Method and system for constructing safe target range of electric power monitoring system with synchronous virtual and real scenes

Abstract

The invention discloses a virtual and real scene synchronous power monitoring system network security target range construction method and system, and belongs to the technical field of power monitoring, and the method comprises a step of realizing time dimension synchronization and a step of realizing spatial dimension consistency which are cooperatively implemented; the method combines an event-driven synchronization mechanism, a clock synchronization technology and real-time data synchronization, is used for realizing time dimension synchronization of a virtual environment of a network security target range of a power monitoring system and an actual power system, and comprises the following steps: a sub-step of real-time monitoring and synchronization and a sub-step of real-time data acquisition and processing; according to the method, object detection based on a neural network and scene topological graph construction based on visual dragging are combined, spatial dimension consistency is achieved, and the method comprises the sub-step of intelligent detection and classification and the sub-step of scene topological graph construction and updating. According to the method, virtual and real scenes are kept consistent in time dimension and space dimension, and attack and defense simulation requirements of different scales and types of power monitoring systems are met.

Description

Technical Field

[0001] The present invention belongs to the technical field of electric power monitoring, and more specifically, relates to a method and system for constructing a safe range of an electric power monitoring system with synchronized virtual and real scenes. Background Art

[0002] The Power Monitoring System Cybersecurity Range is a simulation environment used to test, evaluate, and train cybersecurity defense strategies, especially in critical infrastructure in the power industry. This range provides the ability to simulate real-world attack scenarios, helping organizations identify the vulnerabilities of their systems, test emergency response plans, and improve employee security awareness and skills.

[0003] National policies and industry standards have promoted the construction and use of power network security ranges, and more and more suppliers and service providers have participated in the construction of network security ranges. The ranges are not only used for technical testing, but also an important platform for training network security professionals, improving their ability to respond to network attacks through actual combat exercises.

[0004] However, there are also some problems in the design and implementation of the virtual and real cybersecurity test range. For example, the problem of real-time and latency. The latency in the virtual environment may affect the realism of the test, especially in scenarios that require rapid response. The synchronization between real-time data streams and virtual components may be difficult to perfectly match, affecting the simulation effect.

[0005] Based on the above existing problems, a plan for building a cybersecurity target range for power monitoring systems with synchronized virtual and real scenarios is proposed to ensure that the virtual and real scenarios are consistent in both time and space dimensions, and adapt to the attack and defense simulation needs of power monitoring systems of different scales and types. Summary of the invention

[0006] In order to solve the deficiencies in the prior art, the present invention provides a cyber security target range for an electric power monitoring system with synchronized virtual and real scenes, so as to achieve consistency between the virtual and real scenes in both time and space dimensions. The cyber security target range for the electric power monitoring system is constructed mainly from the two aspects of time dimension synchronization and space dimension consistency, and can adapt to the attack and defense simulation needs of electric power monitoring systems of different scales and types.

[0007] The present invention adopts the following technical solution.

[0008] The first aspect of the present invention provides a method for constructing a cyber security target range for a power monitoring system with synchronized virtual and real scenarios, which is characterized by comprising: a step of realizing synchronization of the time dimension and a step of realizing consistency of the space dimension implemented in a coordinated manner;

[0009] Among them, the event-driven synchronization mechanism, clock synchronization technology, and real-time data synchronization are combined to achieve the time dimension synchronization between the virtual environment of the power monitoring system cybersecurity target range and the actual power system, including: the sub-steps of real-time monitoring and synchronization and the sub-steps of real-time data collection and processing;

[0010] The neural network-based object detection and the visual drag-and-drop construction of scene topology are combined to achieve spatial dimension consistency between the virtual environment of the power monitoring system cybersecurity target range and the actual power system, including: sub-steps of intelligent detection and classification and sub-steps of building and updating the scene topology.

[0011] Preferably, the sub-steps of real-time monitoring and synchronization include:

[0012] By combining the event-driven synchronization mechanism and the clock synchronization based on the PTP protocol, the virtual environment in the power monitoring system network security target field can be synchronized with the actual power system in time and status; the event listener in the event-driven synchronization mechanism captures key events and triggers synchronization actions, and the PTP protocol ensures the time consistency of all devices.

[0013] Preferably, the sub-steps of real-time data collection and processing include:

[0014] Real-time data synchronization based on the SCTP protocol collects real-time data of the power system and transmits it to the virtual environment of the power target range through the SCTP protocol. The real-time data includes equipment status and flow information, which is used to update the scene and object status in the virtual environment in real time to achieve accuracy and real-time performance of the simulation environment.

