Method and device for identifying network hardware assets of electric power industrial control system of digital substation

Abstract

The invention discloses a digital substation electric power industrial control system network hardware asset identification method and device, relates to the technical field of electric power industrial control system asset identification, and aims to identify relevance between to-be-accessed target hardware assets and existing assets by calculating similarity and update a hardware asset library in time. False report and confusion caused by network change are reduced, and efficiency and accuracy of network management are improved. The method comprises the following steps: constructing a hardware asset attribute index; preprocessing the hardware asset data of each hardware asset according to the hardware asset attribute indexes, and constructing a hardware asset library; in response to the hardware asset access request, obtaining a to-be-accessed target hardware asset, preprocessing target hardware asset data of the target hardware asset to obtain a target attribute sequence, and calculating the similarity between the target hardware asset and each hardware asset by using the target attribute sequence; and updating the hardware asset library by referring to the similarity between the target hardware asset and each hardware asset.

Description

Technical Field

[0001] The present application relates to the technical field of asset identification of power industrial control systems, and in particular to a method and device for identifying network hardware assets of a power industrial control system of a digital substation. Background Art

[0002] With the acceleration of the digital transformation of the power industry, the efficiency and safety of the operation and maintenance management of digital substations, as an important part of the power system, are increasingly valued. The power industrial control system of the digital substation integrates advanced technologies in multiple fields such as power engineering, industrial control, network communication and information technology, and realizes precise control and efficient management of the power production process. In this complex system, accurate identification and efficient management of network hardware assets are of vital importance to ensure the safe and stable operation of power equipment, improve operation and maintenance efficiency, and reduce the risk of failure.

[0003] In related technologies, network scanning technology based on active detection is commonly used to identify assets. This technology quickly discovers online assets in the network by sending data packets of protocols such as ICMP, TCP or UDP to the target network assets and monitoring the responses of the devices, thereby obtaining key information such as their IP addresses and MAC addresses.

[0004] However, the applicant recognizes that when the target host is in a non-survival state (such as shutting down, maintenance or failure), the active detection data packet cannot receive an effective response, causing the device to be omitted from the identification results, seriously affecting the integrity of the asset information; moreover, when the active detection mechanism triggers a device response, it may receive unexpected or false asset responses due to factors such as complex network environment, differences in device configuration or human interference. This phenomenon is particularly serious in network environments with high mobility and frequent device updates, increasing the risk of false alarms and confusion, and posing challenges to subsequent network management and security analysis. Summary of the invention

[0005] In view of this, the present application provides a method and device for identifying network hardware assets of a digital substation power industrial control system. The main purpose is to solve the problem that the current actively detected data packets cannot receive an effective response, resulting in the device being omitted from the identification results, seriously affecting the integrity of the asset information, and increasing the risk of false alarms and confusion, bringing challenges to subsequent network management and security analysis.

[0006] According to the first aspect of the present application, a method for identifying network hardware assets of a digital substation power industrial control system is provided, the method comprising:

[0007] Construct the hardware asset attribute indicators of the digital substation power industrial control system cyberspace;

[0008] Preprocessing the hardware asset data of each hardware asset in the network space of the digital substation power industrial control system according to the hardware asset attribute index, and constructing a hardware asset library of the network space of the digital substation power industrial control system using the preprocessed hardware asset data;

[0009] In response to a hardware asset access request, a target hardware asset to be accessed is obtained, target hardware asset data of the target hardware asset is preprocessed to obtain a target attribute sequence, and similarity between the target hardware asset and each of the hardware assets is calculated using the target attribute sequence;

[0010] The hardware asset library is updated with reference to the similarity between the target hardware asset and each of the hardware assets.

[0011] Optionally, the hardware asset attribute indicators for constructing the digital substation power industrial control system cyberspace include:

[0012] The hardware asset attributes of the hardware assets included in the digital substation power industrial control system network are divided into basic attributes C 1 、Network Configuration Properties C 2 , Performance attributes C 3 , location attribute C 4 , and the basic attribute C 1 , the network configuration attribute C 2 , the performance attribute C 3 , the location attribute C 4 As a primary indicator in the hardware asset feature library of the digital substation power industrial control system network;

[0013] They are the basic attributes C 1 , the network configuration attribute C 2 , the performance attribute C 3 , the location attribute C 4 Configure secondary indicators to obtain hardware asset attribute indicators of the digital substation power industrial control system network space;

[0014] Among them, the basic attribute C 1 The secondary indicator configured is the device name C 11 、Equipment Manufacturer C 12 、Device Model C 13 、Device serial number C 14 ; The network configuration attribute C 2 The configured secondary indicator is IP address C 21 、MAC address C 22 , operating system version number C 23 , Subnet Mask C24 、Default Gateway C 25 、DNS server C 26 , Port Protocol C 27 , open port C 28 , Run Service C 29 ; The performance attribute C 3 The secondary indicator configured is CPU type C 31 、Memory Type C 32 、HDD Type C 33 ; The location attribute C 4 The secondary indicator configured is the physical location C 41 , logical position C 42 .

[0015] Optionally, preprocessing the hardware asset data of each hardware asset in the digital substation power industrial control system network space according to the hardware asset attribute index, and constructing a hardware asset library of the digital substation power industrial control system network space by using the preprocessed hardware asset data includes:

[0016] For the i-th hardware asset among the N hardware assets included in the digital substation power industrial control system network space, obtain the basic attributes of the i-th hardware asset Network Configuration Properties Performance attributes and location attributes Wherein, N is a positive integer, and the value of i ranges from 1 to N;

[0017] The basic attributes of the i-th hardware asset The Chinese characters in the text are converted into English characters, and the basic attributes after the conversion are The device name in the next secondary index Equipment Manufacturers Device Model Device serial number Perform encoding processing to obtain the encoded sequence

[0018] Set the network configuration attribute of the i-th hardware asset The Chinese characters in the text are converted into English characters, and the network configuration properties after the conversion are The IP address in the next secondary index MAC Address Operating system version number Subnet Mask Default Gateway DNS Server Port Protocol Open Ports Running the service Perform encoding processing to obtain the encoded sequence

[0019] The performance attribute of the i-th hardware asset The Chinese characters in the text are converted into English characters, and the properties of the converted characters are CPU type in the next secondary indicator Memory type Hard Drive Type Perform encoding processing to obtain the encoded sequence

[0020] The location attribute for the i-th hardware asset The physical location in the next level index Logical location Perform encoding processing to obtain the encoded sequence

[0021] Using the sequence The sequence The sequence and the sequence Construct the attribute sequence X of the i-th hardware asset i , where the attribute sequence X i Including the basic attributes The eigenvector of The network configuration properties The eigenvector of Described Performance Attributes The eigenvector of and the location attribute The eigenvector of The feature vector By element Composition; the feature vector By element Composition; the feature vector By element Composition; the feature vector By element composition;

[0022] The attribute sequence X of N hardware assets is used to form the hardware asset library of the digital substation power industrial control system network space.

[0023] Optionally, the location attribute of the i-th hardware asset The physical location in the next level index Logical location Perform encoding processing, including:

[0024] Identify the physical location of the i-th hardware asset, and when the physical location of the i-th hardware asset is within the scope of the digital substation office building, The result after encoding The value of is set to 1, and when the physical location of the i-th hardware asset is not in the office building of the digital substation, the physical location of the i-th hardware asset is set to The result after encoding The value of is set to 0;

[0025] Identify the logical location of the i-th hardware asset, and when the logical location of the i-th hardware asset is connected to the secondary subnet of the substation, The result after encoding The value of is set to 1, and when the logical location of the i-th hardware asset is not connected to the secondary subnet of the substation, the logical location of the i-th hardware asset is The result after encoding The value of is set to 0.

[0026] Optionally, the preprocessing of the target hardware asset data of the target hardware asset to obtain a target attribute sequence includes:

[0027] Define the target hardware asset as the kth hardware asset BC k , the kth hardware asset BC k The hardware asset attributes are divided into basic attributes Network Configuration Properties Performance attributes Location attributes Among them, the value of k is a positive integer, and the basic attribute Include device name Equipment Manufacturers Device Model Device serial number The network configuration properties Include IP address MAC Address Operating system version number Subnet Mask Default Gateway DNS Server Port Protocol Open Ports Running the service Described Performance Attributes Including CPU type Memory type Hard Drive Type The location attribute Include physical location Logical location

[0028] The kth hardware asset BC k Basic properties The Chinese characters in the text are converted into English characters, and the basic attributes after the conversion are The device name in the next secondary index Equipment Manufacturers Device Model Device serial number Perform encoding processing to obtain the encoded sequence

[0029] The kth hardware asset BC k Network configuration properties The Chinese characters in the text are converted into English characters, and the network configuration properties after the conversion are The IP address in the next secondary index MAC Address Operating system version number Subnet Mask Default Gateway DNS Server Port Protocol Open Ports Running the service Perform encoding processing to obtain the encoded sequence

[0030] The kth hardware asset BC k Performance attributes The Chinese characters in the text are converted into English characters, and the properties of the converted characters are CPU type in the next secondary indicator Memory type Hard Drive Type Perform encoding processing to obtain the encoded sequence

[0031] For the kth hardware asset BC k Location attributes The physical location in the next level index Logical location Perform encoding processing to obtain the encoded sequence

[0032] Using the sequence The sequence The sequence and the sequence Construct the kth hardware asset BC k The target attribute sequence Y k , where the target attribute sequence Y k Including the basic attributes The eigenvector of The network configuration properties The eigenvector of Described Performance Attributes The eigenvector of and the location attribute The eigenvector of The feature vector By element Composition; the feature vector By element Composition; the feature vector By element Composition; the feature vector By element composition.

[0033] Optionally, the kth hardware asset BC k Location attributes The physical location in the next level index Logical location Perform encoding processing, including:

[0034] Identify the physical location of the k-th hardware asset, and when the physical location of the k-th hardware asset is within the scope of the digital substation office building, The result after encoding The value of is set to 1, and when the physical location of the k-th hardware asset is not in the office building of the digital substation, the physical location of the k-th hardware asset is set to The result after encoding The value of is set to 0;

[0035] Identify the logical location of the k-th hardware asset, and when the logical location of the k-th hardware asset is connected to the secondary subnet of the substation, The result after encoding The value of is set to 1, and when the logical location of the k-th hardware asset is not connected to the substation secondary subnet, the logical location of the k-th hardware asset is set to The result after encoding The value of is set to 0.

