Power monitoring system network multivariate vulnerability assessment method and system

Abstract

The invention relates to the technical field of network security, in particular to a power monitoring system network multivariate vulnerability assessment method and system. Comprising the following steps: establishing a network logic model; calculating a network load vulnerability score; evaluating the available vulnerability of the network; analyzing network security vulnerability; calculating potential threat vulnerability; and comprehensively calculating a multivariate vulnerability total score and grading. According to the method, comprehensive and accurate evaluation of the network vulnerability of the power monitoring system is realized by considering multiple dimensions such as network load, availability, security and potential threats. And a weight concept and a standardized scoring system are introduced, so that the objectivity and comparability of an evaluation result are improved. Experiments show that the method is superior to an existing method in the aspects of evaluation comprehensiveness, accuracy, high-risk node identification capability and the like, more valuable decision support can be provided for management and optimization of the power monitoring system, and the overall safety and reliability of the system are effectively improved.

Description

Technical Field

[0001] The present invention relates to the technical field of network security, and in particular to a method and system for evaluating multiple vulnerabilities of a power monitoring system network. Background Art

[0002] With the improvement of the intelligence level and the deepening of the networking level of power monitoring systems, the system faces increasingly complex network security threats; first, the openness of the system leads to the expansion of the network attack surface. Hackers can invade and damage the system in various ways, such as remote attacks, malware and denial of service attacks; second, due to the existence of unpatched zero-day vulnerabilities in the system, attackers can use these vulnerabilities to gain control of the system, thereby causing serious impacts on the power production and supply process; in addition, with the application of Internet of Things technology, the connectivity between devices in the system is enhanced, but it also provides attackers with more possibilities for invasion. With the in-depth application of information technology and the development and changes of the security situation at home and abroad, the security threats faced by the power monitoring system network cannot be ignored. The complex network environment brings many problems and challenges to attack detection:

[0003] (1) With the widespread application of IoT technology in power monitoring systems, the number and types of devices involved in the system are increasing. However, the security of IoT devices is often low and vulnerable to attacks. Attackers can exploit the weaknesses of IoT devices to invade the system or tamper with data, thereby affecting power operation.

[0004] (2) Existing assessment methods usually only focus on a single indicator and do not consider the multiple vulnerability factors of the power monitoring system network, which affects the certainty and reliability of the assessment results;

[0005] (3) Vulnerability risks and internal threats are also important security challenges faced by the power monitoring system network, which affects the stability and security of power production and supply. Summary of the invention

[0006] In view of the problems existing in the prior art, the present invention is proposed.

[0007] Therefore, the problem to be solved by the present invention is how to solve the problem that with the widespread application of Internet of Things technology in power monitoring systems, the number and types of devices involved in the system are increasing, but the security of Internet of Things devices is often low and vulnerable to attacks. Attackers can exploit the weaknesses of Internet of Things devices to invade the system or tamper with data, thereby affecting power operation;

[0008] Existing assessment methods usually only focus on a single indicator and do not consider the multiple vulnerability factors of the power monitoring system network, which affects the certainty and reliability of the assessment results;

[0009] Vulnerability risks and internal threats are also important security challenges faced by power monitoring system networks, which affect the stability and security of power production and supply.

[0010] In order to solve the above technical problems, the present invention provides the following technical solutions:

[0011] In a first aspect, an embodiment of the present invention provides a multivariate vulnerability assessment method for a power monitoring system network, which includes establishing a power monitoring system network logic model, which is defined as a weighted undirected network;

[0012] Based on the established network logic model, the network load vulnerability score is calculated, taking into account the link load degree and the shortest path length to evaluate the vulnerability of the network carrying capacity;

[0013] Based on the load assessment, the network availability vulnerability is further assessed, and the operational reliability of the network under high load is analyzed by combining network availability and transmission stability.

[0014] Analyze network security vulnerabilities based on the impact of network security on system stability, and evaluate the network's ability to resist external threats based on the number of attacks and the intensity of attacks;

[0015] Calculate potential threat vulnerabilities, use the Common Vulnerability Scoring System (CVSS) to assess node vulnerabilities, and identify weak links in the system;

[0016] By combining the above four scores, the total score of the multi-dimensional vulnerability of the power monitoring system network is calculated to obtain the overall vulnerability level of the system. The network vulnerability is graded according to the total score to provide a reference for management and optimization.

[0017] As a preferred solution of the multivariate vulnerability assessment method of the power monitoring system network described in the present invention, wherein: based on establishing a logical model of the power monitoring system network, defined as a weighted undirected network, the following steps can be adopted:

[0018] The network topology of the power monitoring system network is modeled and the power monitoring system network is defined as a weighted undirected network. The power monitoring system network is defined as a weighted undirected network G = (V, E) with N nodes and M links, where V = {v 1 ,v 2 ,…,v N} represents the node set of the power monitoring system network, E = {e ij} represents the link set of the network, e ij is the shortest path link between node i and node j in the power monitoring system network, i=1,2,…N,j=1,2,…N,i≠j.