[0015] Preferably, the event-driven synchronization mechanism includes:

[0016] Define key events: Determine the key events that need to trigger synchronization;

[0017] Event capture and processing: Set up event listeners to capture the key events and record them for subsequent processing.

[0018] Trigger synchronization action: Once a key event is detected, the time synchronization process is immediately started to ensure that the virtual environment is consistent with the actual situation;

[0019] The clock synchronization technology includes:

[0020] Protocol selection: PTP is used for clock synchronization;

[0021] Periodic calibration: Set a scheduled task to periodically calibrate all devices involved in synchronization to ensure the consistency of time on all devices;

[0022] The real-time data synchronization based on the SCTP protocol includes:

[0023] Data collection and transmission: collect real-time data through the network and transmit it to the virtual environment through the SCTP protocol;

[0024] Data processing and updating: processing the real-time data in the virtual environment and updating the status of related objects in the scene in real time.

[0025] Preferably, the event-driven synchronization mechanism, clock synchronization technology, real-time monitoring and synchronization sub-steps of real-time data synchronization and the real-time data acquisition and processing sub-steps are implemented in coordination, including:

[0026] Time synchronization trigger: The event-driven synchronization mechanism detects an event that requires synchronization, triggers the time synchronization process, and prepares to transmit time synchronization data through the SCTP protocol;

[0027] Time synchronization data transmission: Use SCTP protocol to transmit PTP time synchronization data packets;

[0028] Time synchronization data reception: The receiving device receives the time synchronization data through the SCTP protocol; adjusts the local clock according to the PTP protocol to ensure synchronization with the time source;

[0029] Time synchronization is complete: After all devices have completed time synchronization, the event-driven synchronization mechanism can confirm that the time of all devices has been synchronized; if there are still devices that are not synchronized, the above process is repeated until the time of all devices reaches the expected synchronization level;

[0030] Exception handling: If an exception occurs during the synchronization process, the error recovery mechanism of the SCTP protocol is used to ensure data integrity; if a device fails to synchronize successfully, the event-driven synchronization mechanism records the exception and takes corresponding measures.

[0031] Preferably, the sub-steps of intelligent detection and classification include:

[0032] Deploy CNN-based object detection in real-world scenarios to detect and classify various devices in power facilities in real time.

[0033] Preferably, the sub-steps of constructing and updating the scene topology graph include:

[0034] In the user interface, visually drag and drop to build a scene topology map, build and update the scene topology structure of the power system, and combine the object information detected by CNN to automatically or manually update the topology map to reflect the latest status of the power system.

[0035] Preferably, CNN-based object detection includes:

[0036] Training CNN model: Use labeled images of objects in the power monitoring system to train the CNN model;

[0037] Object detection and classification: Deploy the trained CNN model in real-world scenarios to detect and classify various devices in power facilities in real time;

[0038] The visual drag-and-drop construction scene topology diagram includes:

[0039] Create a basic template: Set up a visual editing tool, and users can build a basic scene topology structure by dragging and dropping;

[0040] Dynamic update: Combine the object information detected by CNN to automatically or manually update the position and status of elements in the topology map.

[0041] Preferably, the sub-steps of intelligent detection and classification of object detection and visual dragging to construct a scene topology map using CNN and the sub-steps of constructing and updating the scene topology map are implemented in coordination, including:

[0042] Object detection and topology map update: CNN detects devices and people in the images captured by the camera in real time, and the detection results are used to update the device locations in the topology map;

[0043] Drag operation and object position update: Users adjust the position of icons in the topology map by dragging, and update the position of corresponding objects in the virtual environment at the same time;

[0044] Linkage mechanism: Integrate object detection and topology map updates through a centralized management platform to ensure that the virtual environment is consistent with the actual environment in spatial dimensions.

[0045] A second aspect of the present invention provides a network security range construction system for a power monitoring system with synchronized virtual and real scenarios, comprising: a time dimension synchronization module and a space dimension consistency module;

[0046] The time dimension synchronization module includes: a real-time monitoring and synchronization unit and a real-time data acquisition and processing unit; the real-time monitoring and synchronization unit includes: an event listener for capturing key events and triggering time synchronization; a PTP clock synchronizer for regularly calibrating all devices involved in synchronization to ensure the consistency of time for all devices; the real-time data acquisition and processing unit includes: a data acquisition and processing device based on the SCTP protocol;

[0047] Spatial dimension consistency module: includes an intelligent detection and classification unit and a scene topology map construction and update unit. The intelligent detection and classification unit has a built-in CNN model for detecting equipment in power facilities; the scene topology map construction and update unit has a visual operation interface for quickly building a basic scene topology structure through drag and drop operations.