[0036] Optionally, the calculating the similarity between the target hardware asset and each of the hardware assets by using the target attribute sequence includes:

[0037] Define the target hardware asset as the kth hardware asset BC k , use the following formula to calculate the basic attributes of the kth hardware asset The basic attributes of the ith hardware asset in the hardware asset library The cosine distance

[0038]

[0039] in, represents the feature vector of the k-th hardware asset under basic attributes, represents the characteristic vector of the i-th hardware asset under the basic attributes, || || represents the calculation of the vector modulus, · represents the scalar multiplication operation, and × represents the vector multiplication operation;

[0040] The network configuration attribute of the kth hardware asset is calculated using the following formula: The network configuration attribute of the ith hardware asset in the hardware asset library The cosine distance

[0041]

[0042] in, represents the feature vector of the k-th hardware asset under the network configuration attributes, A feature vector representing the i-th hardware asset under the network configuration attribute;

[0043] The performance attribute of the kth hardware asset is calculated using the following formula: The performance attribute of the ith hardware asset in the hardware asset library The cosine distance

[0044]

[0045] in, represents the feature vector of the k-th hardware asset under the performance attribute, A feature vector representing the performance attribute of the i-th hardware asset;

[0046] The location attribute of the kth hardware asset is calculated using the following formula: The location attribute of the i-th hardware asset in the hardware asset library The cosine distance

[0047]

[0048] in, represents the feature vector of the k-th hardware asset under the location attribute, A feature vector representing the i-th hardware asset under the location attribute;

[0049] The first total similarity S of the k-th hardware asset and the i-th hardware asset in the hardware asset library is calculated using the following formula: total (BC k ,X i ):

[0050]

[0051] in, is the weight of the basic attribute, Configure the weights of the network attributes, is the weight of the performance attribute, is the weight of the location attribute;

[0052] Repeat the above calculation process to obtain the kth hardware asset BC k The first total similarity with each hardware asset in the hardware asset library, and the first total similarity based on the k-th hardware asset BC k Calculate the k-th hardware asset BC with the first total similarity of each hardware asset in the hardware asset library k The second total similarity S with the i-th hardware asset in the hardware asset library final (BC k ), complete the calculation of the similarity between the target hardware asset and each of the hardware assets.

[0053] Optionally, the k-th hardware asset BC k Calculate the k-th hardware asset BC with the first total similarity of each hardware asset in the hardware asset library k The second total similarity S with the i-th hardware asset in the hardware asset library final (BC k ),include:

[0054] Obtain the maximum first total similarity S from all the calculated first total similarities MAX (BC k ), determine the maximum first total similarity S MAX (BC k )The device type of the corresponding hardware asset TypeMAX ;

[0055] Use the following formula to determine the kth hardware asset BC k Hardware asset type Type (BC k ):

[0056]

[0057] Wherein, T is the first threshold;

[0058] The kth hardware asset BC is calculated using the following formula: k Belongs to the device type Type MAX The probability P(Type MAX |BC k ):

[0059]

[0060] Wherein, χ represents the number of hardware assets in the hardware asset library that are of the same type as the i-th hardware asset;

[0061] The kth hardware asset BC is calculated using the following formula: k The second total similarity S with the i-th hardware asset final (BC k ):

[0062]

[0063] Among them, W k Used to represent the kth hardware asset BC k Basic properties Network Configuration Properties Performance attributes and location attributes The number of attributes that are consistent with the corresponding attributes of the i-th hardware asset.

[0064] Optionally, updating the hardware asset library by referring to the similarity between the target hardware asset and each of the hardware assets includes:

[0065] Get the second threshold T threshold , the second total similarity S final (BC k ) and the second threshold T threshold Compare and obtain the comparison result, wherein, in the second total similarity S final (BC k ) is greater than or equal to the second threshold value T threshold When the kth hardware asset BC is generated kis the comparison result of the known hardware asset type, and the second total similarity S final (BC k ) is less than the second threshold value T threshold When the kth hardware asset BC is generated k Comparison results for unknown hardware asset types;

[0066] Identify the hardware asset type indicated by the comparison result and the kth hardware asset BC k Hardware asset type Type (BC k ) are consistent;

[0067] If it is determined that the hardware asset type indicated by the comparison result is the same as the kth hardware asset BC k Hardware asset type Type (BC k ), then updating the hardware asset library according to the comparison result;

[0068] If it is determined that the hardware asset type indicated by the comparison result is the same as the kth hardware asset BC k Hardware asset type Type (BC k ) are inconsistent, the comparison result is transmitted to a preset message recipient, and the hardware asset library is updated according to feedback information returned by the preset message recipient.

[0069] According to the second aspect of the present application, a device for identifying network hardware assets of a digital substation power industrial control system is provided, the device comprising:

[0070] The first building module is used to build hardware asset attribute indicators of the digital substation power industrial control system cyberspace;

[0071] The second construction module is used to pre-process the hardware asset data of each hardware asset in the network space of the digital substation power industrial control system according to the hardware asset attribute index, and to construct a hardware asset library of the network space of the digital substation power industrial control system using the pre-processed hardware asset data;

[0072] A calculation module, configured to obtain a target hardware asset to be accessed in response to a hardware asset access request, preprocess the target hardware asset data of the target hardware asset to obtain a target attribute sequence, and calculate the similarity between the target hardware asset and each of the hardware assets using the target attribute sequence;

[0073] An updating module is used to update the hardware asset library by referring to the similarity between the target hardware asset and each of the hardware assets.

[0074] Optionally, the first building module is used to divide the hardware asset attributes of the hardware assets included in the digital substation power industrial control system network into basic attributes C 1 、Network Configuration Properties C 2 , Performance attributes C 3 , location attribute C 4 , and the basic attribute C 1 , the network configuration attribute C 2 , the performance attribute C 3 , the location attribute C 4 As the first-level index in the hardware asset feature library of the digital substation power industrial control system network; respectively, the basic attributes C 1 , the network configuration attribute C 2 , the performance attribute C 3 , the location attribute C 4 Configure the secondary index to obtain the hardware asset attribute index of the digital substation power industrial control system network space; wherein the basic attribute C 1 The secondary indicator configured is the device name C 11 、Equipment Manufacturer C 12 、Device Model C 13 、Device serial number C 14 ; The network configuration attribute C 2 The configured secondary indicator is IP address C 21 、MAC address C 22 , operating system version number C 23 , Subnet Mask C 24 、Default Gateway C 25 、DNS server C 26 , Port Protocol C 27 , open port C 28 , Run Service C 29 ; The performance attribute C 3 The secondary indicator configured is CPU type C 31 、Memory Type C 32 、HDD Type C 33 ; The location attribute C 4 The secondary indicator configured is the physical location C 41 , logical position C 42 .

[0075] Optionally, the second construction module is used to obtain the basic attributes of the i-th hardware asset among the N hardware assets included in the network space of the digital substation power industrial control system. Network Configuration Properties Performance attributes and location attributes Where N is a positive integer, and i ranges from 1 to N. The basic attribute of the i-th hardware asset The Chinese characters in the text are converted into English characters, and the basic attributes after the conversion are The device name in the next secondary index Equipment Manufacturers Device Model Device serial number Perform encoding processing to obtain the encoded sequence Set the network configuration attribute of the i-th hardware asset The Chinese characters in the text are converted into English characters, and the network configuration properties after the conversion are The IP address in the next secondary index MAC Address Operating system version number Subnet Mask Default Gateway DNS Server Port Protocol Open Ports Running the service Perform encoding processing to obtain the encoded sequence The performance attribute of the i-th hardware asset The Chinese characters in the text are converted into English characters, and the properties of the converted characters are CPU type in the next secondary indicator Memory type Hard Drive Type Perform encoding processing to obtain the encoded sequence The location attribute for the i-th hardware asset The physical location in the next level index Logical location Perform encoding processing to obtain the encoded sequence Using the sequence The sequence The sequence and the sequence Construct the attribute sequence X of the i-th hardware asset i , where the attribute sequence X i Including the basic attributes The eigenvector of The network configuration properties The eigenvector of Described Performance Attributes The eigenvector of and the location attribute The eigenvector of The feature vector By element Composition; the feature vector By element Composition; the feature vector By element Composition; the feature vector By element Composition: The hardware asset library of the network space of the digital substation power industrial control system is composed of the attribute sequence X of N hardware assets.

[0076] Optionally, the second construction module is used to identify the physical location of the i-th hardware asset, and when the physical location of the i-th hardware asset is within the scope of the digital substation office building, the physical location of the i-th hardware asset is The result after encoding The value of is set to 1, and when the physical location of the i-th hardware asset is not in the office building of the digital substation, the physical location of the i-th hardware asset is set to The result after encoding The value of is set to 0; identify the logical position of the i-th hardware asset, and when the logical position of the i-th hardware asset is connected to the secondary subnet of the substation, the logical position of the i-th hardware asset The result after encoding The value of is set to 1, and when the logical location of the i-th hardware asset is not connected to the secondary subnet of the substation, the logical location of the i-th hardware asset is The result after encoding The value of is set to 0.

[0077] Optionally, the calculation module is used to define the target hardware asset as the kth hardware asset BC k , the kth hardware asset BC k The hardware asset attributes are divided into basic attributes Network Configuration Properties Performance attributes Location attributes Among them, the value of k is a positive integer, and the basic attribute Include device name Equipment Manufacturers Device Model Device serial number The network configuration properties Include IP address MAC Address Operating system version number Subnet Mask Default Gateway DNS Server Port Protocol Open Ports Running the service Described Performance Attributes Including CPU type Memory type Hard Drive Type The location attribute Include physical location Logical location The kth hardware asset BC k Basic properties The Chinese characters in the text are converted into English characters, and the basic attributes after the conversion are The device name in the next secondary index Equipment Manufacturers Device Model Device serial number Perform encoding processing to obtain the encoded sequence The kth hardware asset BC k Network configuration properties The Chinese characters in the text are converted into English characters, and the network configuration properties after the conversion are The IP address in the next secondary index MAC Address Operating system version number Subnet Mask Default Gateway DNS Server Port Protocol Open Ports Running the service Perform encoding processing to obtain the encoded sequence The kth hardware asset BC k Performance attributes The Chinese characters in the text are converted into English characters, and the properties of the converted characters are CPU type in the next secondary indicator Memory type Hard Drive Type Perform encoding processing to obtain the encoded sequence For the kth hardware asset BC k Location attributes The physical location in the next level index Logical location Perform encoding processing to obtain the encoded sequence Using the sequence The sequence The sequence and the sequence Construct the kth hardware asset BC k The target attribute sequence Y k , where the target attribute sequence Y k Including the basic attributes The eigenvector of The network configuration properties The eigenvector of Described Performance Attributes The eigenvector of and the location attribute The eigenvector of The feature vector By element Composition; the feature vector By element Composition; the feature vector By element Composition; the feature vector By element composition.

