Power system network security situation analysis method based on coupling matrix

Abstract

The invention discloses a power system network security situation analysis method based on a coupling matrix, which belongs to the technical field of power system network security and comprises the following steps: establishing a power grid physical layer model and a power grid information layer model; carrying out information layer and physical layer coupling modeling through the incidence matrix; and based on different attack types, power grid security analysis and recovery strategy formulation are carried out. According to the method, detailed system state information is provided for network security situation analysis, the understanding of dynamic behaviors of the power system is improved, the comprehensiveness of network security analysis of the power system is improved, a scientific basis is provided for identifying and preventing potential security risks, meanwhile, the response capability of the system to network attacks is enhanced, and the safety of the system is improved. According to the method, the predictability and the precaution capability of network attacks are improved, the connectivity of an information layer matrix and the anti-interference capability of a physical layer to information layer signals are improved, the measurement vulnerability of the system is reduced, and the flexibility and the adaptability of network security protection of the power system are improved.

Description

Technical Field

[0001] The invention relates to the technical field of power system network security, and in particular to a power system network security situation analysis method based on a coupling matrix. Background Art

[0002] In today's information age, the stable operation of the power system depends on the support of highly complex information technology. As an important part of power system security, the research on network security situation analysis methods has always been the focus of academic and industrial circles. Early power system network security analysis mainly focused on physical layer protection, such as improving system reliability through physical isolation and redundant design. With the development of network technology, network security analysis methods based on the information layer have gradually emerged, including intrusion detection systems, security vulnerability scanning and risk assessment. These methods have improved the security protection capabilities of the power system to a certain extent, but there are still limitations in the deep integration analysis of the physical layer and information layer of the power grid.

[0003] However, the existing technology still has obvious shortcomings in practical applications. Traditional power system network security analysis methods often ignore the close coupling relationship between the physical layer and the information layer of the power grid, resulting in the analysis results being unable to fully reflect the security risks in actual operation. Although existing studies have attempted to combine the physical layer and information layer models, due to the lack of an effective association matrix, these methods have failed to accurately describe the interaction between the two layers during the modeling process, thereby affecting the accuracy of security analysis. When facing a variety of network attack types, the existing technology lacks targeted security analysis and recovery strategies, resulting in difficulty in achieving rapid response and effective recovery of power grid security in practical applications. The existing technology has not yet effectively integrated advanced technologies such as big data analysis and cloud computing to improve the real-time and accuracy of network security situation awareness. The power system network security situation analysis method based on the coupling matrix proposed in the present invention, in response to the above-mentioned shortcomings, establishes a more accurate coupling model to achieve a comprehensive analysis and effective prediction of the power grid security situation, thereby improving the security protection capability of the power system. Summary of the invention

[0004] In view of the above-mentioned problems, the present invention is proposed.

[0005] Therefore, the technical problem solved by the present invention is: the existing power system network security technical methods have low model accuracy, insufficient coupling analysis between the information layer and the physical layer, poor security situation assessment performance, and how to achieve efficient and accurate network security situation assessment and early warning.

[0006] To solve the above technical problems, the present invention provides the following technical solutions: a method for analyzing the network security situation of an electric power system based on a coupling matrix, comprising establishing a physical layer model of a power grid and an information layer model of a power grid; performing information layer and physical layer coupling modeling through an association matrix; and formulating power grid security analysis and recovery strategies based on different attack types.

[0007] As a preferred solution of the method for analyzing power system network security situation based on coupling matrix described in the present invention, wherein: the establishment of the physical layer model of the power grid includes establishing mathematical models of transmission lines, transformers, generators and loads, and establishing the physical layer model P(x) of the power system, x = [x1, x2, ..., x n ] is a vector describing the state of each node in the power system, including voltage V, current I, power P, and the dynamic behavior of the power system, expressed as:

[0008]

[0009] Among them, matrix A is the system state matrix, which describes the dynamic characteristics of the physical layer, and matrix B is the control input matrix, which describes the influence of the information layer signal on the physical layer state.