[0048] Compared with the prior art, the beneficial effects of the present invention include at least:

[0049] The coordination of time dimension synchronization and space dimension consistency technologies enables the power range to achieve comprehensive monitoring and simulation of the power system. The event-driven synchronization mechanism ensures rapid response to key events, the PTP protocol ensures time synchronization, the SCTP protocol achieves efficient data transmission, the CNN model provides intelligent detection, and the visual topology technology provides an intuitive operation and display interface. This integrated solution improves the efficiency, accuracy and responsiveness of the power range. BRIEF DESCRIPTION OF THE DRAWINGS

[0050] Figure 1 A schematic diagram of CNN object detection scene generation in an embodiment of the present invention;

[0051] Figure 2 A schematic diagram of a scene topology constructed by visual dragging in an embodiment of the present invention;

[0052] Figure 3 This is a flowchart of the time dimension synchronization implementation in an embodiment of the present invention;

[0053] Figure 4 This is a flowchart for implementing spatial dimension consistency in an embodiment of the present invention;

[0054] Figure 5 This is a flow chart of a method for constructing a network security target range for a power monitoring system with synchronized virtual and real scenarios in an embodiment of the present invention. DETAILED DESCRIPTION

[0055] In order to make the purpose, technical scheme and advantages of the present invention clearer, the technical scheme of the present invention will be clearly and completely described below in conjunction with the drawings in the embodiments of the present invention. The described embodiments are only embodiments of a part of the present invention, not all embodiments. Based on the spirit of the present invention, all other embodiments obtained by ordinary technicians in this field without creative work belong to the protection scope of the present invention.

[0056] like Figure 5 As shown, an embodiment of the present invention provides a method for constructing a network security target range of a power monitoring system with synchronized virtual and real scenes, and the coordinated cooperation includes: a step of realizing time dimension synchronization and a step of realizing space dimension consistency;

[0057] Among them, the event-driven synchronization mechanism, clock synchronization technology, and real-time data synchronization are combined to achieve the time dimension synchronization between the virtual environment of the power monitoring system network security target range and the actual power system, including: real-time monitoring and synchronization sub-steps and real-time data acquisition and processing sub-steps; the object detection technology based on CNN (Convolutional Neural Networks) and the visual drag and drop scene topology map construction technology are combined to achieve the spatial dimension consistency between the virtual environment of the power monitoring system network security target range and the actual power system, including: intelligent detection and classification sub-steps and scene topology map construction and update sub-steps.

[0058] Preferably, but not limited to, real-time monitoring and synchronization include:

[0059] The event-driven synchronization mechanism and the clock synchronization technology based on the PTP protocol (Precision Time Protocol) ensure that the virtual environment in the power monitoring system cybersecurity target range is precisely synchronized with the actual power system in terms of time and status. The event listener captures key events and triggers synchronization actions, while the PTP protocol ensures the consistency of time for all devices.

[0060] Further preferably but not limiting, the event-driven synchronization mechanism includes:

[0061] (1) Define key events: Determine the key events that need to trigger synchronization, preferably but not limited to system status changes, abnormal behavior detection, etc.

[0062] (2) Event capture and processing: Develop event listeners to capture these key events and record them for subsequent processing.

[0063] (3) Trigger synchronization action: Once a critical event is detected, the synchronization process is immediately started to ensure that the virtual environment is consistent with the actual situation.

[0064] Also further preferably but not limiting, the clock synchronization technology based on the PTP protocol includes:

[0065] (1) Protocol selection: Use PTP protocol for clock synchronization.

[0066] (2) Regular calibration: Set a scheduled task to regularly calibrate all devices involved in synchronization to ensure the consistency of time on all devices.

[0067] Table 1 PTP protocol data content

[0068] Message Type Function Sync Sent from the master clock to the slave clock to mark the sending time Follow_Up Supplement Sync message to provide more accurate sending time Announce Periodic broadcast for electing a master clock Delay_Req Sent by the slave clock to the master clock to request delay information Delay_Resp The master clock responds to the slave clock's Delay_Req and provides delay information

[0069] Preferably, but not limited to, real-time data collection and processing includes:

[0070] The real-time data synchronization technology based on the SCTP protocol (Technical specification of stream control transmission protocol) is responsible for collecting real-time data of the power system and transmitting it to the virtual environment of the power range through the SCTP protocol. These data, including equipment status and flow information, are used to update the scene and object status in the virtual environment in real time to ensure the accuracy and real-time performance of the simulation environment.

