtual power information system. The vulnerability scanning tool is used to scan various parts of the virtual power information system to determine whether there are vulnerabilities in the virtual power information system.

[0027] It should be noted that vulnerability scanning tools include Nessus, OpenVAS, Nexpose, Acunetix, etc.

[0028] As an optional implementation method, the determination of whether the virtual power information system has vulnerabilities is carried out as follows: a vulnerability scanning tool is used to scan various locations of the constructed virtual power information system, and the status of each data corresponding to the virtual power information system is obtained by scanning with the vulnerability scanning tool, and each data status obtained by the scan is compared with each preset data status. If a data status obtained by the scan is different from a preset data status, it is determined that there is a vulnerability in the power information system. If the data status obtained by the scan is the same as the preset data status, it is determined that there is no vulnerability in the power information system, thereby determining whether the virtual power information system has a vulnerability.

[0029] The attack method prediction module is used to predict the corresponding attack method of the hacker when there is a vulnerability in the virtual power information system.

[0030] It should be noted that vulnerability types include operating system vulnerabilities, application vulnerabilities, configuration vulnerabilities, etc. Specific vulnerability types include remote code execution vulnerabilities, SQL injection vulnerabilities, file inclusion vulnerabilities, cross-site scripting vulnerabilities, denial of service vulnerabilities, etc. The attack methods of each vulnerability include remote code execution, SQL injection attacks, XSS attacks, CSRF attacks, directory traversal attacks, buffer overflow attacks, etc.

[0031] As an optional implementation method, the prediction obtains the corresponding vulnerability attack method of the hacker, and the specific prediction process is as follows: according to the vulnerability report generated by scanning the corresponding data of the power information system with the vulnerability scanning tool, the type of each vulnerability corresponding to the virtual power information system is obtained, and the type of each vulnerability corresponding to the virtual power information system is compared with the historical vulnerability type corresponding to each attack method stored in the database. If the type of a vulnerability corresponding to the virtual power information system is the same as a historical vulnerability type corresponding to a certain attack method stored in the database, then the attack method corresponding to the historical vulnerability type is used as the attack method of the virtual power information system corresponding to the vulnerability type.

[0032] The vulnerability attack test module is used to set up various vulnerability test groups when the corresponding vulnerability attack method of the hacker is predicted, use virtualization technology to perform attack tests on each vulnerability test group, and collect the attack test information corresponding to each vulnerability test group, where the attack test information includes the usage rate of the attack method and the attack speed, and then test to obtain the attack assessment coefficient corresponding to each vulnerability test group.

[0033] It should be noted that, according to the total number of attack methods and the number of attack methods used corresponding to each vulnerability test group, the percentage calculation formula is used to divide the number of attack methods used by the total number of attack methods and multiply the result by 100% to obtain the attack method utilization rate. According to the number of vulnerabilities and the attack time corresponding to each vulnerability test group, the calculation formula is used to divide the number of vulnerabilities by the attack time to obtain the attack speed.

[0034] As an optional implementation method, the penetration test of each vulnerability test group is carried out, and the specific test process is as follows: P1. According to the vulnerability reports detected by the virtual power information system, the vulnerability level differences are preset, and the vulnerability level differences are arranged in order from small to large, and corresponding vulnerability test groups are set. And penetration testing is carried out in the constructed virtual power information system to simulate hackers attacking each vulnerability test group.

[0035] P2. According to the vulnerability level corresponding to the virtual power information system, the corresponding simulated hacker vulnerability attacks are gradually carried out, and the attack priority order of each vulnerability attack method is arranged according to the attack speed of each vulnerability attack method. By using each attack method for each vulnerability in the simulated hacker vulnerability attack, when the first-ranked attack method fails, the second-ranked attack method is used, and this method is used until the vulnerability is successfully attacked.

[0036] P3. When the simulated hacker attacks each vulnerability test group and all attack methods fail, stop the penetration test of simulating the hacker to attack each vulnerability test group, and collect the attack test information corresponding to each vulnerability test group. After the collection is completed, end the vulnerability test.