[0078] Optionally, the calculation module is used to identify the physical location of the k-th hardware asset, and when the physical location of the k-th hardware asset is within the scope of the digital substation office building, the physical location of the k-th hardware asset is The result after encoding The value of is set to 1, and when the physical location of the k-th hardware asset is not in the office building of the digital substation, the physical location of the k-th hardware asset is set to The result after encoding The value of is set to 0; identify the logical position of the k-th hardware asset, and when the logical position of the k-th hardware asset is connected to the secondary subnet of the substation, the logical position of the k-th hardware asset The result after encoding The value of is set to 1, and when the logical location of the k-th hardware asset is not connected to the substation secondary subnet, the logical location of the k-th hardware asset is set to The result after encoding The value of is set to 0.

[0079] Optionally, the calculation module is used to define the target hardware asset as the kth hardware asset BC k , use the following formula to calculate the basic attributes of the kth hardware asset The basic attributes of the ith hardware asset in the hardware asset library The cosine distance

[0080]

[0081] in, represents the feature vector of the k-th hardware asset under basic attributes, represents the characteristic vector of the i-th hardware asset under the basic attributes, || || represents the calculation of the vector modulus, · represents the scalar multiplication operation, and × represents the vector multiplication operation;

[0082] The network configuration attribute of the kth hardware asset is calculated using the following formula: The network configuration attribute of the ith hardware asset in the hardware asset library The cosine distance

[0083]

[0084] in, represents the feature vector of the k-th hardware asset under the network configuration attributes, A feature vector representing the i-th hardware asset under the network configuration attribute;

[0085] The performance attribute of the kth hardware asset is calculated using the following formula: The performance attribute of the ith hardware asset in the hardware asset library The cosine distance

[0086]

[0087] in, represents the feature vector of the k-th hardware asset under the performance attribute, A feature vector representing the performance attribute of the i-th hardware asset;

[0088] The location attribute of the kth hardware asset is calculated using the following formula: The location attribute of the i-th hardware asset in the hardware asset library The cosine distance

[0089]

[0090] in, represents the feature vector of the k-th hardware asset under the location attribute, A feature vector representing the i-th hardware asset under the location attribute;

[0091] The first total similarity S of the k-th hardware asset and the i-th hardware asset in the hardware asset library is calculated using the following formula: total (BC k ,X i ):

[0092]

[0093] in, is the weight of the basic attribute, Configure the weights of the network attributes, is the weight of the performance attribute, is the weight of the location attribute;

[0094] Repeat the above calculation process to obtain the kth hardware asset BC k The first total similarity with each hardware asset in the hardware asset library, and the first total similarity based on the k-th hardware asset BC k Calculate the k-th hardware asset BC with the first total similarity of each hardware asset in the hardware asset library k The second total similarity S with the i-th hardware asset in the hardware asset library final (BC k ), complete the calculation of the similarity between the target hardware asset and each of the hardware assets.

[0095] Optionally, the calculation module is used to obtain the maximum first total similarity S from all the calculated first total similarities. MAX (BC k ), determine the maximum first total similarity S MAX (BC k )The device type of the corresponding hardware asset Type MAX ;

[0096] Use the following formula to determine the kth hardware asset BC k Hardware asset type Type (BC k ):

[0097]

[0098] Wherein, T is the first threshold;

[0099] The kth hardware asset BC is calculated using the following formula: k Belongs to the device type Type MAX The probability P(Type MAX |BC k ):

[0100]

[0101] Wherein, χ represents the number of hardware assets in the hardware asset library that are of the same type as the i-th hardware asset;

[0102] The kth hardware asset BC is calculated using the following formula: k The second total similarity S with the i-th hardware asset final (BC k ):

[0103]

[0104] Among them, W k Used to represent the kth hardware asset BC k Basic properties Network Configuration Properties Performance attributes and location attributes The number of attributes that are consistent with the corresponding attributes of the i-th hardware asset.

[0105] Optionally, the updating module is used to obtain a second threshold value T threshold , the second total similarity S final (BC k ) and the second threshold T threshold Compare and obtain the comparison result, wherein, in the second total similarity S final (BC k ) is greater than or equal to the second threshold value T threshold When the kth hardware asset BC is generated k is the comparison result of the known hardware asset type, and the second total similarity S final (BC k ) is less than the second threshold value T threshold When the kth hardware asset BC is generated k is a comparison result of an unknown hardware asset type; identifying the hardware asset type indicated by the comparison result and the kth hardware asset BC k Hardware asset type Type (BC k ) are consistent; if the hardware asset type indicated by the comparison result is identified and determined to be consistent with the kth hardware asset BC k Hardware asset type Type (BC k ), then update the hardware asset library according to the comparison result; if it is determined that the hardware asset type indicated by the comparison result is consistent with the kth hardware asset BC k Hardware asset type Type (BC k) are inconsistent, the comparison result is transmitted to a preset message recipient, and the hardware asset library is updated according to feedback information returned by the preset message recipient.

[0106] According to a third aspect of the present application, a computer device is provided, comprising a memory and a processor, wherein the memory stores a computer program, and the processor implements the steps of any one of the methods described in the first aspect when executing the computer program.

[0107] According to a fourth aspect of the present application, a non-volatile readable storage medium is provided, on which a computer program is stored. When the computer program is executed by a processor, the steps of any one of the methods described in the first aspect are implemented.

[0108] By means of the above technical scheme, the present application provides a method and device for identifying network hardware assets of a digital substation power industrial control system. The present application constructs hardware asset attribute indicators of the network space of the digital substation power industrial control system, pre-processes the hardware asset data of each hardware asset in the network space of the digital substation power industrial control system according to the hardware asset attribute indicators, and uses the pre-processed hardware asset data to construct a hardware asset library of the network space of the digital substation power industrial control system. In response to a hardware asset access request, the target hardware asset to be accessed is obtained, the target hardware asset data of the target hardware asset is pre-processed to obtain a target attribute sequence, and the target attribute sequence is used to calculate the similarity between the target hardware asset and each hardware asset, and the hardware asset library is updated with reference to the similarity between the target hardware asset and each hardware asset, and the correlation between the target hardware asset to be accessed and the existing assets is identified by calculating the similarity, so as to ensure the comprehensiveness and accuracy of the identification process, ensure the accurate identification of the newly accessed hardware assets, and timely update the hardware asset library, reduce false alarms and confusion caused by network changes, improve the efficiency and accuracy of network management, and provide strong protection for the stable operation and information security of the digital substation power industrial control system.

[0109] The above description is only an overview of the technical solution of the present application. In order to more clearly understand the technical means of the present application, it can be implemented in accordance with the contents of the specification. In order to make the above and other purposes, features and advantages of the present application more obvious and easy to understand, the specific implementation methods of the present application are listed below. BRIEF DESCRIPTION OF THE DRAWINGS

[0110] Various other advantages and benefits will become apparent to those of ordinary skill in the art by reading the detailed description of the preferred embodiments below. The accompanying drawings are only for the purpose of illustrating the preferred embodiments and are not to be considered as limiting the present application. Also, the same reference symbols are used throughout the accompanying drawings to represent the same components. In the accompanying drawings:

[0111] Figure 1 A schematic diagram of a method for identifying network hardware assets of a digital substation power industrial control system provided in an embodiment of the present application is shown;

[0112] Figure 2 A schematic diagram of another method for identifying network hardware assets of a digital substation power industrial control system provided in an embodiment of the present application is shown;

[0113] Figure 3 A structural schematic diagram of a network hardware asset identification device for a digital substation power industrial control system provided in an embodiment of the present application is shown. DETAILED DESCRIPTION

[0114] The exemplary embodiments of the present application will be described in more detail below with reference to the accompanying drawings. Although the exemplary embodiments of the present application are shown in the accompanying drawings, it should be understood that the present application can be implemented in various forms and should not be limited by the embodiments set forth herein. On the contrary, these embodiments are provided in order to enable a more thorough understanding of the present application and to fully convey the scope of the present application to those skilled in the art.

[0115] The present application embodiment provides a method for identifying network hardware assets of a digital substation power industrial control system, such as Figure 1 As shown, the method includes:

[0116] 101. Construct the hardware asset attribute indicators of the digital substation power industrial control system cyberspace.

[0117] In the embodiment of the present application, a series of key attribute indicators are defined and constructed, and these attribute indicators will serve as the basis for subsequent hardware asset identification, management and maintenance.

[0118] Specifically, the hardware asset attributes of the hardware assets included in the digital substation power industrial control system network are divided into basic attributes C 1 、Network Configuration Properties C 2 , Performance attributes C 3 , location attribute C 4 , and the basic attribute C 1 、Network Configuration Properties C 2 , Performance attributes C 3 , location attribute C 4 As a primary indicator in the hardware asset feature library of the digital substation power industrial control system network.

[0119] Furthermore, the basic attributes C 1 、Network Configuration Properties C 2 , Performance attributes C 3 , location attribute C 4Configure the secondary indicators to obtain the hardware asset attribute indicators of the digital substation power industrial control system network space. Among them, the basic attribute C 1 The configured secondary indicators include 4, namely, device name, C 11 、Equipment Manufacturer C 12 、Device Model C 13 、Device serial number C 14 ; Network configuration properties C 2 The configured secondary indicators include 9, namely IP address C 21 、MAC address C 22 , operating system version number C 23 , Subnet Mask C 24 、Default Gateway C 25 、DNS server C 26 , Port Protocol C 27 , open port C 28 , Run Service C 29 ; Performance attributes C 3 The configured secondary indicators include 3, namely CPU type C 31 、Memory Type C 32 、HDD Type C 33 ; Position attribute C 4 The configured secondary indicators include two, namely physical location C 41 , logical position C 42 .