[0071] Further preferably but not limiting, the real-time data synchronization based on the SCTP protocol includes:

[0072] (1) Data collection and transmission: Real-time data is collected through the network, preferably but not limited to device status, traffic information, etc., and transmitted to the virtual environment through the SCTP protocol.

[0073] (2) Data processing and updating: Process this data in the virtual environment and update the status of related objects in the scene in real time.

[0074] Table 2 SCTP protocol data unit structure

[0075]

[0076] like Figure 3 As shown, preferably but not limitedly, the sub-steps of real-time monitoring and synchronization of real-time data synchronization and the sub-steps of real-time data acquisition and processing are implemented in coordination with each other, including:

[0077] (1) Time synchronization trigger:

[0078] The event-driven synchronization mechanism detects events that require synchronization, such as but not limited to, time deviation exceeding a threshold, triggers the time synchronization process, and prepares to transmit time synchronization data through the SCTP protocol.

[0079] (2) Time-synchronized data transmission:

[0080] The SCTP protocol is used to transmit PTP time synchronization data packets. The multipath transmission and error recovery capabilities of the SCTP protocol ensure that time synchronization data can be transmitted promptly and accurately even in poor network conditions.

[0081] (3) Time synchronization data reception:

[0082] The receiving device receives the time synchronization data through the SCTP protocol and adjusts the local clock according to the PTP protocol to ensure synchronization with the time source.

[0083] (4) Time synchronization completed:

[0084] After all devices have completed time synchronization, the event-driven synchronization mechanism can confirm that the time of all devices has been synchronized. If there are still devices that are not synchronized, the above process is repeated until the time of all devices reaches the expected synchronization level.

[0085] (5)Exception handling:

[0086] If any problems are encountered during the synchronization process, such as but not limited to packet loss or delay, SCTP's error recovery mechanism can ensure data integrity. If any device fails to synchronize successfully, the event-driven synchronization mechanism can record these problems and take appropriate measures.

[0087] It is worth noting that, as one of the outstanding essential features of the present invention, in order to achieve time dimension synchronization, the present invention innovatively combines the event-driven synchronization mechanism, clock synchronization technology, and real-time data synchronization.

[0088] The event-driven synchronization mechanism combines the virtual environment with the real-world power monitoring system to achieve synchronization between the two through real-time data exchange and event response. This mechanism is critical for training, testing and verifying the network security strategy of the power monitoring system because it allows simulation and response to real network events in a safe virtual environment without affecting the actual operating power system.

[0089] The PTP protocol is used to achieve high-precision clock synchronization over the network. It is designed to overcome the limitations of traditional NTP (Network Time Protocol) in clock synchronization accuracy, especially in applications that require sub-microsecond or even nanosecond synchronization accuracy.

[0090] Real-time data synchronization is critical in many fields, especially in communication scenarios that require high reliability and low latency. The SCTP protocol is a transport layer protocol used to provide these features. It is a supplement to TCP in the TCP / IP protocol suite, especially in scenarios that require multi-homing, error recovery, and multi-stream capabilities.

[0091] The event-driven synchronization mechanism, clock synchronization technology, and real-time data synchronization implemented in coordination enable the present invention to have the following advantages at the same time.

[0092] 1. Higher reliability

[0093] (1) Multi-host support of the SCTP protocol: The SCTP protocol supports the use of multiple IP addresses in one connection, which means that even if one IP address has a problem, the connection can still continue to use other addresses, thereby improving the reliability of time synchronization data transmission.

[0094] (2) SCTP protocol error recovery mechanism: SCTP protocol can quickly identify and retransmit lost data packets, which helps ensure that time synchronization data can be transmitted promptly and accurately even under poor network conditions.

[0095] 2. Stronger time accuracy

[0096] (1) High-precision time synchronization of the PTP protocol: The PTP protocol can provide high-precision time synchronization at the sub-millisecond level, which is very important for applications in power monitoring systems that require highly accurate timestamps.

[0097] (2) Combination of SCTP and PTP: The high reliability of SCTP ensures the accurate transmission of PTP time synchronization data, making the time synchronization in the shooting range achieve higher accuracy.

[0098] 3. Better flexibility and scalability

[0099] (1) Event-driven synchronization mechanism: The event-driven mechanism can trigger the time synchronization process according to actual needs instead of periodic synchronization, which enables the range to respond to different test scenarios more flexibly.

[0100] (2) Multipath transmission of SCTP protocol: SCTP protocol supports multipath transmission, which means that data packets can be sent simultaneously on multiple network interfaces, which helps to improve the redundancy and fault tolerance of the system and also facilitates the expansion of the system.