[0037] As an optional implementation, the test obtains the attack assessment coefficient corresponding to each vulnerability test group. The specific test process is as follows: By calculating the formula , the test results are The corresponding attack assessment coefficient of the vulnerability test group , is the number of each vulnerability test group, , is any integer greater than 2, is the usage rate of the reference attack method set, is the reference attack speed, For the The usage rate of attack methods corresponding to the vulnerability test groups, For the The attack speed corresponding to the vulnerability test group, , They are the weight factors of the usage rate of the attack method and the weight factors of the attack speed, respectively. , .

[0038] It should also be noted that the weight factors of the attack method utilization rate and the attack speed are obtained through principal component analysis. The information of the attack method utilization rate and the attack speed is first condensed, and then the corresponding variance explanation rate is obtained, and then divided by the variance explanation rate to get the corresponding weight.

[0039] It is important to note again that information condensation refers to condensing multiple analysis items into several key summary indicators, and the variance explanation rate refers to the contribution of each principal component or factor to the overall variance, usually expressed as a percentage, indicating how much information the factor contains about the original data.

[0040] The system security test module is used to set up each data test group, use virtualization technology to perform attack tests on each data test group, and collect attack test information corresponding to each data test group, where the attack test information includes attack duration and attack success rate, and then test to obtain the attack assessment coefficient corresponding to each data test group, and calculate the attack assessment coefficient corresponding to the power information system based on the attack assessment coefficient corresponding to each vulnerability test group, and judge the corresponding security of the power information system.

[0041] It should be noted that, according to the data quantity and the breaking speed corresponding to each data test group, the breaking time is obtained by dividing the data quantity by the breaking speed through the calculation formula, and according to the breaking quantity and the breaking number corresponding to each data test group, the percentage calculation formula is used to divide the breaking number by the breaking number and multiply it by 100% to obtain the breaking success rate.

[0042] As an optional implementation method, the attack test of each data test group is performed, and the specific test process is as follows: A1. According to the data level corresponding to the power information system, the data level difference is preset, and the data level difference is arranged in order from small to large, and the corresponding data test groups are set. And a penetration test is performed in the constructed power information system, and a simulation of hackers attacking each data test group is started.

[0043] A2. According to the data level corresponding to the virtual power information system, the corresponding simulated hacker data attacks are gradually carried out, and the attack priority order of each data attack method is arranged according to the penetration rate of each data attack method stored in the database. By using each attack method on each data during the simulated hacker data attack, when the first-ranked attack method fails to read, the second-ranked attack method is used, and this method is used until the data is successfully stolen.

[0044] A3. When the simulated hacker attacks on each data test group fail, the penetration test of the simulated hacker attacks on each data test group is stopped, and the attack test information corresponding to each data test group is collected. After the collection is completed, the attack test is ended.

[0045] As an optional implementation, the test obtains the attack evaluation coefficient corresponding to each data test group. The specific test process is as follows: By calculating the formula , the test results are The attack evaluation coefficient corresponding to the data test group , is the number of each data test group, , is any integer greater than 2, The reference attack duration is set. is the reference attack success rate set, For the The corresponding attack time of each data test group is: For the The success rate of the attack corresponding to the data test group is , They are the weight factors of the set attack duration and attack success rate, respectively. , , is a natural constant.

[0046] It should be noted that the weight factors of the attack duration and the attack success rate are obtained through principal component analysis. The information of the attack duration and the attack success rate is condensed first, and then the corresponding variance explanation rate is obtained, and then divided by the variance explanation rate to get the corresponding weight.

[0047] It should also be noted that information condensation refers to condensing multiple analysis items into several key summary indicators, and the variance explanation rate refers to the contribution of each principal component or factor to the overall variance, usually expressed as a percentage, indicating how much information the factor contains about the original data.

[0048] As an optional implementation, the calculation obtains the corresponding breach assessment coefficient of the power information system, and the specific calculation process is as follows: , the corresponding attack assessment coefficient of the power information system is obtained by analysis , , are the weight factors of the penetration assessment coefficient and the attack assessment coefficient, respectively. For the The attack evaluation coefficient corresponding to the data test group is: For the The attack assessment coefficient corresponding to the vulnerability test group is: , .