[0120] In this way, by setting clear and comprehensive hardware asset attribute indicators, a unified standard is provided for the asset management of the digital substation power industrial control system, which facilitates subsequent automated processing and monitoring.

[0121] 102. Preprocess the hardware asset data of each hardware asset in the digital substation power industrial control system network space according to the hardware asset attribute indicators, and use the preprocessed hardware asset data to build a hardware asset library in the digital substation power industrial control system network space.

[0122] In an embodiment of the present application, after completing the construction of the attribute indicators, it is necessary to collect the hardware asset data in the existing system, and clean and standardize it according to the attribute indicators defined in step 101, so as to improve the availability and accuracy of the data, and provide a high-quality data source for the subsequent construction of the hardware asset library.

[0123] Assuming that there are N hardware assets in the digital substation power industrial control system network, for the i-th hardware asset among the N hardware assets included in the digital substation power industrial control system network space, first, it is necessary to obtain the basic attributes of the i-th hardware asset. Network Configuration Properties Performance attributes and location attributes Wherein, N is a positive integer, and the value of i ranges from 1 to N.

[0124] Then, the basic attributes of the i-th hardware asset need to be The Chinese characters in the text are converted into English characters, that is, the Chinese characters are translated into professional English words, the Chinese characters are replaced by the corresponding professional English words, and the basic attributes of the converted characters are The device name in the next secondary index Equipment Manufacturers Device Model Device serial number Perform encoding processing to obtain the encoded sequence When encoding, The uppercase and lowercase English letters, numbers, spaces, punctuation marks, operator symbols, and control command symbols in the field are represented by the corresponding ASCII codes. The encoded sequence is recorded as Which gives the device name Allocate 320 bits, and the encoded sequence is recorded as The device name attribute of the i-th hardware asset; the device manufacturer Allocate 480 bits, and the encoded sequence is recorded as Represents the device manufacturer attribute of the i-th hardware asset; device model Allocate 180 bits, and the encoded sequence is recorded as Represents the device model attribute of the i-th hardware asset; device serial number Allocate 160 bits, and the encoded sequence is recorded as Represents the device serial number attribute of the i-th hardware asset. It should be noted that if If the converted coding sequence of the secondary indicators in cannot reach the corresponding number of digits, the zero-filling method is used to fill the corresponding number of digits.

[0125] Then, the network configuration attribute of the i-th hardware asset The Chinese characters in the network are converted into English characters, that is, the Chinese characters are translated into professional English words, the corresponding professional English words are used to replace the Chinese characters, and the converted network configuration attributes are The IP address in the next secondary index MAC Address Operating system version number Subnet Mask Default Gateway DNS Server Port Protocol Open Ports Running the service Perform encoding processing to obtain the encoded sequence When encoding, The uppercase and lowercase English letters, numbers, spaces, punctuation marks, operator symbols, and control command symbols in the field are represented by the corresponding ASCII codes. The encoded sequence is recorded as Which gives the IP address Allocate 128 bits, and the encoded sequence is recorded as Indicates the IP address and MAC address of the i-th hardware asset Allocate 48 bits, and the encoded sequence is recorded as Indicates the MAC address of the i-th hardware asset; operating system version number Allocate 480 bits, and the encoded sequence is recorded as Indicates the operating system version number of the i-th hardware asset; subnet mask Allocate 32 bits, and the encoded sequence is recorded as Indicates the subnet mask and default gateway of the ith hardware asset Allocate 128 bits, and the encoded sequence is recorded as Indicates the default gateway of the i-th hardware asset; DNS server Allocate 128 bits, and the encoded sequence is recorded as Indicates the DNS server of the i-th hardware asset; port protocol Allocate 32 bits, and the encoded sequence is recorded as Indicates the port protocol of the i-th hardware asset; open port Allocate 48 bits, and the encoded sequence is recorded as Indicates the open port of the i-th hardware asset; running service Allocate 480 bits, and the encoded sequence is recorded as represents the operation service of the i-th hardware asset. It should be noted that if If the converted coding sequence of the secondary indicators in cannot reach the corresponding number of digits, the corresponding number of digits is filled by zero padding.

[0126] Next, the performance attribute of the i-th hardware asset The Chinese characters in the text are converted into English characters, that is, the Chinese characters are translated into professional English words, the Chinese characters are replaced by the corresponding professional English words, and the performance attributes of the converted characters are calculated. CPU type in the next secondary indicator Memory type Hard Drive Type Perform encoding processing to obtain the encoded sequence When encoding, The uppercase and lowercase English letters, numbers, spaces, punctuation marks, operator symbols, and control command symbols in the field are represented by the corresponding ASCII codes. The encoded sequence is recorded as Where to give CPU type Allocate 32 bits, and the encoded sequence is recorded as Indicates the CPU type and memory type of the i-th hardware asset Allocate 32 bits, and the encoded sequence is recorded as Indicates the memory type and hard disk type of the i-th hardware asset Allocate 32 bits, and the encoded sequence is recorded as Indicates the hard disk type of the i-th hardware asset. It should be noted that if If the converted coding sequence of the secondary indicators in cannot reach the corresponding number of digits, the corresponding number of digits is filled by zero padding.

[0127] Then the location attribute of the i-th hardware asset The physical location in the next level index Logical location Perform encoding processing to obtain the encoded sequence When encoding, it is necessary to identify the physical location of the i-th hardware asset. When the physical location of the i-th hardware asset is within the scope of the digital substation office building, the physical location of the i-th hardware asset is The result after encoding The value of is set to 1, and when the physical location of the i-th hardware asset is not in the digital substation office building, the physical location of the i-th hardware asset is set to The result after encoding The value of is set to 0. Furthermore, the logical location of the i-th hardware asset needs to be identified. When the logical location of the i-th hardware asset is connected to the secondary subnet of the substation, the logical location of the i-th hardware asset is The result after encoding The value of is set to 1, and when the logical location of the i-th hardware asset is not connected to the secondary subnet of the substation, the logical location of the i-th hardware asset is set to The result after encoding The value of is set to 0.

[0128] Finally, using the sequence sequence sequence and sequence Construct the attribute sequence X of the i-th hardware asset i In the actual application process, X i is a 1×18 vector, the attribute sequence X i Including basic properties The eigenvector of Network Configuration Properties The eigenvector of Performance attributes The eigenvector of and location attributes The eigenvector of Eigenvector By element Composition; eigenvector By element Composition; eigenvector By element Composition; eigenvector By element Specifically, the attribute sequence X i In the example, the first four elements store the features These four elements form the feature vector Indicates that the i-th hardware asset has the basic attribute C 1 The eigenvector under; the 5th to 13th elements store the features These 9 elements form the feature vector Indicates that the i-th hardware asset has a network configuration attribute C 2 The eigenvector of the following; the 14th to 16th elements store the features These three elements form the feature vector Indicates that the i-th hardware asset has performance attribute C 3 The eigenvector under ; the 17th and 18th elements store the features These two elements form the feature vector Indicates the location attribute C of the i-th hardware asset 4 The eigenvector of .

[0129] 103. Use the pre-processed hardware asset data to build a hardware asset library in the cyberspace of the digital substation power industrial control system.

[0130] In the embodiment of the present application, the attribute sequence X of N hardware assets is used to form the hardware asset library of the digital substation power industrial control system network space, that is, all hardware asset attribute sequences constitute the hardware asset library of the digital substation power industrial control system network. The establishment of the hardware asset library provides a comprehensive and centralized asset management platform for the operation and maintenance personnel of the digital substation, thereby improving work efficiency and management level.

[0131] 104. In response to the hardware asset access request, obtain the target hardware asset to be accessed, pre-process the target hardware asset data of the target hardware asset, and obtain a target attribute sequence.

[0132] In the embodiment of the present application, when a new hardware asset needs to be connected to the system, a hardware asset access request is received, and in response to the hardware asset access request, the target hardware asset to be connected is obtained, and the target hardware asset data of the target hardware asset is obtained by network scanning or manual input, etc., and the access request of the new hardware is responded to in a timely manner to ensure rapid response and access preparation for the new device; then, the target hardware asset data of the target hardware asset is preprocessed to obtain a target attribute sequence, wherein the preprocessing of the target hardware asset data also needs to follow the hardware asset attribute indicators constructed in the above step 101 to ensure that the new data meets the format requirements of the hardware asset library, and the specific preprocessing and generation of the target attribute sequence process are as follows:

[0133] At the beginning, the target hardware asset is defined as the kth hardware asset BC k , the kth hardware asset BC k The hardware asset attributes are divided into basic attributes Network Configuration Properties Performance attributes Location attributes Among them, the value of k is a positive integer, and the basic attribute Include device name Equipment Manufacturers Device Model Device serial number Network Configuration Properties Include IP address MAC Address Operating system version number Subnet Mask Default Gateway DNS Server Port Protocol Open Ports Running the service Performance attributes Including CPU type Memory type Hard Drive Type Location attributes Include physical location Logical location

[0134] During preprocessing, first, the kth hardware asset BC k Basic properties The Chinese characters in the text are converted into English characters, that is, the Chinese characters are translated into professional English words, the Chinese characters are replaced by the corresponding professional English words, and the basic attributes of the converted characters are The device name in the next secondary index Equipment Manufacturers Device Model Device serial number Perform encoding processing to obtain the encoded sequence When encoding, The uppercase and lowercase English letters, numbers, spaces, punctuation marks, operator symbols, and control command symbols in the field are represented by the corresponding ASCII codes. The encoded sequence is recorded as Which gives the device name Allocate 320 bits, and the encoded sequence is recorded as Indicates the device name attribute of the kth hardware asset to be determined; device manufacturer Allocate 480 bits, and the encoded sequence is recorded as Indicates the device manufacturer attribute of the kth hardware asset to be determined; device model Allocate 180 bits, and the encoded sequence is recorded as Indicates the device model attribute of the kth hardware asset to be determined; device serial number Allocate 160 bits, and the encoded sequence is recorded as Indicates the device serial number attribute of the kth hardware asset to be determined. It should be noted that if If the converted coding sequence of the secondary indicators in cannot reach the corresponding number of digits, the zero-filling method is used to fill the corresponding number of digits.