[0010] As a preferred solution of the method for analyzing the network security situation of a power system based on a coupling matrix according to the present invention, wherein: the establishment of the power grid information layer model includes establishing a model of the communication protocol, data transmission path and control signal transmission in the power system, and constructing an information layer model I(u) of the power system, where u = [u1, u2, ..., u m ] is the information layer control variable vector, which contains the information parameters of control signal C, communication delay τ, and data transmission rate δ. The information layer model is established through the node-edge matrix H to describe the topological structure of the information network, which is expressed as:

[0011] C=H·u

[0012] Where H is an m×m sparse matrix, and the element h ij Describe the information signal u j The propagation relationship between node i and node j, C = [C1, C2, ..., C m ] is the control signal vector of the information layer.

[0013] As a preferred solution of the method for analyzing the network security situation of a power system based on a coupling matrix according to the present invention, the information layer and physical layer coupling modeling includes defining a power communication coupling matrix A, describing the information layer variable u j For the physical layer variable x i The degree of influence of physical layer variables x i For information layer variable u jThe feedback effect of the correlation matrix A is ii Definition, expressed as:

[0014]

[0015] Among them, the first Indicates the information layer signal u j For the physical layer variable x i The direct impact of the second Indicates the physical layer status x i For information layer signal u j The feedback effect of the matrix is ​​n×m, where n is the number of physical layer state variables and m is the number of information layer control variables.

[0016] As a preferred solution of the method for analyzing power system network security situation based on coupling matrix described in the present invention, the information layer and physical layer coupling modeling also includes defining an information-physical coupling model, by combining the physical layer model P(x) and the information layer model I(u) with the power communication coupling matrix A, an information-physical coupling model M(x, u) is established, and the model describes the interaction between the information layer and the physical layer, which is expressed as:

[0017] M(x,u)=P(x)+A·I(u)

[0018] Among them, P(x) is the function of the physical layer state vector, A·I(u) is the influence of the information layer on the physical layer, and the coupling model reflects the response behavior of the physical layer of the power system under different information layer signal control and interference.

[0019] As a preferred solution of the method for analyzing power system network security situation based on coupling matrix described in the present invention, the formulation of the power grid security analysis and restoration strategy includes performing small signal stability analysis on the coupling model M(x, u), evaluating the stability of the power system by using the eigenvalue analysis method, and analyzing the dynamic behavior of the system under small disturbances, which is expressed as:

[0020] λ i =eig(A+ΔA)

[0021] Among them, λ i is the system eigenvalue, ΔA is the change of the correlation matrix A caused by information layer attack or failure. By analyzing the real and imaginary parts of the eigenvalue, the stability and response characteristics of the system can be judged.

[0022] As a preferred solution of the coupling matrix-based power system network security situation analysis method described in the present invention, the formulation of the power grid security analysis and recovery strategy includes identifying and predicting potential security risks on the basis of simulation analysis, optimizing the configuration of the power communication coupling matrix A, and formulating emergency response strategies for different types of network threats.

[0023] When facing a denial of service attack, a strategy of redundant design or dynamic adjustment of information transmission path is proposed to improve the element h in the information layer matrix H. ij connectivity.

[0024] When attacking data tampering, reduce the weight of the physical model of key nodes on the information signal Reduce the measurement vulnerability of the system.

[0025] When attacking malicious control commands, reduce the impact weight of key node information signals on the physical layer Enhance the physical layer's ability to resist interference with information layer signals.

[0026] Automatically adjust control signal paths or cyber-physical model parameters based on different attack types.

[0027] Another object of the present invention is to provide a power system network security situation analysis system based on a coupling matrix, which can perform information layer and physical layer coupling modeling through an association matrix, thereby solving the problem of inaccurate analysis results in current power system network security technology.