[0101] 4. More efficient resource utilization

[0102] (1) Event-driven synchronization mechanism: The time synchronization process is triggered only when necessary, which can reduce unnecessary resource consumption, such as network bandwidth and computing resources.

[0103] (2) Efficient transmission of SCTP protocol: SCTP protocol provides better performance than TCP protocol, especially in high-bandwidth environments, which means that time synchronization data can be transmitted faster and reduce resource occupation time.

[0104] 5. Better security

[0105] (1) Security features of the SCTP protocol: The SCTP protocol provides some built-in security features. For example, the use of the SCTP protocol can better resist certain types of denial of service (DoS) attacks, which is very important for network security targets.

[0106] (2) Event-driven synchronization mechanism: Through the event-driven mechanism, the range can simulate attack scenarios more accurately, thereby evaluating and improving the security of the system.

[0107] 6. Better maintainability and ease of use

[0108] (1) Event-driven synchronization mechanism: The event-driven design simplifies the management and maintenance of time synchronization, making it easier for range administrators to configure and manage the time synchronization process.

[0109] (2) Advanced features of the SCTP protocol: Some advanced features of the SCTP protocol, such as multi-stream support, make data transmission more orderly and easier to manage.

[0110] like Figure 4 As shown, the spatial dimension consistency implementation process includes: coordinated implementation of neural network-based object detection technology and visual drag-and-drop scene topology map construction technology, wherein the neural network is preferably, but not limited to, CNN, RCNN, SSD, etc.

[0111] Preferably, but not limited to, intelligent detection and classification, including:

[0112] like Figure 1 As shown in the figure, CNN-based object detection technology is deployed in real-world scenarios to detect and classify various devices in power facilities in real time. These detection results can enhance the intelligent monitoring capabilities of power target sites and improve the accuracy of identifying device status and abnormal behavior.

[0113] Further preferably but not limiting, the CNN-based object detection technology includes:

[0114] (1) Training the CNN model: A large number of labeled object images in the power monitoring system are used to train the CNN model.

[0115] (2) Object Detection and Classification: The model is deployed in real-world scenarios to detect and classify various devices in power facilities in real time.

[0116] like Figure 2 As shown, preferably but not restrictively, the construction and update of the scene topology graph:

[0117] The visual drag-and-drop scene topology technology provides an intuitive user interface that allows users to quickly build and update the scene topology of the power system. Combined with the object information detected by CNN, the topology map can be automatically or manually updated to reflect the latest status of the power system.

[0118] Further preferably but not limiting, the visual dragging and construction scene topology graph technology includes:

[0119] (1) Create basic templates: A set of visual editing tools was developed to allow users to quickly build basic scene topology structures through drag-and-drop operations.

[0120] (2) Dynamic update: Combined with the object information detected by CNN, the element position and status in the topology map are automatically or manually updated to reflect the latest situation.

[0121] like Figure 4 As shown, preferably but not limitingly, the sub-steps of intelligent detection and classification of object detection and visual dragging to construct a scene topology map including CNN and the sub-steps of constructing and updating the scene topology map are implemented in coordination and include:

[0122] (1) Object detection and topology map update: CNN detects objects such as devices and people in the images captured by the camera in real time, and the detection results are used to update the device locations in the topology map.

[0123] (2) Drag operation and object position update: Users can adjust the position of icons in the topology map by dragging and dropping, and update the position of the corresponding objects in the virtual environment.

[0124] (3) Linkage mechanism: Object detection and topology map updates are integrated through a centralized management platform to ensure that the virtual environment and the actual environment are consistent in spatial dimensions.

[0125] It is worth noting that, as one of the outstanding substantive features of the present invention, in order to achieve the consistency of the spatial dimensions of the virtual and real scenes, the present invention combines the CNN-based object detection technology with the visual dragging technology to construct the scene topology map.

[0126] CNN-based object detection technology is an important technology in the field of computer vision. In the present invention, this technology is used to obtain image data from a camera for analysis, identify and locate objects such as equipment and personnel, and achieve consistency in spatial dimensions in virtual and real scenes.

[0127] Using a visual drag-and-drop method to construct a topology diagram of the simulation scene is one of the effective methods to achieve consistency in the spatial dimensions of the virtual and real scenes in the network security target range of the power monitoring system. This method allows the target range designer to intuitively build and adjust the network topology to ensure that the virtual environment simulates the actual environment as much as possible, and quickly respond and align when the subsequent virtual and real scenes change, thereby achieving consistency in the spatial dimensions of the virtual and real scenes.