[0019] As a preferred solution of the multivariate vulnerability assessment method of the power monitoring system network described in the present invention, wherein: based on the established network logic model, the network load vulnerability score is calculated, and the link load degree and the shortest path length are considered to evaluate the vulnerability of the network carrying capacity. The detailed steps are as follows:

[0020] The network link load vulnerability of the power monitoring system is composed of the inverse of the shortest path length of the link and the link load degree. The network link load vulnerability calculation formula is expressed as:

[0021]

[0022] Among them, Q is the network link e of the power monitoring system ij The number of business types, 1≤Q≤7, n k (e ij ) is the network link of the power monitoring system ij The number of services of type k carried, θ k is the service load of service type k, d ij is the shortest path from node i to node j;

[0023] The types of network services of the power monitoring system include data transmission and communication services of the power monitoring system, remote control and dispatching services of the power monitoring system, fault diagnosis and early warning services of the power monitoring system, real-time monitoring and data collection services of the power monitoring system, data analysis and processing services of the power monitoring system, energy management and optimization services of the power monitoring system, and reports and visualization services of the power monitoring system. Different service load values ​​are assigned according to the different service load levels of the power monitoring system network:

[0024]

[0025] According to actual measurements, C(e ij )>7 is the high-load link of the power monitoring system network. The greater the load of the power monitoring system network, the greater the impact of the link failure on the power monitoring system network. The high-load ratio of the power monitoring system network link is defined as X 11 The calculation method is:

[0026]

[0027] Among them, C Hight is the number of high-load links in the power monitoring system network, and M is the total number of links in the power monitoring system network;

[0028] According to actual measurements, when the high load ratio of the power monitoring system network is too low and the high load link of the power monitoring system network fails, the entire power monitoring system network will fail or even be paralyzed. At this time, the load vulnerability score of the power monitoring system network can be defined.

[0029] As a preferred solution of the multivariate vulnerability assessment method of the power monitoring system network described in the present invention, the network availability vulnerability is further assessed on the basis of load assessment, and the operation reliability of the network under high load is analyzed by combining network availability and transmission stability. The detailed steps are as follows:

[0030] The power monitoring system network availability vulnerability score is calculated by the power monitoring system network availability and the power monitoring system network transmission stability;

[0031] The low network availability of the power monitoring system means that the network link of the power monitoring system is often interrupted, which affects the normal operation of the power monitoring system network. The calculation formula for the network availability of the power monitoring system is:

[0032]

[0033] Among them, A 1 Represents the data transmission time of the power monitoring system network, A 2 Represents the network working time, in seconds; Power monitoring system network availability score S 21 The calculation formula is:

[0034]

[0035] A high packet loss rate in the power monitoring system network means poor network quality, which will seriously affect the stability and efficiency of network communication. Therefore, the network transmission stability of the power monitoring system is 22 The calculation formula is:

[0036]

[0037] Among them, A 3 is the number of lost data packets in the power monitoring system network, A 4 The total number of data packets transmitted by the power monitoring system network; the power monitoring system network transmission stability score S 22 The calculation formula is:

[0038]

[0039] Define the network availability vulnerability score S of the power monitoring system 2 The calculation formula is:

[0040] S 2 =ω 1 S 21+ω 2 S 22

[0041] Among them, S 21 Score the network availability of the power monitoring system, S 22 Score the network transmission stability of the power monitoring system, ω 1 and ω 2 is the weight factor and can be adjusted according to actual conditions.

[0042] As a preferred solution of the multi-network vulnerability assessment method of a power monitoring system described in the present invention, the detailed steps are as follows: the impact of network security on system stability, the analysis of network security vulnerability, and the evaluation of the network's ability to resist external threats based on the number of attacks and the intensity of attacks are as follows:

[0043] The number of network attacks reflects the overall security vulnerability of the network. Based on the statistical data of various power monitoring network platform attack events, the power monitoring system network vulnerability score S is defined. 31 The calculation formula is:

[0044]

[0045] Among them, X 31 The number of times the power monitoring system network was attacked within a week;

[0046] The attack density of the power monitoring system network nodes is the frequency of the power monitoring network nodes being attacked, and the attack density of the power monitoring system network nodes is X 32 The calculation formula is:

[0047]

[0048] Among them, A max is the number of attacks on the link with the most attacks, C is the total number of attacks on the power monitoring system network; the attack density score S of the power monitoring system network node 32 The calculation formula is:

[0049]

[0050] Define the cybersecurity vulnerability score S of the power monitoring system 3 The calculation formula is:

[0051] S 3 =ω 3 S 31 +ω 4 S 32

[0052] Among them, S 31Score the vulnerability of the power monitoring system network, S 32 Score the attack density of the power monitoring system network nodes, ω 3 and ω 4 is the weight factor and can be adjusted according to actual conditions.

[0053] As a preferred solution of the multi-layer vulnerability assessment method of the power monitoring system network described in the present invention, the following steps are used to calculate the potential threat vulnerability, evaluate the node vulnerability using the Common Vulnerability Scoring System (CVSS), and identify the weak links in the system:

[0054] The existence of anomalies or vulnerabilities in the power monitoring system network nodes that can be exploited by threats can reflect the potential threat vulnerability of the power monitoring system network. The calculation formula for the potential threat vulnerability of the power monitoring system network nodes is:

[0055] L i =max(CVSS)

[0056] Among them, L i is the potential threat vulnerability of the power monitoring system network node, CVSS is the score obtained according to the Common Vulnerability Scoring System, and the value range is [0,10]. Max(CVSS) is the maximum CVSS value of the anomaly or vulnerability in the power monitoring system network node that can be exploited by threats;

[0057] According to actual measurements, when CVSS>7, it is a high-risk vulnerability with a wide impact range. The ratio of power monitoring system network nodes to power monitoring system network nodes is X 41 :

[0058]

[0059] Among them, L High is the number of nodes with high-risk vulnerabilities in the power monitoring system network, N is the number of nodes in the power monitoring system network; define the potential threat vulnerability score S of the power monitoring system network 4 The calculation formula is:

[0060]

[0061] As a preferred solution of the multi-element vulnerability assessment method of the power monitoring system network described in the present invention, wherein: the above four scores are integrated to calculate the total score of the multi-element vulnerability of the power monitoring system network, to obtain the overall vulnerability level of the system, and to grade the network vulnerability according to the total score to provide a reference for management and optimization, including the following steps:

[0062] According to the multivariate vulnerability score of the power monitoring system network, the vulnerability of the power monitoring system network can be graded. The specific grading method is shown in the formula:

[0063]

[0064] The above grading method can provide a reference for subsequent management and optimization.

