Differential privacy-based power plant network security asset management method and related device

Abstract

The invention discloses a power plant network security asset management method based on differential privacy and a related device, and belongs to the technical field of power plant network security. According to the differential privacy-based power plant network security asset management method provided by the invention, firstly, the assets are identified and classified, so that the characteristics and attributes of the assets are better understood, and subsequent risk assessment and security management are facilitated; secondly, through differential privacy processing, privacy of individuals or organizations can be protected on the premise that analysis results are not affected, and sensitive information leakage is avoided; in addition, through risk assessment and security policy formulation, measures can be taken in a targeted manner, and the security level of assets is improved. And finally, through monitoring and optimization, the privacy protection effect can be continuously improved, and asset information security is ensured.

Description

Technical Field

[0001] The present invention relates to the technical field of power plant network security, and in particular to a power plant network security asset management method and related devices based on differential privacy. Background Art

[0002] As the core hub of the energy supply system, the network security status of power plants is directly related to the smooth operation of the power system and the normal order of people's daily life.

[0003] The effective management of power plant network security assets constitutes an indispensable cornerstone for the stable operation of the power system. In a complex power network, the interaction between power plants and the power grid depends on intensive data exchange and communication links. If there are omissions in the network security asset management of power plants, it is very easy to cause security crises such as the penetration of malware, illegal leakage or tampering of data, and thus shake the overall stability of the power system. Therefore, strengthening network security asset management has far-reaching strategic significance for ensuring the safe and reliable operation of the power system. Once the network system of a power plant is attacked or damaged, it may lead to catastrophic consequences such as sudden interruption of power supply and severe damage to key equipment. Therefore, strengthening the network security asset management of power plants and building a solid security barrier for critical infrastructure are key links in safeguarding national security and maintaining social stability.

[0004] In addition, network security risks may also cause heavy economic losses to power plants. For example, the infiltration of malicious software may paralyze the control system of a power plant, causing equipment damage and production stagnation; data leakage may leak the core technology and business secrets of the power plant, causing immeasurable commercial damage. Therefore, improving the level of network security asset management and effectively preventing network security risks are also crucial to protecting the economic interests of power plants.

[0005] At present, the network security asset management of power plants mainly includes the following steps: conduct a comprehensive inventory of all network assets in the power plant, including hardware equipment (such as servers, routers, switches, etc.), software systems (such as operating systems, application software, databases, etc.) and network architecture (such as network topology, IP address allocation, etc.); classify the identified assets for subsequent targeted protection and management; establish a detailed ledger for each type of asset, recording the basic information of the asset (such as name, model, specifications, manufacturer, etc.), usage status (such as online, offline, maintenance, etc.), responsible persons and related security configurations and protective measures; strengthen the power plant network Physical security protection of equipment, such as installing access control systems and surveillance cameras, to prevent unauthorized personnel from entering the equipment area; configuring network security equipment such as firewalls, intrusion detection systems (IDS), intrusion prevention systems (IPS), etc., to monitor and filter data entering and leaving the power plant network in real time to prevent malicious attacks and virus intrusions; using technical means such as data encryption, data backup, and data recovery to ensure the security and integrity of power plant data. At the same time, establish a data access control mechanism to limit access rights to sensitive data; use network security monitoring tools and technical means to continuously monitor and warn the power plant network, and promptly discover and deal with potential security risks.

[0006] However, the above-mentioned power plant network security asset management solution has a flaw that cannot be ignored: it fails to fully take into account the dual needs of network security and sensitive information leakage prevention. As a cutting-edge privacy protection method, differential privacy technology is unique in that it does not simply mask data, but maintains the availability and accuracy of data as much as possible while ensuring privacy security. This technology cleverly disrupts the intuitiveness of the data by cleverly incorporating random noise into the original data, thereby supporting data analysis while protecting privacy. Even if an attacker manages to obtain part of the data, it is difficult to accurately restore the original data, which effectively protects the privacy security of the data.

[0007] In view of this, technicians in this field are currently facing an urgent technical challenge: how to design and implement a power plant network security asset management method and related devices based on differential privacy, effectively curbing the leakage of sensitive information while ensuring the comprehensiveness and efficiency of power plant network security asset management. The realization of this goal will not only help improve the level of network security protection of power plants, but also provide a more solid guarantee for the protection of sensitive information. Summary of the invention

[0008] The purpose of the present invention is to provide a power plant network security asset management method and related devices based on differential privacy, so as to overcome the problem that power plant network asset management in the prior art cannot fully take into account the dual needs of network security and sensitive information leakage prevention.

[0009] The present invention solves the above technical problems through the following technical solutions: A power plant network security asset management method based on differential privacy includes the following steps: S1. Identify the asset data of the power plant network, classify the identified asset data, and obtain asset data of different categories; S2. Perform the following operations on each category of asset data: S2.1 pre-processes the asset data to obtain asset data A; S2.2 Classify the importance level and security level of asset data A; S2.3 Set the parameters of differential privacy based on different combinations of importance level and security level, including privacy budget ε and sensitivity f, calculate the Laplace noise scale parameter , generate Laplace noise; S2.4 obtains the real number of vulnerabilities, performs differential privacy processing on asset data A, adds Laplace noise, and obtains the number of virtual vulnerabilities; S2.5 collects risk indicators of asset data A, including normalized patch level, security incident history, number of virtual vulnerabilities, and corresponding privacy budget ε, assigns risk weights to risk indicators, conducts security risk assessment on asset data A, obtains risk values, and obtains security risk assessment results based on the risk values; S3. Based on the security risk assessment results calculated for each category, formulate corresponding security policies and apply the security policies to the asset data of the corresponding category.