[0128] The coordinated implementation of CNN-based object detection technology and the scene topology map generated by visual dragging enable the present invention to have the following advantages at the same time.

[0129] 1. Real-time and accuracy

[0130] (1) Real-time monitoring: CNN can efficiently process image data captured by cameras and achieve real-time object detection and classification.

[0131] (2) Accurate positioning: CNN can not only identify object categories, but also provide their exact location coordinates in the image, thereby improving positioning accuracy.

[0132] 2. Improve visualization efficiency

[0133] (1) Quickly build scenes: By dragging and dropping to create a scene topology map, you can quickly build the layout of the actual environment and facilitate understanding of spatial relationships.

[0134] (2) Dynamic update: When CNN detects a new object or a change in the state of an object, the topology map can be updated instantly through a simple drag operation to maintain its consistency with the actual scene.

[0135] 3. Usability and interactivity

[0136] (1) Intuitive display: The drag-and-drop interface makes it easy for non-technical personnel to understand and operate, lowering the threshold for use.

[0137] (2) Enhanced interactive experience: Users can adjust the position of objects by dragging and dropping, simulate different scene configurations, and improve decision-making efficiency.

[0138] 4. Data fusion and verification

[0139] (1) Spatial consistency verification: By combining the results of CNN recognition with the topological map created by manual dragging, the differences between the two can be verified and corrected to ensure that the virtual model is highly consistent with the real environment.

[0140] In summary, in order to achieve consistency between the time dimension and the space dimension of the virtual and real scenes, the present invention mainly constructs the network security target field of the power monitoring system from the two aspects of time dimension synchronization and space dimension consistency.

[0141] The significant improvements brought by the present invention to the prior art include at least:

[0142] The coordination of the above technical means enables the power range to achieve comprehensive monitoring and simulation of the power system. The event-driven synchronization mechanism ensures a rapid response to key events, the PTP protocol ensures time synchronization, the SCTP protocol achieves efficient data transmission, the CNN model provides intelligent detection, and the visual topology technology provides an intuitive operation and display interface. This integrated solution improves the efficiency, accuracy and responsiveness of the power range.

[0143] It is particularly noteworthy that the design of the technical solution of the present invention takes comprehensive considerations from the perspectives of performance, stability and safety.

[0144] (1) Performance considerations: Ensure that the system can process large amounts of video data and frequent location updates in real time.

[0145] (2) Stability considerations: Maintaining stable operation of the system, especially in a high-concurrency environment.

[0146] (3) Security considerations: Ensure the security of all data transmission.

[0147] The cybersecurity target range of the power monitoring system with synchronized virtual and real scenarios plays an important role in ensuring the safety and reliability of the system. The following are some of the main application areas.

[0148] 1. Improvement of network security protection capabilities: By simulating various network attack and defense scenarios, the range can help technicians and security experts improve their ability to identify, protect and respond to security threats to power monitoring systems. This kind of simulation exercise is crucial to improving the defense capabilities of power systems in the face of real attacks.

[0149] 2. New technology application testing: With the application of new technologies such as 5G, cloud computing, and artificial intelligence in the power industry, the cybersecurity target range can be used as a testing platform to evaluate the security and stability of these technologies in the power monitoring system.

[0150] 3. Attack and defense drills and talent training: The power monitoring system network security range provides an ideal environment for conducting attack and defense drills and training network security talents. Through actual combat drills, the technical level of the security team and the ability to deal with complex network attacks can be improved.

[0151] 4. Risk assessment and safety testing: The shooting range can be used to evaluate the safety of the power monitoring system, including system vulnerability scanning, penetration testing and risk analysis, to ensure the safety of the system in actual operation.

[0152] 5. Emergency response and disposal: By simulating cyber attacks, the shooting range can help enterprises and organizations develop and test emergency response plans for cyber security incidents, and improve their ability to respond quickly and effectively to real security incidents.

[0153] 6. Situation awareness and monitoring and early warning: Build a network security situation awareness platform to collect and analyze a large amount of network security data to achieve dynamic monitoring, early warning and assessment of potential security risks of the power monitoring system.

[0154] 7. Protection of critical information infrastructure: As a part of critical information infrastructure, the power monitoring system plays an important role in protecting these key assets from cyber attacks by simulating attacks to test and strengthen security measures.

[0155] 8.Technology Research and Innovation: The range provides researchers with an experimental platform where they can test new security technologies and methods to promote the development and innovation of network security technology.