[0028] As a preferred solution of the power system network security situation analysis system based on coupling matrix described in the present invention, it includes: a model building module, a coupling module, and a security defense strategy module;

[0029] The model building module is used to establish a physical layer model of the power grid and an information layer model of the power grid; the coupling module is used to perform information-physical coupling modeling through an association matrix; and the security defense strategy module is used to perform power grid security analysis and formulate recovery strategies based on different attack types.

[0030] A computer device comprises a memory and a processor, wherein the memory stores a computer program, and the processor executes the computer program to implement the steps of a method for analyzing power system network security situation based on a coupling matrix.

[0031] A computer-readable storage medium stores a computer program, which, when executed by a processor, implements the steps of a method for analyzing the network security situation of a power system based on a coupling matrix.

[0032] Beneficial effects of the present invention: The coupling matrix-based power system network security situation analysis method provided by the present invention establishes a physical layer model of the power grid and an information layer model of the power grid, thereby improving the understanding of the dynamic behavior of the power system, providing detailed system status information for network security situation analysis, and enhancing the accuracy and reliability of the analysis. Through the association matrix, information layer and physical layer coupling modeling is performed to accurately represent the degree of influence of information layer variables on physical layer variables and the feedback effect of physical layer status on information layer signals, thereby improving the comprehensiveness of power system network security analysis, providing a scientific basis for identifying and preventing potential security risks, and enhancing the system's response capability to network attacks. Based on different attack types, power grid security analysis and recovery strategy formulation are carried out, and small signal stability analysis is carried out to achieve accurate evaluation of the system dynamic behavior under small disturbances, thereby ensuring the stable operation of the power system, identifying and predicting potential security risks, and improving the predictability and prevention capabilities of network attacks. Corresponding emergency response strategies are formulated for different types of attacks such as denial of service attacks, data tampering attacks, and malicious control command attacks, which improve the connectivity of the information layer matrix and the anti-interference ability of the physical layer to the information layer signals, reduce the measurement vulnerability of the system, automatically adjust the control signal path or information-physical model parameters, and improve the flexibility and adaptability of power system network security protection. The present invention has achieved better results in terms of system security, analysis accuracy, and emergency response efficiency. BRIEF DESCRIPTION OF THE DRAWINGS

[0033] In order to more clearly illustrate the technical solutions of the embodiments of the present invention, the accompanying drawings required for use in the description of the embodiments will be briefly introduced below. Obviously, the accompanying drawings described below are only some embodiments of the present invention. For ordinary technicians in this field, other accompanying drawings can be obtained based on these accompanying drawings without paying creative work.

[0034] Figure 1 An overall flow chart of a method for analyzing power system network security situation based on a coupling matrix provided in the first embodiment of the present invention.

[0035] Figure 2 A flowchart of an association model construction of a coupling matrix-based power system network security situation analysis method provided in a second embodiment of the present invention.

[0036] Figure 3 A 30-node system sub-region topology diagram of a coupling matrix-based power system network security situation analysis method provided in the second embodiment of the present invention.

[0037] Figure 4A diagram of the number of overloaded lines after a system node of a coupling matrix-based power system network security situation analysis method is attacked by false data injection, which is provided in the second embodiment of the present invention.

[0038] Figure 5 A connectivity rate diagram of a system line after being attacked by false data injection in a method for analyzing power system network security situation based on a coupling matrix provided in a second embodiment of the present invention.

[0039] Figure 6 An overall flow chart of a coupling matrix-based power system network security situation analysis system provided in the third embodiment of the present invention. DETAILED DESCRIPTION

[0040] In order to make the above-mentioned purposes, features and advantages of the present invention more obvious and easy to understand, the specific implementation methods of the present invention are described in detail below in conjunction with the drawings of the specification. Obviously, the described embodiments are part of the embodiments of the present invention, but not all of the embodiments. Based on the embodiments of the present invention, all other embodiments obtained by ordinary persons in the art without creative work should fall within the scope of protection of the present invention.

[0041] Example 1, reference Figure 1 , is an embodiment of the present invention, and provides a method for analyzing power system network security situation based on a coupling matrix, comprising:

[0042] S1: Establish a physical layer model of the power grid and establish an information layer model of the power grid.