[0135] Then the kth hardware asset BC k Network configuration properties The Chinese characters in the network are converted into English characters, that is, the Chinese characters are translated into professional English words, the corresponding professional English words are used to replace the Chinese characters, and the converted network configuration attributes are The IP address in the next secondary index MAC Address Operating system version number Subnet Mask Default Gateway DNS Server Port Protocol Open Ports Running the service Perform encoding processing to obtain the encoded sequence When encoding, The uppercase and lowercase English letters, numbers, spaces, punctuation marks, operator symbols, and control command symbols in the field are represented by the corresponding ASCII codes. The encoded sequence is recorded as Which gives the IP address Allocate 128 bits, and the encoded sequence is recorded as Indicates the IP address and MAC address of the kth hardware asset to be determined Allocate 48 bits, and the encoded sequence is recorded as Indicates the MAC address of the kth hardware asset to be determined; operating system version number Allocate 480 bits, and the encoded sequence is recorded as Indicates the operating system version number of the kth hardware asset to be determined; subnet mask Allocate 32 bits, and the encoded sequence is recorded as Indicates the subnet mask of the kth hardware asset to be determined; the default gateway Allocate 128 bits, and the encoded sequence is recorded as Indicates the default gateway of the kth hardware asset to be determined; DNS server Allocate 128 bits, and the encoded sequence is recorded as Indicates the DNS server of the kth hardware asset to be determined; port protocol Allocate 32 bits, and the encoded sequence is recorded as Indicates the port protocol of the kth hardware asset to be determined; open port Allocate 48 bits, and the encoded sequence is recorded as Indicates the open port of the kth hardware asset to be determined; running service Allocate 480 bits, and the encoded sequence is recorded as Indicates the operation service of the kth hardware asset to be determined. It should be noted that if If the converted coding sequence of the secondary indicators in cannot reach the corresponding number of digits, the corresponding number of digits is filled by zero padding.

[0136] Next, the kth hardware asset BC k Performance attributes The Chinese characters in the text are converted into English characters, that is, the Chinese characters are translated into professional English words, the Chinese characters are replaced by the corresponding professional English words, and the performance attributes of the converted characters are calculated. CPU type in the next secondary indicator Memory type Hard Drive Type Perform encoding processing to obtain the encoded sequence When encoding, The uppercase and lowercase English letters, numbers, spaces, punctuation marks, operator symbols, and control command symbols in the field are represented by the corresponding ASCII codes. The encoded sequence is recorded as Where to give CPU type Allocate 32 bits, and the encoded sequence is recorded as Indicates the CPU type and memory type of the kth hardware asset to be determined Allocate 32 bits, and the encoded sequence is recorded as Indicates the memory type and hard disk type of the kth hardware asset to be determined Allocate 32 bits, and the encoded sequence is recorded as Indicates the hard disk type of the kth hardware asset to be determined. It should be noted that if If the converted coding sequence of the secondary indicators in cannot reach the corresponding number of digits, the zero-filling method is used to fill the corresponding number of digits.

[0137] Finally, for the kth hardware asset BC k Location attributes The physical location in the next level index Logical location Perform encoding processing to obtain the encoded sequence When encoding, it is necessary to identify the physical location of the k-th hardware asset. When the physical location of the k-th hardware asset is within the scope of the digital substation office building, the physical location of the k-th hardware asset is The result after encoding The value of is set to 1, and when the physical location of the k-th hardware asset is not in the digital substation office building, the physical location of the k-th hardware asset is set to The result after encoding The value of is set to 0. Furthermore, the logical location of the k-th hardware asset needs to be identified. When the logical location of the k-th hardware asset is connected to the secondary subnet of the substation, the logical location of the k-th hardware asset is The result after encoding The value of is set to 1, and when the logical location of the k-th hardware asset is not connected to the secondary subnet of the substation, the logical location of the k-th hardware asset is set to The result after encoding The value of is set to 0.

[0138] The above process completes the preprocessing of the target hardware asset data. sequence sequence and sequence Build the kth hardware asset BC k The target attribute sequence Y k In the actual application process, Y k is a 1×18 vector, the target attribute sequence Y k Including basic properties The eigenvector of Network Configuration Properties The eigenvector of Performance attributes The eigenvector of and location attributes The eigenvector of Eigenvector By element Composition; eigenvector By element Composition; eigenvector By element Composition; eigenvector By element Specifically, the target attribute sequence Y k In the example, the first four elements store the features These four elements form the feature vector Indicates that the kth hardware asset to be judged has the basic attribute C 1 The eigenvector under; the 5th to 13th elements store the features These 9 elements form the feature vector Indicates that the kth hardware asset to be judged has network attribute C 2 The feature vector of ; the 14th to 16th elements store the features These three elements form the feature vector Indicates that the kth hardware asset to be judged has performance attribute C 3 The eigenvector under ; the 17th and 18th elements store the features These two elements form the feature vector Indicates the kth hardware asset to be judged in the location attribute C 4 The feature vector of .

[0139] 105. Using the target attribute sequence, calculate the similarity between the target hardware asset and each hardware asset.

[0140] In an embodiment of the present application, a suitable similarity calculation algorithm (such as cosine similarity, edit distance, etc.) is used to compare the target attribute sequence of the target hardware asset with each hardware asset data in the hardware asset library, and the similarity value between them is calculated. The similarity value reflects the degree of similarity between the target hardware asset and the existing assets. By calculating the similarity, it is helpful to identify whether the target hardware asset is duplicated or highly similar to the existing assets, and avoid repeatedly adding the same or similar assets to the asset library, thereby maintaining the accuracy and efficiency of the asset library. In an embodiment of the present application, the cosine similarity algorithm is used to calculate the similarity, and the specific process is as follows:

[0141] First, define the target hardware asset as the kth hardware asset BC k , use the following formula 1 to calculate the basic attributes of the kth hardware asset The basic attributes of the i-th hardware asset in the hardware asset library The cosine distance

[0142] Formula 1:

[0143] in, represents the feature vector of the k-th hardware asset under basic attributes, represents the characteristic vector of the i-th hardware asset under the basic attributes, || || represents the calculation of the vector modulus, · represents the scalar multiplication operation, and × represents the vector multiplication operation.

[0144] Then use the following formula 2 to calculate the network configuration attribute of the kth hardware asset: The network configuration properties of the i-th hardware asset in the hardware asset library The cosine distance

[0145] Formula 2:

[0146] in, represents the feature vector of the kth hardware asset under the network configuration attributes, Represents the feature vector of the ith hardware asset under the network configuration attributes.

[0147] Then, the performance attribute of the kth hardware asset is calculated using the following formula 3: The performance attribute of the i-th hardware asset in the hardware asset library The cosine distance

[0148] Formula 3:

[0149] in, represents the feature vector of the k-th hardware asset under performance attributes, Represents the feature vector of the i-th hardware asset under performance attributes.

[0150] Next, use the following formula 4 to calculate the location attribute of the kth hardware asset: The location attribute of the i-th hardware asset in the hardware asset library The cosine distance

[0151] Formula 4:

[0152] in, represents the feature vector of the kth hardware asset under the location attribute, Represents the feature vector of the i-th hardware asset under the location attribute.

[0153] Finally, the first total similarity S between the kth hardware asset and the ith hardware asset in the hardware asset library is calculated using the following formula 5: total (BC k ,X i ):

[0154] Formula 5:

[0155]

[0156] in, is the weight of the basic attribute, Configure the weights of the network attributes, is the weight of the performance attribute, is the weight of the location attribute. In practical applications, as well as The value of can be adjusted according to the specific situation. By default,

[0157] In this way, by repeating the above calculation process, the kth hardware asset BC can be obtained. k The first total similarity with each hardware asset in the hardware asset library. Further, in order to improve the accuracy of the recognition result, in the embodiment of the present application, in addition to calculating the first total similarity, the kth hardware asset BC k Calculate the kth hardware asset BC by the first total similarity with each hardware asset in the hardware asset library k The second total similarity S with the i-th hardware asset in the hardware asset library final (BC k ), calculate the second total similarity S final (BC k ) is as follows:

[0158] First, the maximum first total similarity S is obtained from all the first total similarities calculated. MAX (BC k ), determine the maximum first total similarity S MAX (BC k )The device type of the corresponding hardware asset Type MAX ; Then use the following formula 6 to determine the kth hardware asset BC k Hardware asset type Type (BC k ):

[0159] Formula 6:

[0160] Wherein, T in Formula 6 is the first threshold value. In actual application, the value of T can be adjusted according to specific circumstances. By default, the value of T is 0.85.

[0161] Then, the kth hardware asset BC is calculated using the following formula 7: k Belongs to device type Type MAX The probability P(Type MAX |BC k ):

[0162] Formula 7:

[0163] Wherein, χ in Formula 7 represents the number of hardware assets in the hardware asset library that are of the same type as the i-th hardware asset.

[0164] Next, use the following formula 8 to calculate the kth hardware asset BC k The second total similarity S with the i-th hardware asset final (BC k ):

[0165] Formula 8:

[0166] Among them, W k Used to represent the kth hardware asset BC k Basic properties Network Configuration Properties Performance attributes and location attributes The number of attributes that are consistent with the corresponding attributes of the i-th hardware asset.

[0167] 106. Update the hardware asset library with reference to the similarity between the target hardware asset and each hardware asset.

[0168] In the embodiment of the present application, according to the calculated similarity, it can be determined how to update the hardware asset library. Specifically, referring to the similarity, it can be determined whether the target hardware asset is a new type of hardware asset, thereby determining whether to add it to the hardware asset library. Among them, since two different similarities are calculated in this application, it is necessary to combine the two similarities to judge the target hardware asset and update the hardware asset library. The specific process is as follows:

[0169] First, obtain the second threshold T threshold , the second total similarity S final (BC k ) and the second threshold T threshold Compare and get the comparison result. The second threshold T thresholdThe value of can be adjusted according to the specific situation. By default, it is 0.9. final (BC k ) is greater than or equal to the second threshold T threshold When the kth hardware asset BC is generated k is the comparison result of the known hardware asset type, and the total similarity S final (BC k ) is less than the second threshold T threshold When the kth hardware asset BC is generated k This is the comparison result of an unknown hardware asset type.