[0156] The present invention focuses on the implementation scheme of virtual-real scene synchronization in the network security target field of the power monitoring system, wherein in terms of time dimension synchronization, an event-driven synchronization mechanism, clock synchronization technology, and real-time data synchronization are combined, and in terms of spatial dimension consistency, a CNN-based object detection technology and a visual drag-and-drop scene topology map construction technology are combined. The following is a specific implementation method of the invention.

[0157] Embodiment 2 of the present invention provides a network security target range construction system for a power monitoring system with virtual and real scene synchronization, which is used to execute the network security target range construction method for a power monitoring system with virtual and real scene synchronization in embodiment 1, including: a time dimension synchronization module and a space dimension consistency module;

[0158] The time dimension synchronization module includes: a real-time monitoring and synchronization unit and a real-time data acquisition and processing unit; the real-time monitoring and synchronization unit includes: an event listener for capturing key events and triggering time synchronization; a PTP clock synchronizer for regularly calibrating all devices involved in synchronization to ensure the consistency of time for all devices; the real-time data acquisition and processing unit includes: a data acquisition and processing device based on the SCTP protocol;

[0159] Spatial dimension consistency module: includes an intelligent detection and classification unit and a scene topology map construction and update unit. The intelligent detection and classification unit has a built-in CNN model for detecting equipment in power facilities; the scene topology map construction and update unit has a visual operation interface for quickly building a basic scene topology structure through drag and drop operations.

[0160] Embodiment 3 of the present invention provides an electronic device, comprising a memory, a processor, and a computer program stored in the memory and executable on the processor. When the computer program is loaded into the processor, the method for constructing a network security target range for an electric power monitoring system with synchronized virtual and real scenes according to Embodiment 1 is implemented.

[0161] Embodiment 4 of the present invention provides a computer-readable storage medium, which stores a computer program. When the computer program is executed by a processor, it implements the method for constructing a network security target field for a power monitoring system with synchronized virtual and real scenes according to Embodiment 1.

[0162] The present disclosure may be a system, a method and / or a computer program product. The computer program product may include a computer-readable storage medium carrying computer-readable program instructions for causing a processor to implement various aspects of the present disclosure.

[0163] Finally, it should be noted that the above embodiments are only used to illustrate the technical solutions of the present invention rather than to limit it. Although the present invention has been described in detail with reference to the above embodiments, ordinary technicians in the relevant field should understand that the specific implementation methods of the present invention can still be modified or replaced by equivalents, and any modifications or equivalent replacements that do not depart from the spirit and scope of the present invention should be covered within the scope of protection of the claims of the present invention.

Claims

1. A method for constructing a network range of a power monitoring system with synchronized virtual and real scenes, characterized in that: include: Steps to achieve synchronization in the time dimension and steps to achieve consistency in the space dimension implemented in coordination; Among them, the event-driven synchronization mechanism, clock synchronization technology, and real-time data synchronization are combined to achieve the time dimension synchronization between the virtual environment of the power monitoring system cybersecurity target range and the actual power system, including: the sub-steps of real-time monitoring and synchronization and the sub-steps of real-time data collection and processing; The neural network-based object detection and the visual drag-and-drop construction of scene topology are combined to achieve spatial dimension consistency between the virtual environment of the power monitoring system cybersecurity target range and the actual power system, including: sub-steps of intelligent detection and classification and sub-steps of building and updating the scene topology.

2. According to claim 1, a method for constructing a network range of a power monitoring system with synchronized virtual and real scenes, characterized in that: The sub-steps of real-time monitoring and synchronization include: By combining the event-driven synchronization mechanism and the clock synchronization based on the PTP protocol, the virtual environment in the power monitoring system network security target field can be synchronized with the actual power system in time and status; the event listener in the event-driven synchronization mechanism captures key events and triggers synchronization actions, and the PTP protocol ensures the time consistency of all devices.

3. According to claim 2, a method for constructing a network range of a power monitoring system with synchronized virtual and real scenes, characterized in that: The sub-steps of real-time data collection and processing include: Real-time data synchronization based on the SCTP protocol collects real-time data of the power system and transmits it to the virtual environment of the power target range through the SCTP protocol. The real-time data includes equipment status and flow information, which is used to update the scene and object status in the virtual environment in real time to achieve accuracy and real-time performance of the simulation environment.