[0065] In a second aspect, an embodiment of the present invention provides a multivariate vulnerability assessment system for a power monitoring system network, which includes a construction module, establishing a power monitoring system network logic model, which is defined as a weighted undirected network;

[0066] The calculation module calculates the network load vulnerability score based on the established network logic model, considers the link load degree and the shortest path length, and evaluates the vulnerability of the network carrying capacity;

[0067] The evaluation module further evaluates the network availability vulnerability based on the load evaluation, and analyzes the network's operational reliability under high load conditions by combining network availability and transmission stability;

[0068] The analysis module analyzes network security vulnerabilities based on the impact of network security on system stability and evaluates the network's ability to resist external threats based on the number of attacks and the intensity of attacks;

[0069] Identify modules, calculate potential threat vulnerabilities, use the Common Vulnerability Scoring System (CVSS) to assess node vulnerabilities, and identify weak links in the system;

[0070] The optimization module combines the above four scores to calculate the total score of the multi-dimensional vulnerability of the power monitoring system network, derives the overall vulnerability level of the system, and grades the network vulnerability according to the total score to provide a reference for management and optimization.

[0071] In a third aspect, an embodiment of the present invention provides a computer device comprising a memory and a processor, wherein the memory stores a computer program, wherein: when the computer program instructions are executed by the processor, the steps of a method for multi-dimensional vulnerability assessment of a power monitoring system network as described in the first aspect of the present invention are implemented.

[0072] In a fourth aspect, an embodiment of the present invention provides a computer-readable storage medium having a computer program stored thereon, wherein: when the computer program instructions are executed by a processor, the steps of a method for multi-dimensional vulnerability assessment of a power monitoring system network as described in the first aspect of the present invention are implemented.

[0073] The beneficial effects of the present invention are as follows: by establishing a network logic model of the power monitoring system, the representation of complex network topology is simplified, laying the foundation for subsequent evaluation. When calculating the network load vulnerability score, the link load and topology are taken into account, achieving a comprehensive quantitative evaluation of the network carrying capacity vulnerability, which helps to identify potential risk points.

[0074] When evaluating network availability and vulnerability, we combine availability and transmission stability, and deeply analyze the operational reliability under high load, which helps to improve system stability. The analysis of network security vulnerability is based on attack data, directly targeting security issues, and providing a basis for formulating protection strategies.

[0075] The introduction of the Common Vulnerability Scoring System (CVSS) to calculate potential threat vulnerabilities improves the objectivity and comparability of the assessment, and helps prioritize the resolution of serious security risks. The overall score is derived by combining the four scores, achieving a multi-dimensional and comprehensive vulnerability assessment, providing a scientific basis for system management and optimization.

[0076] Finally, through vulnerability classification, the assessment results are more intuitive and easy to understand, which facilitates managers to quickly identify problems and formulate improvement measures. This multi-dimensional and standardized assessment method not only improves the accuracy and operability of the assessment, but also provides strong support for improving the overall performance, reliability and safety of the power monitoring system, which is of great significance to ensuring national energy security and economic and social development. BRIEF DESCRIPTION OF THE DRAWINGS

[0077] In order to more clearly illustrate the technical solutions of the embodiments of the present invention, the following briefly introduces the drawings required for use in the description of the embodiments. Obviously, the drawings described below are only some embodiments of the present invention. For ordinary technicians in this field, other drawings can be obtained based on these drawings without creative work.

[0078] Figure 1 It is a flowchart of a multivariate vulnerability assessment method for a power monitoring system network;

[0079] Figure 2 Computer equipment diagram of a multivariate vulnerability assessment method for power monitoring system network. DETAILED DESCRIPTION

[0080] In order to make the above-mentioned objects, features and advantages of the present invention more obvious and easy to understand, the specific implementation methods of the present invention are described in detail below in conjunction with the accompanying drawings.

[0081] In the following description, many specific details are set forth to facilitate a full understanding of the present invention, but the present invention may also be implemented in other ways different from those described herein, and those skilled in the art may make similar generalizations without violating the connotation of the present invention. Therefore, the present invention is not limited to the specific embodiments disclosed below.

[0082] Secondly, the term "one embodiment" or "embodiment" as used herein refers to a specific feature, structure, or characteristic that may be included in at least one implementation of the present invention. The term "in one embodiment" that appears in different places in this specification does not necessarily refer to the same embodiment, nor is it a separate or selective embodiment that is mutually exclusive with other embodiments.

[0083] Example 1

[0084] Reference Figure 1-2 , which is the first embodiment of the present invention, and provides a multivariate vulnerability assessment method for a power monitoring system network, comprising:

[0085] S100: Establish a network logic model of the power monitoring system, which is defined as a powered undirected network;

[0086] S101: Based on establishing a network logic model of the power monitoring system, which is defined as a weighted undirected network, the following steps can be taken:

[0087] The network topology of the power monitoring system network is modeled and the power monitoring system network is defined as a weighted undirected network. The power monitoring system network is defined as a weighted undirected network G = (V, E) with N nodes and M links, where V = {v 1 ,v 2 ,…,v N} represents the node set of the power monitoring system network, E = {e ij} represents the link set of the network, e ij is the shortest path link between node i and node j in the power monitoring system network, i=1,2,…N,j=1,2,…N,i≠j.