[0170] Then, the judgment results of the first total similarity and the second total similarity are analyzed to identify the hardware asset type indicated by the comparison result and the kth hardware asset BC k Hardware asset type Type (BC k ) are consistent. If the hardware asset type indicated by the comparison result is identified and determined to be the same as the kth hardware asset BC k Hardware asset type Type (BC k ), then the asset type of the target hardware asset determined based on the first total similarity and the second total similarity is correct, and the hardware asset library is updated according to the comparison result. That is, if the target hardware asset is a new asset type, the new type is updated to the hardware asset library, otherwise it is not necessary. If the hardware asset type indicated by the identification and determination comparison result is consistent with the kth hardware asset BC k Hardware asset type Type (BC k ) are inconsistent, it is necessary to further judge the asset type of the target hardware asset determined based on the first total similarity and the second total similarity, therefore, the comparison result is transmitted to the preset message recipient, and the hardware asset library is updated according to the feedback information returned by the preset message recipient. The preset message recipient can be the staff's email address, phone number, etc., so that the staff can be informed of the recognition result of this time by sending emails, text messages, etc., so that the staff can make manual judgments and update the hardware asset library according to the results of manual judgments.

[0171] In addition, in the actual application process, the asset library will be regularly checked and maintained to ensure the timeliness and accuracy of its data. By updating and maintaining the hardware asset library in real time, the integrity and accuracy of the data in the asset library can be ensured. At the same time, this step also helps to timely discover and deal with potential asset management problems, such as duplicate asset additions and data errors, thereby improving the efficiency and accuracy of asset management.

[0172] In summary, the logical process of the technical solution proposed in this application is summarized as follows: Figure 2 As shown, firstly, the hardware asset attribute index of the digital substation power industrial control system network space is constructed, and the hardware asset data of each hardware asset in the digital substation power industrial control system network space is preprocessed according to the hardware asset attribute index; then the hardware asset library of the digital substation power industrial control system network space is constructed, and the similarity between the target hardware asset to be connected and each hardware asset is calculated to determine whether the hardware asset library needs to be updated, and manual confirmation is performed when it cannot be determined. In this way, the technical solution proposed in the embodiment of the present application innovatively introduces a dual similarity evaluation mechanism, which aims to optimize the identification and management process of hardware assets by calculating two different similarities between the target hardware asset to be judged and the hardware assets in the hardware asset library of the digital substation power industrial control system network, and reflects the correlation between the target asset and the existing assets from different aspects based on the two similarities, thereby ensuring the comprehensiveness and accuracy of the evaluation process.

[0173] The method provided in the embodiment of the present application constructs hardware asset attribute indicators of the digital substation power industrial control system network space, pre-processes the hardware asset data of each hardware asset in the digital substation power industrial control system network space according to the hardware asset attribute indicators, and uses the pre-processed hardware asset data to construct the hardware asset library of the digital substation power industrial control system network space, responds to the hardware asset access request, obtains the target hardware asset to be accessed, pre-processes the target hardware asset data of the target hardware asset to obtain the target attribute sequence, and uses the target attribute sequence to calculate the similarity between the target hardware asset and each hardware asset, and updates the hardware asset library with reference to the similarity between the target hardware asset and each hardware asset, identifies the correlation between the target hardware asset to be accessed and the existing assets by calculating the similarity, ensures the comprehensiveness and accuracy of the identification process, ensures the accurate identification of the newly accessed hardware assets, and timely updates the hardware asset library, reduces false alarms and confusion caused by network changes, improves the efficiency and accuracy of network management, and provides strong protection for the stable operation and information security of the digital substation power industrial control system.

[0174] Further, as Figure 1 The specific implementation of the method, the embodiment of the present application provides a digital substation power industrial control system network hardware asset identification device, such as Figure 3 As shown, the device includes: a first construction module 301, a second construction module 302, a calculation module 303 and an update module 304.

[0175] The first construction module 301 is used to construct hardware asset attribute indicators of the digital substation power industrial control system network space;

[0176] The second construction module 302 is used to pre-process the hardware asset data of each hardware asset in the network space of the digital substation power industrial control system according to the hardware asset attribute index, and to construct a hardware asset library of the network space of the digital substation power industrial control system using the pre-processed hardware asset data;

[0177] The calculation module 303 is used to respond to the hardware asset access request, obtain the target hardware asset to be accessed, pre-process the target hardware asset data of the target hardware asset to obtain a target attribute sequence, and calculate the similarity between the target hardware asset and each of the hardware assets using the target attribute sequence;

[0178] The updating module 304 is used to update the hardware asset library by referring to the similarity between the target hardware asset and each of the hardware assets.

[0179] In a specific application scenario, the first building module 301 is used to divide the hardware asset attributes of the hardware assets included in the digital substation power industrial control system network into basic attributes C 1 、Network Configuration Properties C 2 , Performance attributes C 3 , location attribute C 4 , and the basic attribute C 1 , the network configuration attribute C 2 , the performance attribute C 3 , the location attribute C 4 As the first-level index in the hardware asset feature library of the digital substation power industrial control system network; respectively, the basic attributes C 1 , the network configuration attribute C 2 , the performance attribute C 3 , the location attribute C 4 Configure the secondary index to obtain the hardware asset attribute index of the digital substation power industrial control system network space; wherein the basic attribute C 1 The secondary indicator configured is the device name C 11 、Equipment Manufacturer C 12 、Device Model C 13 、Device serial number C 14 ; The network configuration attribute C 2 The configured secondary indicator is IP address C 21 、MAC address C 22 , operating system version number C 23 , Subnet Mask C 24 、Default Gateway C 25 、DNS server C 26 , Port Protocol C27 , open port C 28 , Run Service C 29 ; The performance attribute C 3 The secondary indicator configured is CPU type C 31 、Memory Type C 32 、HDD Type C 33 ; The location attribute C 4 The secondary indicator configured is the physical location C 41 , logical position C 42 .

[0180] In a specific application scenario, the second building module 302 is used to obtain the basic attributes of the i-th hardware asset among the N hardware assets included in the network space of the digital substation power industrial control system. Network Configuration Properties Performance attributes and location attributes Where N is a positive integer, and i ranges from 1 to N. The basic attribute of the i-th hardware asset The Chinese characters in the text are converted into English characters, and the basic attributes after the conversion are The device name in the next secondary index Equipment Manufacturers Device Model Device serial number Perform encoding processing to obtain the encoded sequence Set the network configuration attribute of the i-th hardware asset The Chinese characters in the text are converted into English characters, and the network configuration properties after the conversion are The IP address in the next secondary index MAC Address Operating system version number Subnet Mask Default Gateway DNS Server Port Protocol Open Ports Running the service Perform encoding processing to obtain the encoded sequence The performance attribute of the i-th hardware asset The Chinese characters in the text are converted into English characters, and the properties of the converted characters are CPU type in the next secondary indicator Memory type Hard Drive Type Perform encoding processing to obtain the encoded sequence The location attribute for the i-th hardware asset The physical location in the next level index Logical location Perform encoding processing to obtain the encoded sequence Using the sequence The sequence The sequence and the sequence Construct the attribute sequence X of the i-th hardware asset i , where the attribute sequence X i Including the basic attributes The eigenvector of The network configuration properties The eigenvector of Described Performance Attributes The eigenvector of and the location attribute The eigenvector of The feature vector By element Composition; the feature vector By element Composition; the feature vector By element Composition; the feature vector By element Composition: The hardware asset library of the network space of the digital substation power industrial control system is composed of the attribute sequence X of N hardware assets.

[0181] In a specific application scenario, the second building module 302 is used to identify the physical location of the i-th hardware asset. When the physical location of the i-th hardware asset is within the scope of the digital substation office building, the physical location of the i-th hardware asset is The result after encoding The value of is set to 1, and when the physical location of the i-th hardware asset is not in the office building of the digital substation, the physical location of the i-th hardware asset is set to The result after encoding The value of is set to 0; identify the logical position of the i-th hardware asset, and when the logical position of the i-th hardware asset is connected to the secondary subnet of the substation, the logical position of the i-th hardware asset The result after encoding The value of is set to 1, and when the logical location of the i-th hardware asset is not connected to the secondary subnet of the substation, the logical location of the i-th hardware asset is The result after encoding The value of is set to 0.

[0182] In a specific application scenario, the calculation module 303 is used to define the target hardware asset as the kth hardware asset BC k , the kth hardware asset BC k The hardware asset attributes are divided into basic attributes Network Configuration Properties Performance attributes Location attributes Among them, the value of k is a positive integer, and the basic attribute Include device name Equipment Manufacturers Device Model Device serial number The network configuration properties Include IP address MAC Address Operating system version number Subnet Mask Default Gateway DNS Server Port Protocol Open Ports Running the service Described Performance Attributes Including CPU type Memory type Hard Drive Type The location attribute Include physical location Logical location The kth hardware asset BC k Basic properties The Chinese characters in the text are converted into English characters, and the basic attributes after the conversion are The device name in the next secondary index Equipment Manufacturers Device Model Device serial number Perform encoding processing to obtain the encoded sequence The kth hardware asset BC k Network configuration properties The Chinese characters in the text are converted into English characters, and the network configuration properties after the conversion are The IP address in the next secondary index MAC Address Operating system version number Subnet Mask Default Gateway DNS Server Port Protocol Open Ports Running the service Perform encoding processing to obtain the encoded sequence The kth hardware asset BC k Performance attributes The Chinese characters in the text are converted into English characters, and the properties of the converted characters are CPU type in the next secondary indicator Memory type Hard Drive Type Perform encoding processing to obtain the encoded sequence For the kth hardware asset BC k Location attributes The physical location in the next level index Logical location Perform encoding processing to obtain the encoded sequence Using the sequence The sequence The sequence and the sequence Construct the kth hardware asset BC k The target attribute sequence Y k , where the target attribute sequence Y k Including the basic attributes The eigenvector of The network configuration properties The eigenvector of Described Performance Attributes The eigenvector of and the location attribute The eigenvector of The feature vector By element Composition; the feature vector By element Composition; the feature vector By element Composition; the feature vector By element composition.