[0043] Furthermore, establishing the physical layer model of the power grid includes establishing mathematical models of transmission lines, transformers, generators and loads, and establishing the physical layer model P(x) of the power system, where x = [x1, x2, ..., x n ] is a vector describing the state of each node in the power system, including voltage V, current I, power P, and the dynamic behavior of the power system, expressed as:

[0044]

[0045] Among them, matrix A is the system state matrix, which describes the dynamic characteristics of the physical layer, and matrix B is the control input matrix, which describes the influence of the information layer signal on the physical layer state.

[0046] It should be noted that establishing the power grid information layer model includes establishing the communication protocol, data transmission path and control signal transmission model in the power system, and constructing the information layer model I(u) of the power system, where u = [u1, u2, ..., u m] is the information layer control variable vector, which contains the information parameters of control signal C, communication delay τ, and data transmission rate δ. The information layer model is established through the node-edge matrix H to describe the topological structure of the information network, which is expressed as:

[0047] C=H·u

[0048] Where H is an m×m sparse matrix, and the element h ij Describe the information signal u j The propagation relationship between node i and node j, C = [C1, C2, ..., C m ] is the control signal vector of the information layer.

[0049] It should also be noted that the establishment of the physical layer model of the power grid and the information layer model of the power grid improves the understanding of the dynamic behavior of the power system, provides detailed system status information for network security situation analysis, and enhances the accuracy and reliability of the analysis.

[0050] S2: Model the coupling between the information layer and the physical layer through the correlation matrix.

[0051] Furthermore, the information layer and physical layer coupling modeling includes defining the power communication coupling matrix A, describing the information layer variable u j For the physical layer variable x i The degree of influence of the physical layer variable x i For information layer variable u j The feedback effect of the correlation matrix A is ii Definition, expressed as:

[0052]

[0053] Among them, the first Indicates the information layer signal u j For the physical layer variable x i The direct impact of the second Indicates the physical layer status x i For information layer signal u j The feedback effect of the matrix is ​​n×m, where n is the number of physical layer state variables and m is the number of information layer control variables.

[0054] It should be noted that the information layer and physical layer coupling modeling also includes defining the information-physical coupling model. By combining the physical layer model P(x) and the information layer model I(u) with the power communication coupling matrix A, an information-physical coupling model M(x, u) is established. The model describes the interaction between the information layer and the physical layer, which is expressed as:

[0055] M(x,u)=P(x)+A·I(u)

[0056] Among them, P(x) is the function of the physical layer state vector, A·I(u) is the influence of the information layer on the physical layer, and the coupling model reflects the response behavior of the physical layer of the power system under different information layer signal control and interference.

[0057] It should also be noted that by using the correlation matrix to model the coupling of the information layer and the physical layer, the influence of the information layer variables on the physical layer variables and the feedback effect of the physical layer status on the information layer signals can be accurately represented, which improves the comprehensiveness of the power system network security analysis, provides a scientific basis for identifying and preventing potential security risks, and enhances the system's response capabilities to network attacks.

[0058] S3: Conduct grid security analysis and formulate recovery strategies based on different attack types.

[0059] Furthermore, the grid security analysis and restoration strategy formulation include small signal stability analysis of the coupled model M(x,u), using eigenvalue analysis to evaluate the stability of the power system and analyze the dynamic behavior of the system under small disturbances, expressed as:

[0060] λ i =eig(A+ΔA)

[0061] Among them, λ i is the system eigenvalue, ΔA is the change of the correlation matrix A caused by information layer attack or failure. By analyzing the real and imaginary parts of the eigenvalue, the stability and response characteristics of the system can be judged.

[0062] It should be noted that the formulation of power grid security analysis and recovery strategies includes identifying and predicting potential security risks, optimizing the configuration of the power communication coupling matrix A, and formulating emergency response strategies for different types of network threats based on simulation analysis.