[0088] S200: Based on the established network logic model, the network load vulnerability score is calculated, and the vulnerability of the network carrying capacity is evaluated by considering the link load degree and the shortest path length;

[0089] S201: Based on the established network logic model, the network load vulnerability score is calculated, and the link load degree and the shortest path length are considered to evaluate the vulnerability of the network carrying capacity. The detailed steps are as follows:

[0090] The network link load vulnerability of the power monitoring system is composed of the inverse of the shortest path length of the link and the link load degree. The network link load vulnerability calculation formula is expressed as:

[0091]

[0092] Among them, Q is the network link e of the power monitoring system ij The number of business types, 1≤Q≤7, n k (e ij ) is the network link of the power monitoring system ij The number of services of type k carried, θ k is the service load of service type k, d ij is the shortest path from node i to node j;

[0093] The types of network services of the power monitoring system include data transmission and communication services of the power monitoring system, remote control and dispatching services of the power monitoring system, fault diagnosis and early warning services of the power monitoring system, real-time monitoring and data collection services of the power monitoring system, data analysis and processing services of the power monitoring system, energy management and optimization services of the power monitoring system, and reports and visualization services of the power monitoring system. Different service load values ​​are assigned according to the different service load levels of the power monitoring system network:

[0094]

[0095] According to actual measurements, C(e ij )>7 is the high-load link of the power monitoring system network. The greater the load of the power monitoring system network, the greater the impact of the link failure on the power monitoring system network. The high-load ratio of the power monitoring system network link is defined as X 11 The calculation method is:

[0096]

[0097] Among them, C Hight is the number of high-load links in the power monitoring system network, and M is the total number of links in the power monitoring system network;

[0098] According to actual measurements, when the high load ratio of the power monitoring system network is too low and the high load link of the power monitoring system network fails, the entire power monitoring system network will fail or even be paralyzed. At this time, the load vulnerability score of the power monitoring system network can be defined.

[0099] The power monitoring system network load vulnerability scoring formula can be used as follows:

[0100]

[0101] S300: Based on the load assessment, further evaluate the network availability vulnerability, combine network availability and transmission stability, and analyze the network's operational reliability under high load conditions;

[0102] S301: Based on the load assessment, further assess the network availability vulnerability, combine network availability and transmission stability, and analyze the network's operational reliability under high load conditions. The detailed steps are as follows:

[0103] The power monitoring system network availability vulnerability score is calculated by the power monitoring system network availability and the power monitoring system network transmission stability;

[0104] The low network availability of the power monitoring system means that the network link of the power monitoring system is often interrupted, which affects the normal operation of the power monitoring system network. The calculation formula for the network availability of the power monitoring system is:

[0105]

[0106] Among them, A 1 Represents the data transmission time of the power monitoring system network, A 2 Represents the network working time, in seconds; Power monitoring system network availability score S 21 The calculation formula is:

[0107]

[0108] A high packet loss rate in the power monitoring system network means poor network quality, which will seriously affect the stability and efficiency of network communication. Therefore, the network transmission stability of the power monitoring system is 22 The calculation formula is:

[0109]

[0110] Among them, A 3 is the number of lost data packets in the power monitoring system network, A 4 The total number of data packets transmitted by the power monitoring system network; the power monitoring system network transmission stability score S 22 The calculation formula is:

[0111]

[0112] Define the network availability vulnerability score S of the power monitoring system 2 The calculation formula is:

[0113] S 2 =ω 1 S 21 +ω 2 S 22

[0114] Among them, S 21 Score the network availability of the power monitoring system, S 22 Score the network transmission stability of the power monitoring system, ω1 and ω 2 is the weight factor, which can be adjusted according to the actual situation. By default, ω 1 =ω 2 =0.5.

[0115] S400: Analyze network security vulnerabilities based on the impact of network security on system stability, and evaluate the network's ability to resist external threats based on the number of attacks and the intensity of attacks;

[0116] S401: Analyze network security vulnerabilities based on the impact of network security on system stability, and evaluate the network's ability to resist external threats based on the number of attacks and the intensity of attacks. The detailed steps are as follows:

[0117] The number of network attacks reflects the overall security vulnerability of the network. Based on the statistical data of various power monitoring network platform attack events, the power monitoring system network vulnerability score S is defined. 31 The calculation formula is:

[0118]

[0119] Among them, X 31 The number of times the power monitoring system network was attacked within a week;

[0120] The attack density of the power monitoring system network nodes is the frequency of the power monitoring network nodes being attacked, and the attack density of the power monitoring system network nodes is X 32 The calculation formula is:

[0121]

[0122] Among them, A max is the number of attacks on the link with the most attacks, C is the total number of attacks on the power monitoring system network; the attack density score S of the power monitoring system network node 32 The calculation formula is:

[0123]

[0124] Define the cybersecurity vulnerability score S of the power monitoring system 3 The calculation formula is:

[0125] S 3 =ω 3 S 31 +ω 4 S 32

[0126] Among them, S 31 Score the vulnerability of the power monitoring system network, S 32Score the attack density of the power monitoring system network nodes, ω 3 and ω 4 is the weight factor, which can be adjusted according to the actual situation. By default, ω 3 =ω 4 =0.5.