[0183] In a specific application scenario, the calculation module 303 is used to identify the physical location of the k-th hardware asset. When the physical location of the k-th hardware asset is within the scope of the digital substation office building, the physical location of the k-th hardware asset is The result after encoding The value of is set to 1, and when the physical location of the k-th hardware asset is not in the office building of the digital substation, the physical location of the k-th hardware asset is set to The result after encoding The value of is set to 0; identify the logical position of the k-th hardware asset, and when the logical position of the k-th hardware asset is connected to the secondary subnet of the substation, the logical position of the k-th hardware asset The result after encoding The value of is set to 1, and when the logical location of the k-th hardware asset is not connected to the substation secondary subnet, the logical location of the k-th hardware asset is set to The result after encoding The value of is set to 0.

[0184] In a specific application scenario, the calculation module 303 is used to define the target hardware asset as the kth hardware asset BC k , use the following formula to calculate the basic attributes of the kth hardware asset The basic attributes of the ith hardware asset in the hardware asset library The cosine distance

[0185]

[0186] in, represents the feature vector of the k-th hardware asset under basic attributes, represents the characteristic vector of the i-th hardware asset under the basic attributes, || || represents the calculation of the vector modulus, · represents the scalar multiplication operation, and × represents the vector multiplication operation;

[0187] The network configuration attribute of the kth hardware asset is calculated using the following formula: The network configuration attribute of the ith hardware asset in the hardware asset library The cosine distance

[0188]

[0189] in, represents the feature vector of the k-th hardware asset under the network configuration attributes, A feature vector representing the i-th hardware asset under the network configuration attribute;

[0190] The performance attribute of the kth hardware asset is calculated using the following formula: The performance attribute of the ith hardware asset in the hardware asset library The cosine distance

[0191]

[0192] in, represents the feature vector of the k-th hardware asset under the performance attribute, A feature vector representing the performance attribute of the i-th hardware asset;

[0193] The location attribute of the kth hardware asset is calculated using the following formula: The location attribute of the i-th hardware asset in the hardware asset library The cosine distance

[0194]

[0195] in, represents the feature vector of the k-th hardware asset under the location attribute, A feature vector representing the i-th hardware asset under the location attribute;

[0196] The first total similarity S of the k-th hardware asset and the i-th hardware asset in the hardware asset library is calculated using the following formula: total (BC k ,X i ):

[0197]

[0198] in, is the weight of the basic attribute, Configure the weights of the network attributes, is the weight of the performance attribute, is the weight of the location attribute;

[0199] Repeat the above calculation process to obtain the kth hardware asset BC k The first total similarity with each hardware asset in the hardware asset library, and the first total similarity based on the k-th hardware asset BC k Calculate the k-th hardware asset BC with the first total similarity of each hardware asset in the hardware asset library k The second total similarity S with the i-th hardware asset in the hardware asset library final (BC k ), complete the calculation of the similarity between the target hardware asset and each of the hardware assets.

[0200] In a specific application scenario, the calculation module 303 is used to obtain the maximum first total similarity S from all the calculated first total similarities.MAX (BC k ), determine the maximum first total similarity S MAX (BC k )The device type of the corresponding hardware asset Type MAX ;

[0201] Use the following formula to determine the kth hardware asset BC k Hardware asset type Type (BC k ):

[0202]

[0203] Wherein, T is the first threshold;

[0204] The kth hardware asset BC is calculated using the following formula: k Belongs to the device type Type MAX The probability P(Type MAX |BC k ):

[0205]

[0206] Wherein, χ represents the number of hardware assets in the hardware asset library that are of the same type as the i-th hardware asset;

[0207] The kth hardware asset BC is calculated using the following formula: k The second total similarity S with the i-th hardware asset final (BC k ):

[0208]

[0209] Among them, W k Used to represent the kth hardware asset BC k Basic properties Network Configuration Properties Performance attributes and location attributes The number of attributes that are consistent with the corresponding attributes of the i-th hardware asset.

[0210] In a specific application scenario, the updating module 304 is used to obtain the second threshold T threshold , the second total similarity S final (BC k ) and the second threshold T threshold Compare and obtain the comparison result, wherein, in the second total similarity S final (BC k ) is greater than or equal to the second threshold value Tthreshold When the kth hardware asset BC is generated k is the comparison result of the known hardware asset type, and the second total similarity S final (BC k ) is less than the second threshold value T threshold When the kth hardware asset BC is generated k is a comparison result of an unknown hardware asset type; identifying the hardware asset type indicated by the comparison result and the kth hardware asset BC k Hardware asset type Type (BC k ) are consistent; if the hardware asset type indicated by the comparison result is identified and determined to be consistent with the kth hardware asset BC k Hardware asset type Type (BC k ), then update the hardware asset library according to the comparison result; if it is determined that the hardware asset type indicated by the comparison result is consistent with the kth hardware asset BC k Hardware asset type Type (BC k ) are inconsistent, the comparison result is transmitted to a preset message recipient, and the hardware asset library is updated according to feedback information returned by the preset message recipient.

[0211] The device provided in the embodiment of the present application calculates the similarity to identify the correlation between the target hardware assets to be connected and the existing assets, ensures the comprehensiveness and accuracy of the identification process, guarantees the accurate identification of newly connected hardware assets, and timely updates the hardware asset library, thereby reducing false alarms and confusion caused by network changes, improving the efficiency and accuracy of network management, and providing strong protection for the stable operation and information security of the digital substation power industrial control system.

[0212] It should be noted that for other corresponding descriptions of the functional units involved in the digital substation power industrial control system network hardware asset identification device provided in the embodiment of the present application, reference can be made to Figure 1 and Figure 2 It should be noted that the user information (including but not limited to user device information, user personal information, etc.) and data (including but not limited to data used for analysis, stored data, displayed data, etc.) involved in this application are all information and data authorized by the user or fully authorized by all parties.

[0213] The above embodiments and the technical features in the embodiments can be arbitrarily combined with each other. In order to make the description concise, all possible combinations of the technical features in the above embodiments are not described. However, as long as there is no contradiction in the combination of these technical features, they should be considered to be within the scope of this specification. The above-mentioned embodiments only express several implementation methods of the present application, and their descriptions are relatively specific and detailed, but they cannot be understood as limiting the scope of the patent of this application. It should be pointed out that for ordinary technicians in this field, without departing from the concept of the present application, several deformations and improvements can be made, which all belong to the protection scope of the present application. Therefore, the protection scope of the present application shall be based on the attached claims.

[0214] In an exemplary embodiment, a computer device is also provided, which includes a bus, a processor, a memory and a communication interface, and may also include an input and output interface and a display device, wherein each functional unit can communicate with each other through the bus. The memory stores a computer program, and the processor is used to execute the program stored in the memory and execute the digital substation power industrial control system network hardware asset identification method in the above embodiment. A computer-readable storage medium stores a computer program, and when the computer program is executed by the processor, the steps of the digital substation power industrial control system network hardware asset identification method are implemented.

[0215] Through the description of the above implementation methods, those skilled in the art can clearly understand that the present application can be implemented by hardware, or by means of software plus a necessary general hardware platform. Based on such an understanding, the technical solution of the present application can be embodied in the form of a software product, which can be stored in a non-volatile storage medium (which can be a CD-ROM, a USB flash drive, a mobile hard disk, etc.), including a number of instructions for enabling a computer device (which can be a personal computer, a server, or a network device, etc.) to execute the methods described in each implementation scenario of the present application.

[0216] Those skilled in the art will appreciate that the accompanying drawings are only schematic diagrams of a preferred implementation scenario, and the modules or processes in the accompanying drawings are not necessarily necessary for the implementation of the present application. Those skilled in the art will appreciate that the modules in the devices in the implementation scenario can be distributed in the devices of the implementation scenario according to the description of the implementation scenario, or can be changed accordingly and located in one or more devices different from the present implementation scenario. The modules of the above-mentioned implementation scenarios can be combined into one module, or can be further split into multiple sub-modules. The above-mentioned serial numbers of this application are only for description and do not represent the pros and cons of the implementation scenarios. The above disclosure is only a few specific implementation scenarios of the present application, but the present application is not limited thereto, and any changes that can be thought of by a technician in this field should fall within the scope of protection of the present application.

Claims

1. A method for identifying network hardware assets of a digital substation power industrial control system, characterized in that: include: Construct the hardware asset attribute indicators of the digital substation power industrial control system cyberspace; Preprocessing the hardware asset data of each hardware asset in the network space of the digital substation power industrial control system according to the hardware asset attribute index, and constructing a hardware asset library of the network space of the digital substation power industrial control system using the preprocessed hardware asset data; In response to a hardware asset access request, a target hardware asset to be accessed is obtained, target hardware asset data of the target hardware asset is preprocessed to obtain a target attribute sequence, and similarity between the target hardware asset and each of the hardware assets is calculated using the target attribute sequence; The hardware asset library is updated with reference to the similarity between the target hardware asset and each of the hardware assets.

2. The method according to claim 1, characterized in that The hardware asset attribute indicators for constructing the digital substation power industrial control system cyberspace include: The hardware asset attributes of the hardware assets included in the digital substation power industrial control system network are divided into basic attributes C1, network configuration attributes C2, performance attributes C3, and location attributes C4, and the basic attributes C1, the network configuration attributes C2, the performance attributes C3, and the location attributes C4 are used as the first-level indicators in the hardware asset feature library of the digital substation power industrial control system network; Secondary indicators are configured for the basic attribute C1, the network configuration attribute C2, the performance attribute C3, and the location attribute C4, respectively, to obtain hardware asset attribute indicators of the digital substation power industrial control system network space; Among them, the secondary indicator configured by the basic attribute C1 is the device name C 11 、Equipment Manufacturer C 12 、Device Model C 13 、Device serial number C 14 ; The secondary indicator of the network configuration attribute C2 configuration is IP address C 21 、MAC address C 22 , operating system version number C 23 , Subnet Mask C 24 、Default Gateway C 25 、DNS server C 26 , Port Protocol C 27 , open port C 28 , Run Service C 29 ; The secondary indicator of the performance attribute C3 configuration is CPU type C 31 、Memory Type C 32 、HDD Type C 33 ; The secondary indicator configured by the location attribute C4 is the physical location C 41 , logical position C 42 .