[0049] It should be noted again that the weight factor of the penetration assessment coefficient and the weight factor of the attack assessment coefficient are obtained through principal component analysis. The information of the penetration assessment coefficient and the attack assessment coefficient is condensed first, and then the corresponding variance explanation rate is obtained, and then divided by the variance explanation rate to get the corresponding weight.

[0050] It is important to note again that information condensation refers to condensing multiple analysis items into several key summary indicators, and the variance explanation rate refers to the contribution of each principal component or factor to the overall variance, usually expressed as a percentage, indicating how much information the factor contains about the original data.

[0051] As an optional implementation manner, the judgment obtains the security corresponding to the power information system, and the specific judgment process is as follows: the attack assessment coefficient corresponding to the power information system is compared with the set attack assessment coefficient threshold. If the data attack assessment coefficient corresponding to the power information system is less than or equal to the set attack assessment coefficient threshold, then the power information system is judged to be in an unsafe state. If the data attack assessment coefficient corresponding to the power information system is greater than the set attack assessment coefficient threshold, then the defense corresponding to the power information system is judged to be qualified, and the power information system is judged to be in a safe state, thereby judging the security corresponding to the power information system.

[0052] The control terminal is used to issue early warning prompts when there are loopholes in the virtual power information system or when the power information system is unsafe.

[0053] See also Figure 2As shown, the present invention provides a second aspect of a method for testing the security of an electric power information system, including: Step 1, electric power information collection: obtaining basic information corresponding to the electric power information system, and building a corresponding virtual electric power information system through virtualization technology to perform corresponding security tests.

[0054] Step 2: Vulnerability scanning and analysis: Perform vulnerability scanning on the virtual power information system to determine whether there are vulnerabilities in the virtual power information system.

[0055] Step 3: Attack method prediction: When there is a vulnerability in the virtual power information system, the corresponding attack method of the hacker is predicted.

[0056] Step 4: Vulnerability attack test: Set up each vulnerability test group, collect the attack test information corresponding to each vulnerability test group, and then test to obtain the attack assessment coefficient corresponding to each vulnerability test group.

[0057] Step 5. System security test: Set up each data test group and collect the attack test information corresponding to each data test group, and then test to obtain the attack assessment coefficient corresponding to each data test group, and calculate the corresponding attack assessment coefficient of the power information system according to the attack assessment coefficient corresponding to each vulnerability test group, and judge the corresponding security of the power information system.

[0058] Step 6: Test control: Issue early warning when there are loopholes in the virtual power information system or when the power information system is unsafe.

[0059] In the embodiment of the present invention, a corresponding virtual power information system is built through virtualization technology to perform corresponding security tests. A vulnerability scan is first performed to determine whether there are vulnerabilities in the power information system, and then the corresponding vulnerability attack method of the hacker is predicted, and each vulnerability test group and each data test group are set to test and obtain the corresponding attack assessment coefficient of each vulnerability test group and the corresponding data attack assessment coefficient of each data test group, and then the coefficients are added to obtain the corresponding attack assessment coefficient of the power information system, and the corresponding security of the power information system is determined, thereby realizing multi-faceted security testing of the power information system, effectively ensuring the corresponding security of the power information system, and solving the deficiencies in the current technology. Through the power information system security test, the security vulnerabilities and weaknesses in the power information system can be discovered in time, the potential security risks and threats can be effectively identified, and rapid vulnerability patching and security prevention can be achieved, thereby reducing the risk rate of the power information system being invaded. In addition, the power information system involves a large amount of key information and data, thereby ensuring the safe storage of data and effectively ensuring the security of the power information system.

[0060] The above contents are merely examples and explanations of the concept of the present invention. The technicians in this technical field may make various modifications or additions to the specific embodiments described or replace them in a similar manner. As long as they do not deviate from the concept of the invention or exceed the scope defined in this specification, they should all fall within the protection scope of the present invention.