[0127] S500: Calculates potential threat vulnerabilities, uses the Common Vulnerability Scoring System (CVSS) to assess node vulnerabilities, and identifies weak links in the system;

[0128] S501: Calculate potential threat vulnerabilities, use the Common Vulnerability Scoring System (CVSS) to evaluate node vulnerabilities, and identify weak links in the system. The detailed steps are as follows:

[0129] The existence of anomalies or vulnerabilities in the power monitoring system network nodes that can be exploited by threats can reflect the potential threat vulnerability of the power monitoring system network. The calculation formula for the potential threat vulnerability of the power monitoring system network nodes is:

[0130] L i =max(CVSS)

[0131] Among them, L i is the potential threat vulnerability of the power monitoring system network node, CVSS is the score obtained according to the Common Vulnerability Scoring System, and the value range is [0,10]. Max(CVSS) is the maximum CVSS value of the anomaly or vulnerability in the power monitoring system network node that can be exploited by threats;

[0132] According to actual measurements, when CVSS>7, it is a high-risk vulnerability with a wide impact range. The ratio of power monitoring system network nodes to power monitoring system network nodes is X 41 :

[0133]

[0134] Among them, L High is the number of nodes with high-risk vulnerabilities in the power monitoring system network, N is the number of nodes in the power monitoring system network; define the potential threat vulnerability score S of the power monitoring system network 4 The calculation formula is:

[0135]

[0136] S600: The above four scores are combined to calculate the total score of the multi-dimensional vulnerability of the power monitoring system network, and the overall vulnerability level of the system is obtained. The network vulnerability is graded according to the total score to provide a reference for management and optimization.

[0137] S601: Based on the above four scores, the total score of the multivariate vulnerability of the power monitoring system network is calculated to obtain the overall vulnerability level of the system, and the network vulnerability is graded according to the total score to provide a reference for management and optimization, including the following steps:

[0138] According to the multivariate vulnerability score of the power monitoring system network, the vulnerability of the power monitoring system network can be graded. The specific grading method is shown in the formula:

[0139]

[0140] The above grading method can provide a reference for subsequent management and optimization.

[0141] Preferably, the power monitoring system network multivariate vulnerability score S is defined according to the power monitoring system network load vulnerability score, the power monitoring system network availability vulnerability score, the power monitoring system network security vulnerability score, and the power monitoring system network potential threat vulnerability score:

[0142] S=ω 5 ·S 1 +ω 6 ·S 2 +ω 7 ·S 3 +ω 8 ·S 4

[0143] Among them, ω 5 is the weight of the power monitoring system network load vulnerability score, ω 6 is the weight of the power monitoring system network availability vulnerability score, ω 7 The weight of the power monitoring system network security vulnerability score, ω 8 is the weight of the potential threat vulnerability score of the power monitoring system network. Each weight can be adjusted according to the specific situation. The value range is (0,1). The default value is ω 5 =ω 6 =ω 7 =ω 8 =0.25.

[0144] Furthermore, this embodiment also provides a multi-layer vulnerability assessment system for a power monitoring system network, comprising:

[0145] Building modules,establish the network logic model of the power monitoring system, which is defined as a,powered undirected network;

[0146] The calculation module calculates the network load vulnerability score based on the established network logic model, considers the link load degree and the shortest path length, and evaluates the vulnerability of the network carrying capacity;

[0147] The evaluation module further evaluates the network availability vulnerability based on the load evaluation, and analyzes the network's operational reliability under high load conditions by combining network availability and transmission stability;

[0148] The analysis module analyzes network security vulnerabilities based on the impact of network security on system stability and evaluates the network's ability to resist external threats based on the number of attacks and the intensity of attacks;

[0149] Identify modules, calculate potential threat vulnerabilities, use the Common Vulnerability Scoring System (CVSS) to assess node vulnerabilities, and identify weak links in the system;

[0150] The optimization module combines the above four scores to calculate the total score of the multi-dimensional vulnerability of the power monitoring system network, derives the overall vulnerability level of the system, and grades the network vulnerability according to the total score to provide a reference for management and optimization.

[0151] This embodiment also provides a computer device, which is suitable for a method for assessing the multi-dimensional vulnerability of a power monitoring system network, and includes a memory and a processor; the memory is used to store computer executable instructions, and the processor is used to execute computer executable instructions to implement the method for assessing the multi-dimensional vulnerability of a power monitoring system network as proposed in the above embodiment.

[0152] The computer device may be a terminal, and the computer device includes a processor, a memory, a communication interface, a display screen and an input device connected via a system bus. The processor of the computer device is used to provide computing and control capabilities. The memory of the computer device includes a non-volatile storage medium and an internal memory. The non-volatile storage medium stores an operating system and a computer program. The internal memory provides an environment for the operation of the operating system and the computer program in the non-volatile storage medium. The communication interface of the computer device is used to communicate with an external terminal in a wired or wireless manner, and the wireless manner can be achieved through WIFI, an operator network, NFC (near field communication) or other technologies. The display screen of the computer device may be a liquid crystal display screen or an electronic ink display screen, and the input device of the computer device may be a touch layer covering the display screen, or a key, trackball or touchpad provided on the housing of the computer device, or an external keyboard, touchpad or mouse, etc.

[0153] This embodiment also provides a storage medium on which a computer program is stored. When the program is executed by a processor, a method for evaluating the multivariate vulnerability of a power monitoring system network as proposed in the above embodiment is implemented.

[0154] In summary, by establishing the network logic model of the power monitoring system and defining it as a weighted undirected network, a simplified representation of the complex network topology of the power monitoring system is achieved. This representation method makes the subsequent vulnerability assessment calculation more convenient and efficient, lays the foundation for the entire assessment process, and helps to improve the accuracy and operability of the assessment.

[0155] By calculating the network load vulnerability score, the link load level and the shortest path length are taken into account to achieve a quantitative assessment of the network's carrying capacity vulnerability. This step not only takes into account the link load, but also takes the network topology into account, making the assessment results more comprehensive and accurate, and helping to identify weak links and potential risk points in the network.

[0156] By evaluating the network availability vulnerability, the network availability and transmission stability are combined to analyze the network's operational reliability under high load. This step focuses on the actual operation of the network and helps to identify factors that may cause network interruption or performance degradation, thereby improving the overall stability and reliability of the power monitoring system.