4. A method for constructing a network range of a power monitoring system with synchronized virtual and real scenes according to any one of claims 1 to 3, characterized in that: The event-driven synchronization mechanism includes: Define key events: Determine the key events that need to trigger synchronization; Event capture and processing: Set up event listeners to capture the key events and record them for subsequent processing. Trigger synchronization action: Once a key event is detected, the time synchronization process is immediately started to ensure that the virtual environment is consistent with the actual situation; The clock synchronization technology includes: Protocol selection: PTP is used for clock synchronization; Periodic calibration: Set a scheduled task to periodically calibrate all devices involved in synchronization to ensure the consistency of time on all devices; The real-time data synchronization based on the SCTP protocol includes: Data collection and transmission: collect real-time data through the network and transmit it to the virtual environment through the SCTP protocol; Data processing and updating: processing the real-time data in the virtual environment and updating the status of related objects in the scene in real time.

5. According to claim 4, a method for constructing a network range of a power monitoring system with synchronized virtual and real scenes, characterized in that: The event-driven synchronization mechanism, clock synchronization technology, real-time monitoring and synchronization sub-steps of real-time data synchronization and real-time data collection and processing sub-steps are implemented in coordination, including: Time synchronization trigger: The event-driven synchronization mechanism detects an event that requires synchronization, triggers the time synchronization process, and prepares to transmit time synchronization data through the SCTP protocol; Time synchronization data transmission: Use SCTP protocol to transmit PTP time synchronization data packets; Time synchronization data reception: The receiving device receives the time synchronization data through the SCTP protocol; adjusts the local clock according to the PTP protocol to ensure synchronization with the time source; Time synchronization is complete: After all devices have completed time synchronization, the event-driven synchronization mechanism can confirm that the time of all devices has been synchronized; if there are still devices that are not synchronized, the above process is repeated until the time of all devices reaches the expected synchronization level; Exception handling: If an exception occurs during the synchronization process, the error recovery mechanism of the SCTP protocol is used to ensure data integrity; if a device fails to synchronize successfully, the event-driven synchronization mechanism records the exception and takes corresponding measures.

6. The method for constructing a network range of a power monitoring system with synchronized virtual and real scenes according to claim 1, characterized in that: The sub-steps of intelligent detection and classification include: Deploy CNN-based object detection in real-world scenarios to detect and classify various devices in power facilities in real time.

7. The method for constructing a network range of a power monitoring system with synchronized virtual and real scenes according to claim 6 is characterized by: The sub-steps of building and updating the scene topology graph include: In the user interface, visually drag and drop to build a scene topology map, build and update the scene topology structure of the power system, and combine the object information detected by CNN to automatically or manually update the topology map to reflect the latest status of the power system.

8. A method for constructing a network range of a power monitoring system with synchronized virtual and real scenes according to claim 1, 6 or 7, characterized in that: CNN-based object detection includes: Training CNN model: Use labeled images of objects in the power monitoring system to train the CNN model; Object detection and classification: Deploy the trained CNN model in real-world scenarios to detect and classify various devices in power facilities in real time; The visual drag-and-drop construction scene topology diagram includes: Create a basic template: Set up a visual editing tool, and users can build a basic scene topology structure by dragging and dropping; Dynamic update: Combine the object information detected by CNN to automatically or manually update the position and status of elements in the topology map.

9. The method for constructing a network range of a power monitoring system with synchronized virtual and real scenes according to claim 8, characterized in that: The sub-steps of intelligent detection and classification of object detection and visual dragging to build scene topology maps, and the sub-steps of building and updating scene topology maps are implemented in coordination, including: Object detection and topology map update: CNN detects devices and people in the images captured by the camera in real time, and the detection results are used to update the device locations in the topology map; Drag operation and object position update: Users adjust the position of icons in the topology map by dragging, and update the position of corresponding objects in the virtual environment at the same time; Linkage mechanism: Integrate object detection and topology map updates through a centralized management platform to ensure that the virtual environment is consistent with the actual environment in spatial dimensions.

10. A network range construction system for power monitoring system with synchronized virtual and real scenes, characterized in that: include: Time dimension synchronization module and space dimension consistency module; The time dimension synchronization module includes: a real-time monitoring and synchronization unit and a real-time data acquisition and processing unit; the real-time monitoring and synchronization unit includes: an event listener for capturing key events and triggering time synchronization; a PTP clock synchronizer for regularly calibrating all devices involved in synchronization to ensure the consistency of time for all devices; the real-time data acquisition and processing unit includes: a data acquisition and processing device based on the SCTP protocol; Spatial dimension consistency module: includes an intelligent detection and classification unit and a scene topology map construction and update unit. The intelligent detection and classification unit has a built-in CNN model for detecting equipment in power facilities; the scene topology map construction and update unit has a visual operation interface for quickly building a basic scene topology structure through drag and drop operations.

Images