[0063] When facing a denial of service attack, a strategy of redundant design or dynamic adjustment of information transmission path is proposed to improve the element h in the information layer matrix H. ij connectivity.

[0064] When attacking data tampering, reduce the weight of the physical model of key nodes on the information signal Reduce the measurement vulnerability of the system.

[0065] When attacking malicious control commands, reduce the impact weight of key node information signals on the physical layer Enhance the physical layer's ability to resist interference with information layer signals.

[0066] Automatically adjust control signal paths or cyber-physical model parameters based on different attack types.

[0067] It should also be noted that based on different types of attacks, power grid security analysis and recovery strategy formulation are carried out, and small signal stability analysis is carried out to achieve accurate evaluation of the system dynamic behavior under small disturbances, ensuring the stable operation of the power system, identifying and predicting potential security risks, and improving the predictability and prevention capabilities of network attacks. Corresponding emergency response strategies are formulated for different types of attacks such as denial of service attacks, data tampering attacks, and malicious control command attacks. The connectivity of the information layer matrix and the anti-interference ability of the physical layer to the information layer signals are improved, the measurement vulnerability of the system is reduced, and the control signal path or information-physical model parameters are automatically adjusted to improve the flexibility and adaptability of power system network security protection.

[0068] Example 2, reference Figure 2-Figure 5 , which is an embodiment of the present invention, provides a method for analyzing the network security situation of a power system based on a coupling matrix. In order to verify the beneficial effects of the present invention, scientific demonstration is carried out through economic benefit calculation and simulation experiments.

[0069] First, a typical power system is simulated. The simulation example uses the IEEE30-node power grid topology and related parameters in the IEEE database, and uses matlab simulation programming to calculate the DC power flow equation and simulate the consequences of the information network being attacked. The associated model and security situation analysis process are as follows Figure 2 As shown in the figure, in this simulation, the IEEE 30-node system is used to form the distribution network CPS. Figure 3 As shown in the figure, the system can be divided into three areas, and the robustness of the system when it is attacked by DoS and false data injection is studied respectively. It is assumed that a false data injection attack occurs at the regional node, and the false data injection value is 0.1 to 0.8 times the initial value. Through the simulation results Figure 4 It can be seen that there are more vulnerable nodes in area 2. There are fewer generators and more loads in this area, so the adjustability of the generators is poor. Nodes #3, #4, #13, #14, #16, #18, #19, #21, #23, and #30 in the system are vulnerable nodes. The impact of a single line being attacked by false data injection on the system connectivity rate is studied. By forging line power overload, the information system protection device is caused to malfunction. Two scenarios are set respectively. Scenario 1 does not take protective devices. Scenario 2 reduces the influence coefficient in the power communication coupling matrix and the influence coefficient of the information layer on the physical layer. It was reduced by 20%, thereby reducing the false operation rate of the protection device, and testing the impact of cascading failures on the system caused by overload disconnection. Figure 5 The horizontal axis represents the line ID number in each system, and the vertical axis represents the proportion of remaining valid nodes after a cascading failure occurs in the system, that is, the connectivity rate; from the experimental results, it can be obtained that the present invention can effectively analyze the further spread of the attack and achieve effective isolation of the attack.

[0070] Example 3, reference Figure 6 , which is an embodiment of the present invention, provides a power system network security situation analysis system based on a coupling matrix, including a model building module, a coupling module, and a security defense strategy module.

[0071] The model building module is used to establish the physical layer model of the power grid and the information layer model of the power grid; the coupling module is used to perform information-physical coupling modeling through the association matrix; and the security defense strategy module is used to conduct power grid security analysis and formulate recovery strategies based on different attack types.