[0157] By analyzing network security vulnerabilities, we can evaluate the network's ability to resist external threats based on the number of attacks and the intensity of attacks. This step directly targets network security issues, helps identify security holes and weaknesses in the system, provides a basis for formulating effective security protection strategies, and improves the overall security of the power monitoring system.

[0158] By calculating the potential threat vulnerability and using the Common Vulnerability Scoring System (CVSS) to evaluate node vulnerabilities, the weak links in the system can be identified. This step introduces a standardized vulnerability scoring system, which makes the evaluation results more objective and comparable, helps to prioritize the most serious security risks and improve the overall security level of the system.

[0159] By combining the above four scores, the total score of the multi-dimensional vulnerability of the power monitoring system network is calculated, achieving a comprehensive assessment of the overall vulnerability level of the system. This multi-dimensional assessment method takes into account multiple aspects such as network load, availability, security and potential threats, making the assessment results more comprehensive and accurate, and providing a scientific basis for the management and optimization of the power monitoring system.

[0160] By grading network vulnerability, an intuitive representation of vulnerability levels is achieved. This grading method makes the assessment results easier to understand and apply, helping managers to quickly identify problem areas in the system and develop targeted improvement measures, thereby improving the overall performance and safety of the power monitoring system.

[0161] In summary, the multivariate vulnerability assessment method of the power monitoring system network achieves a comprehensive, accurate and quantitative assessment of the vulnerability of the power monitoring system network through the organic combination of multiple steps. This method not only takes into account multiple dimensions such as network load, availability, and security, but also introduces a standardized scoring system, making the assessment results highly objective and comparable. Through this multidimensional and standardized assessment method, power monitoring system managers can more accurately identify weak links and potential risks in the system, thereby formulating more effective optimization and improvement strategies. Ultimately, the application of this assessment method will help improve the overall performance, reliability and security of the power monitoring system, provide strong guarantees for the stable operation of the power system, and is of great significance to ensuring national energy security and economic and social development.

[0162] Example 2

[0163] Reference Figure 1 - Figure 2 , which is the second embodiment of the present invention, and this embodiment provides a multi-element vulnerability assessment method for a power monitoring system network. In order to verify the beneficial effects of the present invention, scientific demonstration is carried out through economic benefit calculation and simulation experiments.

[0164] In order to verify the effectiveness of the multivariate vulnerability assessment method for the power monitoring system network proposed in this paper, the monitoring system network of a provincial power company was selected as the experimental object. The network contains 200 nodes and 350 links, covering monitoring equipment in multiple links such as power generation, transmission, distribution and power consumption. The experimental process is as follows:

[0165] First, a network logic model of the power monitoring system is established. The network is represented as a weighted undirected graph G = (V, E) using graph theory, where V = {v 1 ,v 2 ,…,v 200} represents 200 nodes, E = {e ij} represents 350 links. The shortest path between nodes is calculated using professional network analysis software.

[0166] Secondly, the network load vulnerability score is calculated. The service data of each link within a week is collected, including 7 different types of services. Different load values ​​are assigned according to the service type, such as 0.8 for data transmission service and 0.9 for remote control service. Formula (1) is used to calculate the load vulnerability of each link, and the number of high-load links (load vulnerability greater than 0.7) is counted. Finally, the network load vulnerability score is calculated according to formula (4).

[0167] Third, evaluate the network availability and vulnerability. The monitoring system records the network operation data for one month, including the data transmission time and network working time. Use formulas (5)-(9) to calculate the network availability score and transmission stability score, and obtain the network availability and vulnerability score.

[0168] Fourth, analyze network security vulnerabilities. Collect data on attacks on the network in the past three months, including the number of attacks and the intensity of attacks. Use formulas (10)-(13) to calculate the network vulnerability score and the attack intensity score to obtain the network security vulnerability score.

[0169] Fifth, calculate potential threat vulnerability. Use the latest CVSS scoring standard to scan and evaluate the vulnerabilities of each node in the network. Use formulas (14)-(16) to calculate the potential threat vulnerability scores of nodes and the potential threat vulnerability scores of the network.

[0170] Finally, the above four scores are combined to calculate the total score of the multivariate vulnerability of the power monitoring system network using formula (17), and the network vulnerability is graded according to formula (18).

[0171] In order to compare the effects of the method of the present invention with the existing methods, two commonly used network vulnerability assessment methods were selected for comparison: method A (an assessment method based on a single indicator) and method B (an assessment method based on multiple indicators but without considering weights). The three methods were evaluated on the same network, and the results are shown in the following table:

[0172]

[0173]

[0174] From the analysis of the table data, it can be seen that the method of the present invention has obvious advantages in many aspects:

[0175] Comprehensiveness of scoring: The method of the present invention considers four key dimensions (load, availability, security, and potential threats), while method A only considers load vulnerability, and method B also considers multiple indicators but does not introduce the concept of weight. This enables the method of the present invention to more comprehensively reflect the vulnerability status of the network.

[0176] Accuracy of scoring: The total multivariate vulnerability score of the proposed method is 0.53, which is lower than 0.75 of method A.

[0177] and 0.59 of method B. This shows that the method of the present invention avoids the overestimation that may be caused by a single indicator, overcomes the deviation that may be caused by the simple superposition of multiple indicators, and more accurately reflects the actual vulnerability level of the network.

[0178] High-risk node identification capability: The method of the present invention can accurately identify 92% of high-risk nodes, which is much higher than the 65% of method A and the 78% of method B. This advantage comes from the fact that the method comprehensively considers the vulnerability factors of multiple dimensions and highlights the real high-risk nodes through reasonable weight allocation.