3. The method according to claim 2, characterized in that The preprocessing of the hardware asset data of each hardware asset in the network space of the digital substation power industrial control system according to the hardware asset attribute index, and the use of the preprocessed hardware asset data to construct a hardware asset library of the network space of the digital substation power industrial control system includes: For the i-th hardware asset among the N hardware assets included in the digital substation power industrial control system network space, obtain the basic attributes of the i-th hardware asset Network Configuration Properties Performance attributes and location attributes Wherein, N is a positive integer, and the value of i ranges from 1 to N; The basic attributes of the i-th hardware asset The Chinese characters in the text are converted into English characters, and the basic attributes after the conversion are The device name in the next secondary index Equipment Manufacturers Device Model Device serial number Perform encoding processing to obtain the encoded sequence Set the network configuration attribute of the i-th hardware asset The Chinese characters in the text are converted into English characters, and the network configuration properties after the conversion are The IP address in the next secondary index MAC Address Operating system version number Subnet Mask Default Gateway DNS Server Port Protocol Open Ports Running the service Perform encoding processing to obtain the encoded sequence The performance attribute of the i-th hardware asset The Chinese characters in the text are converted into English characters, and the properties of the converted characters are CPU type in the next secondary indicator Memory type Hard Drive Type Perform encoding processing to obtain the encoded sequence The location attribute for the i-th hardware asset The physical location in the next level index Logical location Perform encoding processing to obtain the encoded sequence Using the sequence The sequence The sequence and the sequence Construct the attribute sequence X of the i-th hardware asset i , where the attribute sequence X i Including the basic attributes The eigenvector of The network configuration properties The eigenvector of Described Performance Attributes The eigenvector of and the location attribute The eigenvector of The feature vector By element Composition; the feature vector By element Composition; the feature vector By element Composition; the feature vector By element composition; The attribute sequence X of N hardware assets is used to form the hardware asset library of the digital substation power industrial control system network space.

4. The method according to claim 3, characterized in that The location attribute for the i-th hardware asset The physical location in the next level index Logical location Perform encoding processing, including: Identify the physical location of the i-th hardware asset, and when the physical location of the i-th hardware asset is within the scope of the digital substation office building, The result after encoding The value of is set to 1, and when the physical location of the i-th hardware asset is not in the office building of the digital substation, the physical location of the i-th hardware asset is set to The result after encoding The value of is set to 0; Identify the logical location of the i-th hardware asset, and when the logical location of the i-th hardware asset is connected to the secondary subnet of the substation, The result after encoding The value of is set to 1, and when the logical location of the i-th hardware asset is not connected to the secondary subnet of the substation, the logical location of the i-th hardware asset is The result after encoding The value of is set to 0.

5. The method according to claim 1, characterized in that The preprocessing of the target hardware asset data of the target hardware asset to obtain a target attribute sequence includes: Define the target hardware asset as the kth hardware asset BC k , the kth hardware asset BC k The hardware asset attributes are divided into basic attributes Network Configuration Properties Performance attributes Location attributes Among them, the value of k is a positive integer, and the basic attribute Include device name Equipment Manufacturers Device Model Device serial number The network configuration properties Include IP address MAC Address Operating system version number Subnet Mask Default Gateway DNS Server Port Protocol Open Ports Running the service Described Performance Attributes Including CPU type Memory type Hard Drive Type The location attribute Include physical location Logical location The kth hardware asset BC k Basic properties The Chinese characters in the text are converted into English characters, and the basic attributes after the conversion are The device name in the next secondary index Equipment Manufacturers Device Model Device serial number Perform encoding processing to obtain the encoded sequence The kth hardware asset BC k Network configuration properties The Chinese characters in the text are converted into English characters, and the network configuration properties after the conversion are The IP address in the next secondary index MAC Address Operating system version number Subnet Mask Default Gateway DNS Server Port Protocol Open Ports Running the service Perform encoding processing to obtain the encoded sequence The kth hardware asset BC k Performance attributes The Chinese characters in the text are converted into English characters, and the properties of the converted characters are CPU type in the next secondary indicator Memory type Hard Drive Type Perform encoding processing to obtain the encoded sequence For the kth hardware asset BC k Location attributes The physical location in the next level index Logical location Perform encoding processing to obtain the encoded sequence Using the sequence The sequence The sequence and the sequence Construct the kth hardware asset BC k The target attribute sequence Y k , where the target attribute sequence Y k Including the basic attributes The eigenvector of The network configuration properties The eigenvector of Described Performance Attributes The eigenvector of and the location attribute The eigenvector of The feature vector By element Composition; the feature vector By element Composition; the feature vector By element Composition; the feature vector By element composition.

6. The method according to claim 5, characterized in that The kth hardware asset BC k Location attributes The physical location in the next level index Logical location Perform encoding processing, including: Identify the physical location of the k-th hardware asset, and when the physical location of the k-th hardware asset is within the scope of the digital substation office building, The result after encoding The value of is set to 1, and when the physical location of the k-th hardware asset is not in the office building of the digital substation, the physical location of the k-th hardware asset is set to The result after encoding The value of is set to 0; Identify the logical location of the k-th hardware asset, and when the logical location of the k-th hardware asset is connected to the secondary subnet of the substation, The result after encoding The value of is set to 1, and when the logical location of the k-th hardware asset is not connected to the substation secondary subnet, the logical location of the k-th hardware asset is set to The result after encoding The value of is set to 0.

7. The method according to claim 5, characterized in that The calculating the similarity between the target hardware asset and each of the hardware assets by using the target attribute sequence includes: The target hardware asset is defined as the kth hardware asset BC k , use the following formula to calculate the basic attributes of the kth hardware asset The basic attributes of the ith hardware asset in the hardware asset library The cosine distance in, represents the feature vector of the k-th hardware asset under basic attributes, represents the characteristic vector of the i-th hardware asset under the basic attributes, | ||| represents the calculation of the vector modulus, · represents the scalar multiplication operation, and × represents the vector multiplication operation; The network configuration attribute of the kth hardware asset is calculated using the following formula: The network configuration attribute of the ith hardware asset in the hardware asset library The cosine distance in, represents the feature vector of the k-th hardware asset under the network configuration attributes, A feature vector representing the i-th hardware asset under the network configuration attribute; The performance attribute of the kth hardware asset is calculated using the following formula: The performance attribute of the ith hardware asset in the hardware asset library The cosine distance in, represents the feature vector of the k-th hardware asset under the performance attribute, A feature vector representing the performance attribute of the i-th hardware asset; The location attribute of the kth hardware asset is calculated using the following formula: The location attribute of the i-th hardware asset in the hardware asset library The cosine distance in, represents the feature vector of the k-th hardware asset under the location attribute, A feature vector representing the i-th hardware asset under the location attribute; The first total similarity S of the k-th hardware asset and the i-th hardware asset in the hardware asset library is calculated using the following formula: total (BC k ,X i ): in, is the weight of the basic attribute, Configure the weights of the network attributes, is the weight of the performance attribute, is the weight of the location attribute; Repeat the above calculation process to obtain the kth hardware asset BC k The first total similarity with each hardware asset in the hardware asset library, and the first total similarity based on the k-th hardware asset BC k Calculate the k-th hardware asset BC with the first total similarity of each hardware asset in the hardware asset library k The second total similarity S with the i-th hardware asset in the hardware asset library final (BC k ), complete the calculation of the similarity between the target hardware asset and each of the hardware assets.

8. The method according to claim 7, characterized in that Based on the k-th hardware asset BC k Calculate the k-th hardware asset BC with the first total similarity of each hardware asset in the hardware asset library k The second total similarity S with the i-th hardware asset in the hardware asset library final (BC k ),include: Obtain the maximum first total similarity S from all the calculated first total similarities MAX (BC k ), determine the maximum first total similarity S MAX (BC k )The device type of the corresponding hardware asset Type MAX ; Use the following formula to determine the kth hardware asset BC k Hardware asset type Type (BC k ): Wherein, T is the first threshold; The kth hardware asset BC is calculated using the following formula: k Belongs to the device type Type MAX The probability P(Type MAX |BC k ): Wherein, χ represents the number of hardware assets in the hardware asset library that are of the same type as the i-th hardware asset; The kth hardware asset BC is calculated using the following formula: k The second total similarity S with the i-th hardware asset final (BC k ): Among them, W k Used to represent the kth hardware asset BC k Basic properties Network Configuration Properties Performance attributes and location attributes The number of attributes that are consistent with the corresponding attributes of the i-th hardware asset.

9. The method according to claim 8, characterized in that The updating of the hardware asset library by referring to the similarity between the target hardware asset and each of the hardware assets includes: Get the second threshold T threshold , the second total similarity S final (BC k ) and the second threshold T threshold Compare and obtain the comparison result, wherein, in the second total similarity S final (BC k ) is greater than or equal to the second threshold value T threshold When the kth hardware asset BC is generated k is the comparison result of the known hardware asset type, and the second total similarity S final (BC k ) is less than the second threshold value T threshold When the kth hardware asset BC is generated k Comparison results for unknown hardware asset types; Identify the hardware asset type indicated by the comparison result and the kth hardware asset BC k Hardware asset type Type (BC k ) are consistent; If it is determined that the hardware asset type indicated by the comparison result is the same as the kth hardware asset BC k Hardware asset type Type (BC k ), then updating the hardware asset library according to the comparison result; If it is determined that the hardware asset type indicated by the comparison result is the same as the kth hardware asset BC k Hardware asset type Type (BC k ) are inconsistent, the comparison result is transmitted to a preset message recipient, and the hardware asset library is updated according to feedback information returned by the preset message recipient.

10. A digital substation power industrial control system network hardware asset identification device, characterized in that: include: The first building module is used to build hardware asset attribute indicators of the digital substation power industrial control system cyberspace; The second construction module is used to pre-process the hardware asset data of each hardware asset in the network space of the digital substation power industrial control system according to the hardware asset attribute index, and to construct a hardware asset library of the network space of the digital substation power industrial control system using the pre-processed hardware asset data; A calculation module, configured to obtain a target hardware asset to be accessed in response to a hardware asset access request, preprocess the target hardware asset data of the target hardware asset to obtain a target attribute sequence, and calculate the similarity between the target hardware asset and each of the hardware assets using the target attribute sequence; An updating module is used to update the hardware asset library by referring to the similarity between the target hardware asset and each of the hardware assets.

Images