[0072] If the function is implemented in the form of a software functional unit and sold or used as an independent product, it can be stored in a computer-readable storage medium. Based on this understanding, the technical solution of the present invention, or the part that contributes to the prior art, or the part of the technical solution, can be embodied in the form of a software product. The computer software product is stored in a storage medium, including several instructions for a computer device (which can be a personal computer, server, or network device, etc.) to perform all or part of the steps of the methods of each embodiment of the present invention. The aforementioned storage medium includes: U disk, mobile hard disk, read-only memory (ROM, Read-Only Memory), random access memory (RAM, Random Access Memory), disk or optical disk, etc. Various media that can store program codes.

[0073] The logic and / or steps represented in the flowchart or otherwise described herein, for example, can be considered as an ordered list of executable instructions for implementing logical functions, and can be embodied in any computer-readable medium for use by an instruction execution system, device or apparatus (such as a computer-based system, a system including a processor, or other system that can fetch instructions from an instruction execution system, device or apparatus and execute instructions), or in conjunction with such instruction execution systems, devices or apparatuses. For the purposes of this specification, "computer-readable medium" can be any device that can contain, store, communicate, propagate or transmit a program for use by an instruction execution system, device or apparatus, or in conjunction with such instruction execution systems, devices or apparatuses.

[0074] More specific examples of computer-readable media (a non-exhaustive list) include the following: an electrical connection with one or more wires (electronic device), a portable computer disk case (magnetic device), a random access memory (RAM), a read-only memory (ROM), an erasable and programmable read-only memory (EPROM or flash memory), an optical fiber device, and a portable compact disk read-only memory (CDROM). In addition, the computer-readable medium may even be a paper or other suitable medium on which the program is printed, since the program may be obtained electronically, for example, by optically scanning the paper or other medium, followed by editing, deciphering, or processing in another suitable manner as necessary, and then stored in a computer memory.

[0075] It should be understood that the various parts of the present invention can be implemented by hardware, software, firmware or a combination thereof. In the above-mentioned embodiments, multiple steps or methods can be implemented by software or firmware stored in a memory and executed by a suitable instruction execution system. For example, if implemented by hardware, as in another embodiment, it can be implemented by any one of the following technologies known in the art or their combination: a discrete logic circuit having a logic gate circuit for implementing a logic function for a data signal, a dedicated integrated circuit having a suitable combination of logic gate circuits, a programmable gate array (PGA), a field programmable gate array (FPGA), etc. It should be noted that the above embodiments are only used to illustrate the technical solution of the present invention and are not limited. Although the present invention is described in detail with reference to the preferred embodiments, it should be understood by those skilled in the art that the technical solution of the present invention can be modified or replaced by equivalents without departing from the spirit and scope of the technical solution of the present invention, which should be included in the scope of the claims of the present invention.

[0076] It should be noted that the above embodiments are only used to illustrate the technical solutions of the present invention rather than to limit it. Although the present invention has been described in detail with reference to the preferred embodiments, those skilled in the art should understand that the technical solutions of the present invention may be modified or replaced by equivalents without departing from the spirit and scope of the technical solutions of the present invention, which should all be included in the scope of the claims of the present invention.

Claims

1. A method for analyzing power system network security situation based on coupling matrix, characterized in that: include: Establish a physical layer model of the power grid and establish an information layer model of the power grid; Through the correlation matrix, the information layer and physical layer coupling modeling is carried out; Conduct power grid security analysis and formulate recovery strategies based on different attack types.

2. The method for analyzing power system network security situation based on coupling matrix according to claim 1, characterized in that: The physical layer model of the power grid is established by establishing mathematical models of transmission lines, transformers, generators and loads, and establishing a physical layer model P(x) of the power system, where x = [x1, x2, ..., x n ] is a vector describing the state of each node in the power system, including voltage V, current I, power P, and the dynamic behavior of the power system, expressed as: Among them, matrix A is the system state matrix, which describes the dynamic characteristics of the physical layer, and matrix B is the control input matrix, which describes the influence of the information layer signal on the physical layer state.