[0179] Evaluation efficiency: Although the evaluation time of the method of the present invention (4.5 hours) is slightly longer than that of the other two methods, this time cost is completely acceptable considering that the information it provides is more comprehensive and accurate. In contrast, although method A has the shortest evaluation time (2.0 hours), the information it provides is seriously insufficient and difficult to support effective decision-making.

[0180] Reasonableness of each sub-item score: The scores of the method in the four aspects of load vulnerability, availability vulnerability, security vulnerability and potential threat vulnerability are lower than or equal to those of other methods. This shows that the method is more meticulous and rigorous in the evaluation process, avoiding possible overestimation and improving the credibility of the evaluation results.

[0181] Practicality of the evaluation results: Through multi-dimensional scoring and reasonable weight distribution, the method of the present invention not only gives an overall vulnerability score, but also can clearly point out the weak links in the network. For example, from the sub-item scores, it can be seen that the network has major problems in security (0.56) and load balancing (0.68), which provides a clear direction for subsequent network optimization.

[0182] In summary, the multivariate vulnerability assessment method for the power monitoring system network proposed in the present invention shows obvious advantages in terms of comprehensiveness, accuracy, high-risk identification ability and practicality. This method can not only more accurately reflect the actual vulnerability status of the network, but also provide more valuable decision-making support information for network managers, which helps to improve the overall safety and reliability of the power monitoring system.

[0183] It should be noted that the above embodiments are only used to illustrate the technical solutions of the present invention rather than to limit it. Although the present invention has been described in detail with reference to the preferred embodiments, those skilled in the art should understand that the technical solutions of the present invention may be modified or replaced by equivalents without departing from the spirit and scope of the technical solutions of the present invention, which should all be included in the scope of the claims of the present invention.

Claims

1. A multivariate vulnerability assessment method for a power monitoring system network, characterized in that: include, Establish the network logic model of the power monitoring system, which is defined as a authorized undirected network; Based on the established network logic model, the network load vulnerability score is calculated, taking into account the link load degree and the shortest path length to evaluate the vulnerability of the network carrying capacity; Based on the load assessment, the network availability vulnerability is further assessed, and the operational reliability of the network under high load is analyzed by combining network availability and transmission stability. Analyze network security vulnerabilities based on the impact of network security on system stability, and evaluate the network's ability to resist external threats based on the number of attacks and the intensity of attacks; Calculate potential threat vulnerabilities, use the Common Vulnerability Scoring System (CVSS) to assess node vulnerabilities, and identify weak links in the system; By combining the above four scores, the total score of the multi-dimensional vulnerability of the power monitoring system network is calculated to obtain the overall vulnerability level of the system. The network vulnerability is graded according to the total score to provide a reference for management and optimization.

2. A method for assessing multivariate vulnerability of a power monitoring system network as claimed in claim 1, characterized in that: Based on the establishment of the network logic model of the power monitoring system, which is defined as a weighted undirected network, the following steps can be taken: The network topology of the power monitoring system network is modeled and the power monitoring system network is defined as a weighted undirected network. The power monitoring system network is defined as a weighted undirected network G = (V, E) with N nodes and M links, where V = {v1, v2, …, v N } represents the node set of the power monitoring system network, E = {e ij } represents the link set of the network, e ij is the shortest path link between node i and node j in the power monitoring system network, i=1,2,…N,j=1,2,…N,i≠j.

3. A method for assessing multivariate vulnerability of a power monitoring system network as claimed in claim 2, characterized in that: Based on the established network logic model, the network load vulnerability score is calculated, and the link load degree and the shortest path length are considered to evaluate the vulnerability of the network carrying capacity. The detailed steps are as follows: The network link load vulnerability of the power monitoring system is composed of the inverse of the shortest path length of the link and the link load degree. The network link load vulnerability calculation formula is expressed as: Among them, Q is the network link e of the power monitoring system ij The number of business types, 1≤Q≤7, n k (e ij ) is the network link of the power monitoring system ij The number of services of type k carried, θ k is the service load of service type k, d ij is the shortest path from node i to node j; The types of network services of the power monitoring system include data transmission and communication services of the power monitoring system, remote control and dispatching services of the power monitoring system, fault diagnosis and early warning services of the power monitoring system, real-time monitoring and data collection services of the power monitoring system, data analysis and processing services of the power monitoring system, energy management and optimization services of the power monitoring system, and reports and visualization services of the power monitoring system. Different service load values ​​are assigned according to the different service load levels of the power monitoring system network: According to actual measurements, C(e ij )>7 is the high-load link of the power monitoring system network. The greater the load of the power monitoring system network, the greater the impact of the link failure on the power monitoring system network. The high-load ratio of the power monitoring system network link is defined as X 11 The calculation method is: Among them, C Hight is the number of high-load links in the power monitoring system network, and M is the total number of links in the power monitoring system network; According to actual measurements, when the high load ratio of the power monitoring system network is too low and the high load link of the power monitoring system network fails, the entire power monitoring system network will fail or even be paralyzed. At this time, the load vulnerability score of the power monitoring system network can be defined.