Claims

1. A power information system security test system, characterized in that: include: The power information collection module is used to obtain the basic information corresponding to the power information system, including IP address, open ports, and service version, and build a corresponding virtual power information system through virtualization technology to perform corresponding security tests; The vulnerability scanning and analysis module is used to scan the virtual power information system for vulnerabilities, and use the vulnerability scanning tool to scan the virtual power information system in various places, and then determine whether there are vulnerabilities in the virtual power information system; The attack mode prediction module is used to predict the corresponding attack mode of hackers when there are vulnerabilities in the virtual power information system; The vulnerability attack test module is used to set up various vulnerability test groups when predicting the vulnerability attack methods of hackers, use virtualization technology to perform attack tests on various vulnerability test groups, and collect attack test information corresponding to various vulnerability test groups, wherein the attack test information includes the attack method usage rate and attack speed, and then test to obtain the attack assessment coefficient corresponding to each vulnerability test group; The system security test module is used to set up each data test group, use virtualization technology to perform attack tests on each data test group, and collect attack test information corresponding to each data test group, where the attack test information includes attack duration and attack success rate, and then test to obtain the attack assessment coefficient corresponding to each data test group, and calculate the attack assessment coefficient corresponding to the power information system according to the attack assessment coefficient corresponding to each vulnerability test group, and judge the corresponding security of the power information system; The control terminal is used to issue early warning prompts when there are loopholes in the virtual power information system or when the power information system is unsafe; The test obtains the attack assessment coefficient corresponding to each vulnerability test group. The specific test process is as follows: The test obtains the attack assessment coefficient LD corresponding to the g-th vulnerability test group g , g is the number of each vulnerability test group, g = 1, 2, ....., d, d is any integer greater than 2, FS' is the set reference attack method usage rate, SD' is the set reference attack speed, FS g is the usage rate of the attack method corresponding to the g-th vulnerability test group, SD g is the attack speed corresponding to the g-th vulnerability test group, q1 and q2 are the weight factors of the attack method usage rate and the attack speed respectively, 0 <q1<1,0<q2<1; The test obtains the attack evaluation coefficient corresponding to each data test group. The specific test process is as follows: The attack evaluation coefficient SJ corresponding to the zth data test group is obtained by testing z , z is the number of each data test group, z = 1, 2, ..., r, r is any integer greater than 2, BN 'is the set reference attack duration, MK 'is the set reference attack success rate, BN z is the attack time corresponding to the zth data test group, MK z is the attack success rate corresponding to the zth data test group, f1 and f2 are the weight factors of the set attack duration and attack success rate, respectively, 0<f1<1, 0<f2<1, and e is a natural constant; The calculation obtains the corresponding attack assessment coefficient of the power information system. The specific calculation process is as follows: The analysis results show that the corresponding attack assessment coefficient W of the power information system is obtained. α1 and α2 are the weight factors of the attack assessment coefficient and the attack assessment coefficient, respectively. z is the attack evaluation coefficient corresponding to the zth data test group, LD g is the attack assessment coefficient corresponding to the g-th vulnerability test group, 0<α1<1, 0<α2<1.

2. A power information system security testing system as claimed in claim 1, characterized in that: The specific judgment process of judging whether the virtual power information system has vulnerabilities is as follows: use a vulnerability scanning tool to scan various locations of the constructed virtual power information system, obtain the status of each data corresponding to the virtual power information system through the vulnerability scanning tool, and compare the scanned data status with the preset data status. If a data status obtained by the scan is different from a preset data status, it is judged that there is a vulnerability in the power information system. If the data status obtained by the scan is the same as the preset data status, it is judged that there is no vulnerability in the power information system, thereby judging whether the virtual power information system has vulnerabilities.

3. A power information system security testing system as claimed in claim 1, characterized in that: The prediction obtains the corresponding vulnerability attack method of the hacker, and the specific prediction process is as follows: according to the vulnerability report generated by scanning the corresponding data of the power information system with the vulnerability scanning tool, the type of each vulnerability corresponding to the virtual power information system is obtained, and the type of each vulnerability corresponding to the virtual power information system is compared with the historical vulnerability type corresponding to each attack method stored in the database. If the type of a vulnerability corresponding to the virtual power information system is the same as a historical vulnerability type corresponding to a certain attack method stored in the database, the attack method corresponding to the historical vulnerability type is used as the attack method of the virtual power information system corresponding to the vulnerability type.