3. The method for analyzing power system network security situation based on coupling matrix according to claim 2, characterized in that: The establishment of the power grid information layer model includes establishing a communication protocol, a data transmission path and a control signal transmission model in the power system, and constructing an information layer model I(u) of the power system, where u = [u1, u2, ..., u m ] is the information layer control variable vector, which contains the information parameters of control signal C, communication delay τ, and data transmission rate δ. The information layer model is established through the node-edge matrix H to describe the topological structure of the information network, which is expressed as: C=H·u Where H is an m×m sparse matrix, and the element h ij Describe the information signal u j The propagation relationship between node i and node j, C = [C1, C2, ..., C m ] is the control signal vector of the information layer.

4. The method for analyzing power system network security situation based on coupling matrix according to claim 3, characterized in that: The information layer physical layer coupling modeling includes defining the power communication coupling matrix A, describing the information layer variable u j For the physical layer variable x i The degree of influence of physical layer variables x i For information layer variable u j The feedback effect of the correlation matrix A is ii Definition, expressed as: Among them, the first Indicates the information layer signal u j For the physical layer variable x i The direct impact of the second Indicates the physical layer status x i For information layer signal u j The feedback effect of the matrix is ​​n×m, where n is the number of physical layer state variables and m is the number of information layer control variables.

5. The method for analyzing power system network security situation based on coupling matrix according to claim 4, characterized in that: The information layer and physical layer coupling modeling also includes defining an information-physical coupling model, by combining the physical layer model P(x) and the information layer model I(u) with the power communication coupling matrix A, to establish an information-physical coupling model M(x,u), the model describing the interaction between the information layer and the physical layer, which is expressed as: M(x,u)=P(x)+A·I(u) Among them, P(x) is a function of the physical layer state vector, A·I(u) is the influence of the information layer on the physical layer, and the coupling model reflects the response behavior of the physical layer of the power system under different information layer signal control and interference.

6. The method for analyzing power system network security situation based on coupling matrix according to claim 5, characterized in that: The grid security analysis and restoration strategy formulation include small signal stability analysis of the coupling model M(x,u), using eigenvalue analysis to evaluate the stability of the power system, and analyzing the dynamic behavior of the system under small disturbances, expressed as: l i =eig(A+ΔA) Among them, λ i is the system eigenvalue, ΔA is the change of the correlation matrix A caused by information layer attack or failure. By analyzing the real and imaginary parts of the eigenvalue, the stability and response characteristics of the system can be judged.

7. The method for analyzing power system network security situation based on coupling matrix according to claim 6, characterized in that: The formulation of the power grid security analysis and recovery strategy includes identifying and predicting potential security risks, optimizing the configuration of the power communication coupling matrix A, and formulating emergency response strategies for different types of network threats based on simulation analysis; When facing a denial of service attack, a strategy of redundant design or dynamic adjustment of information transmission path is proposed to improve the element h in the information layer matrix H. ij connectivity; When attacking data tampering, reduce the weight of the physical model of key nodes on the information signal Reduce the measurement vulnerability of the system; When attacking malicious control commands, reduce the impact weight of key node information signals on the physical layer Enhance the anti-interference capability of the physical layer to the information layer signals; Automatically adjust control signal paths or cyber-physical model parameters based on different attack types.

8. A system using the method for analyzing power system network security situation based on coupling matrix as claimed in any one of claims 1 to 7, characterized in that: Including model building module, coupling module, and security defense strategy module; The model building module is used to build a physical layer model of the power grid and a power grid information layer model; The coupling module is used to perform cyber-physical coupling modeling through an association matrix; The security defense strategy module is used to perform power grid security analysis and formulate recovery strategies based on different attack types.

9. A computer device comprising a memory and a processor, wherein the memory stores a computer program, wherein: When the processor executes the computer program, the steps of the method for analyzing power system network security situation based on a coupling matrix according to any one of claims 1 to 7 are implemented.

10. A computer-readable storage medium having a computer program stored thereon, characterized in that: When the computer program is executed by a processor, the steps of the method for analyzing power system network security situation based on a coupling matrix according to any one of claims 1 to 7 are implemented.

Images