4. A method for assessing multi-layer vulnerability of a power monitoring system network as claimed in claim 3, characterized in that: Based on the load assessment, the network availability vulnerability is further assessed, and the network operation reliability under high load is analyzed by combining network availability and transmission stability. The detailed steps are as follows: The power monitoring system network availability vulnerability score is calculated by the power monitoring system network availability and the power monitoring system network transmission stability; The low network availability of the power monitoring system means that the network link of the power monitoring system is often interrupted, which affects the normal operation of the power monitoring system network. The calculation formula for the network availability of the power monitoring system is: Among them, A1 represents the data transmission time of the power monitoring system network, and A2 represents the network working time, in seconds; the network availability score of the power monitoring system S 21 The calculation formula is: A high packet loss rate in the power monitoring system network means poor network quality, which will seriously affect the stability and efficiency of network communication. Therefore, the network transmission stability of the power monitoring system is 22 The calculation formula is: Among them, A3 is the number of data packets lost in the power monitoring system network, A4 is the total number of data packets transmitted in the power monitoring system network; the power monitoring system network transmission stability score S 22 The calculation formula is: The calculation formula of the network available vulnerability score S2 of the power monitoring system is defined as: S2=ω1S 21 +ω2S 22 Among them, S 21 Score the network availability of the power monitoring system, S 22 Score the network transmission stability of the power monitoring system. ω1 and ω2 are weight factors, which can be adjusted according to actual conditions.

5. A method for assessing multi-layer vulnerability of a power monitoring system network as claimed in claim 4, characterized in that: Based on the impact of network security on system stability, the network security vulnerability is analyzed, and based on the number of attacks and the intensity of attacks, the network's ability to resist external threats is evaluated. The detailed steps are as follows: The number of network attacks reflects the overall security vulnerability of the network. Based on the statistical data of various power monitoring network platform attack events, the power monitoring system network vulnerability score S is defined. 31 The calculation formula is: Among them, X 31 The number of times the power monitoring system network was attacked within a week; The attack density of the power monitoring system network nodes is the frequency of the power monitoring network nodes being attacked, and the attack density of the power monitoring system network nodes is X 32 The calculation formula is: Among them, A max is the number of attacks on the link with the most attacks, C is the total number of attacks on the power monitoring system network; the attack density score S of the power monitoring system network node 32 The calculation formula is: The calculation formula of the network security vulnerability score S3 of the power monitoring system is defined as: <h2 style=";text-align:left;direction:ltr">S3 = ω3S<h2 style=";text-align:left;direction:ltr"> 31 <h2 style=";text-align:left;direction:ltr"> +ω4S<h2 style=";text-align:left;direction:ltr"> 32 Among them, S 31 Score the vulnerability of the power monitoring system network, S 32 It is used to score the attack density of the network nodes of the power monitoring system. ω3 and ω4 are weight factors, which can be adjusted according to the actual situation.

6. A method for assessing multi-dimensional vulnerability of a power monitoring system network as claimed in claim 5, characterized in that: The calculation of potential threat vulnerabilities uses the Common Vulnerability Scoring System (CVSS) to evaluate node vulnerabilities and identify weak links in the system. The detailed steps are as follows: The existence of anomalies or vulnerabilities in the power monitoring system network nodes that can be exploited by threats can reflect the potential threat vulnerability of the power monitoring system network. The calculation formula for the potential threat vulnerability of the power monitoring system network nodes is: L i =max(CVSS) Among them, L i is the potential threat vulnerability of the power monitoring system network node, CVSS is the score obtained according to the Common Vulnerability Scoring System, and the value range is [0,10]. Max(CVSS) is the maximum CVSS value of the anomaly or vulnerability in the power monitoring system network node that can be exploited by threats; According to actual measurements, when CVSS>7, it is a high-risk vulnerability with a wide impact range. The ratio of power monitoring system network nodes to power monitoring system network nodes is X 41 : Among them, L High is the number of nodes with high-risk vulnerabilities in the power monitoring system network, and N is the number of nodes in the power monitoring system network; the calculation formula for the potential threat vulnerability score S4 of the power monitoring system network is defined as:

7. A method for assessing multiple vulnerability of a power monitoring system network as claimed in claim 6, characterized in that: The above four scores are combined to calculate the total score of the multivariate vulnerability of the power monitoring system network, obtain the overall vulnerability level of the system, and classify the network vulnerability according to the total score to provide a reference for management and optimization, including the following steps: According to the multivariate vulnerability score of the power monitoring system network, the vulnerability of the power monitoring system network can be graded. The specific grading method is shown in the formula: The above grading method can provide a reference for subsequent management and optimization.

8. A multi-layer vulnerability assessment system for a power monitoring system network, based on a multi-layer vulnerability assessment method for a power monitoring system network according to any one of claims 1 to 7, characterized in that: Also includes, Building modules,establish the network logic model of the power monitoring system, which is defined as a,powered undirected network; The calculation module calculates the network load vulnerability score based on the established network logic model, considers the link load degree and the shortest path length, and evaluates the vulnerability of the network carrying capacity; The evaluation module further evaluates the network availability vulnerability based on the load evaluation, and analyzes the network's operational reliability under high load conditions by combining network availability and transmission stability; The analysis module analyzes network security vulnerabilities based on the impact of network security on system stability and evaluates the network's ability to resist external threats based on the number of attacks and the intensity of attacks; Identify modules, calculate potential threat vulnerabilities, use the Common Vulnerability Scoring System (CVSS) to assess node vulnerabilities, and identify weak links in the system; The optimization module combines the above four scores to calculate the total score of the multi-dimensional vulnerability of the power monitoring system network, derives the overall vulnerability level of the system, and grades the network vulnerability according to the total score to provide a reference for management and optimization.

9. A computer device comprising a memory and a processor, wherein the memory stores a computer program, wherein: When the processor executes the computer program, the steps of the method for assessing multiple network vulnerabilities of a power monitoring system according to any one of claims 1 to 7 are implemented.

10. A computer-readable storage medium having a computer program stored thereon, characterized in that: When the computer program is executed by a processor, the steps of a method for assessing multiple network vulnerabilities of a power monitoring system as claimed in any one of claims 1 to 7 are implemented.

Images