4. A power information system security testing system as claimed in claim 1, characterized in that: The specific testing process of conducting the attack test of each vulnerability test group is as follows: P1. According to the vulnerability reports detected by the virtual power information system, preset the vulnerability level difference, and arrange the vulnerability level difference in order from small to large, set the corresponding vulnerability test groups, and conduct penetration testing in the constructed virtual power information system to simulate hackers attacking each vulnerability test group; P2. According to the vulnerability level corresponding to the virtual power information system, the corresponding simulated hacker vulnerability attack is gradually carried out, and the attack priority order of each vulnerability attack method is arranged according to the attack speed of each vulnerability attack method. When the attack method with the first ranking fails during the simulated hacker vulnerability attack, the attack method with the second ranking is used, and this method is used until the vulnerability is successfully attacked; P3. When the simulated hacker attacks each vulnerability test group and all attack methods fail, stop the penetration test of simulating the hacker to attack each vulnerability test group, and collect the attack test information corresponding to each vulnerability test group. After the collection is completed, end the vulnerability test.

5. A power information system security testing system as claimed in claim 1, characterized in that: The attack test of each data test group is performed, and the specific test process is as follows: A1. According to the data level corresponding to the power information system, preset the data level difference, and arrange the data level difference in order from small to large, set the corresponding data test groups, and conduct penetration testing in the constructed power information system, and start simulating hackers to attack each data test group; A2. According to the data level corresponding to the virtual power information system, the corresponding simulated hacker data attack is gradually carried out, and the attack priority order of each data attack method is arranged according to the penetration rate of each data attack method stored in the database. When the first-ranked attack method fails to read, the second-ranked attack method is used, and this method is used until the data is successfully stolen; A3. When the simulated hacker attacks on each data test group fail, the penetration test of the simulated hacker attacks on each data test group is stopped, and the attack test information corresponding to each data test group is collected. After the collection is completed, the attack test is ended.

6. A power information system security testing system as claimed in claim 1, characterized in that: The judgment obtains the security corresponding to the power information system, and the specific judgment process is as follows: the attack assessment coefficient corresponding to the power information system is compared with the set attack assessment coefficient threshold. If the data attack assessment coefficient corresponding to the power information system is less than or equal to the set attack assessment coefficient threshold, it is determined that the power information system is in an unsafe state. If the data attack assessment coefficient corresponding to the power information system is greater than the set attack assessment coefficient threshold, it is determined that the defense corresponding to the power information system is qualified, and the power information system is determined to be in a safe state, thereby judging the security corresponding to the power information system.

7. A method for testing the security of an electric power information system by executing the electric power information system security testing system according to any one of claims 1 to 6, characterized in that: include: Step 1: Power information collection: Obtain the basic information corresponding to the power information system, and build the corresponding virtual power information system through virtualization technology to perform corresponding security tests; Step 2: Vulnerability scanning and analysis: Scan the virtual power information system for vulnerabilities, and then determine whether the virtual power information system has vulnerabilities; Step 3: Attack method prediction: When there is a vulnerability in the virtual power information system, the corresponding attack method of the hacker is predicted; Step 4: Vulnerability attack test: Set up each vulnerability test group, collect attack test information corresponding to each vulnerability test group, and then test to obtain the attack assessment coefficient corresponding to each vulnerability test group; Step 5: System security test: Set up each data test group, and collect the attack test information corresponding to each data test group, and then test to obtain the attack assessment coefficient corresponding to each data test group, and calculate the attack assessment coefficient corresponding to the power information system according to the attack assessment coefficient corresponding to each vulnerability test group, and determine the security of the power information system; Step 6: Test control: Issue early warning when there are loopholes in the virtual power information system or when the power information system is unsafe.

Images