[0010] Furthermore, different categories of asset data include at least hardware equipment, software systems and network services.

[0011] Furthermore, preprocessing includes data cleaning and format unification.

[0012] Furthermore, the importance levels include high importance, medium importance and low importance; and the safety levels include high risk, medium risk and low risk.

[0013] Furthermore, the Laplace noise scale parameter Specifically: .

[0015] Furthermore, the risk value is specifically: The number of virtual vulnerabilities × their corresponding weight + the history of security incidents × their corresponding weight + the corresponding privacy budget ε × their corresponding weight + (1 - patch level) × the weight corresponding to the patch level; The security risk assessment results specifically include level one risk, level two risk and level three risk; when the security risk assessment result is level one risk, the corresponding security policy is high-level priority processing, and security reinforcement and vulnerability repair are carried out; when the security risk assessment result is level two risk, the corresponding security policy is low-level priority processing, and patch management and vulnerability repair are carried out; when the security risk assessment result is level three risk, the corresponding security policy is to maintain the status quo and regularly monitor the security risk assessment results.

[0016] Furthermore, it also includes step S4, monitoring the changes of external threats and internal business needs in real time and adjusting the privacy budget ε. When a new external threat is added, the privacy budget ε is reduced; when the internal business needs add new requirements for the accuracy of data analysis, the privacy budget ε is increased.

[0017] An electronic device includes a memory, a processor, and a computer program stored in the memory and executable on the processor. When the processor executes the program, the above-mentioned power plant network security asset management method based on differential privacy is implemented.

[0018] A computer-readable storage medium stores a computer program, which, when executed by a processor, implements the above-mentioned power plant network security asset management method based on differential privacy.

[0019] A computer program product includes a computer program, which implements the above-mentioned power plant network security asset management method based on differential privacy when executed by a processor.

[0020] Compared with the prior art, the positive and progressive effects of the present invention are: The power plant network security asset management method based on differential privacy provided by the present invention includes multiple stages, each stage has clear goals and tasks, and cooperates with each other to jointly achieve effective management and protection of power plant network security assets. Specifically, firstly, by identifying and classifying assets, the characteristics and attributes of assets can be better understood, which is helpful for subsequent risk assessment and security management. Secondly, through differential privacy processing, the privacy of individuals or organizations can be protected without affecting the analysis results, and the leakage of sensitive information can be avoided. In addition, through risk assessment and security strategy formulation, targeted measures can be taken to improve the security level of assets. Finally, through monitoring and optimization, the effect of privacy protection can be continuously improved to ensure the security of asset information. BRIEF DESCRIPTION OF THE DRAWINGS

[0021] The drawings in the specification are used to provide further understanding of the present invention and constitute a part of the present invention. The schematic embodiments of the present invention and their descriptions are used to explain the present invention and do not constitute improper limitations on the present invention.

[0022] Figure 1It is a flowchart of a power plant network security asset management method based on differential privacy provided by an exemplary embodiment of the present application. DETAILED DESCRIPTION

[0023] In order to make the purpose, technical solutions and advantages of the embodiments of the present invention clearer, the technical solutions in the embodiments of the present invention will be clearly and completely described below in conjunction with the drawings in the embodiments of the present invention. Obviously, the described embodiments are part of the embodiments of the present invention, not all of the embodiments. Generally, the components of the embodiments of the present invention described and shown in the drawings here can be arranged and designed in various different configurations.

[0024] Therefore, the following detailed description of the embodiments of the present invention provided in the accompanying drawings is not intended to limit the scope of the invention claimed for protection, but merely represents selected embodiments of the present invention. Based on the embodiments of the present invention, all other embodiments obtained by ordinary technicians in this field without creative work are within the scope of protection of the present invention.

[0025] It should be noted that similar reference numerals and letters denote similar items in the following drawings, and therefore, once an item is defined in one drawing, further definition and explanation thereof is not required in subsequent drawings.

[0026] In the description of the embodiments of the present invention, it should be noted that if the terms "upper", "lower", "horizontal", "inner", etc. indicate an orientation or positional relationship based on the orientation or positional relationship shown in the drawings, or the orientation or positional relationship in which the product of the invention is usually placed when in use, it is only for the convenience of describing the present invention and simplifying the description, and does not indicate or imply that the device or element referred to must have a specific orientation, be constructed and operated in a specific orientation, and therefore cannot be understood as a limitation on the present invention. In addition, the terms "first", "second", etc. are only used to distinguish the description, and cannot be understood as indicating or implying relative importance.

[0027] In addition, if the term "horizontal" appears, it does not mean that the component must be absolutely horizontal, but can be slightly tilted. For example, "horizontal" only means that its direction is more horizontal than "vertical", which does not mean that the structure must be completely horizontal, but can be slightly tilted.

[0028] In the description of the embodiments of the present invention, it is also necessary to explain that, unless otherwise clearly specified and limited, the terms "set", "install", "connect", and "connect" should be understood in a broad sense, for example, it can be a fixed connection, a detachable connection, or an integral connection; it can be a mechanical connection or an electrical connection; it can be a direct connection, or it can be indirectly connected through an intermediate medium, or it can be the internal connection of two components. For ordinary technicians in this field, the specific meanings of the above terms in the present invention can be understood according to specific circumstances.

[0029] The present invention is further described in detail below in conjunction with the accompanying drawings, which are intended to explain the present invention rather than to limit it.

[0030] See also Figure 1 The present invention provides a power plant network security asset management method based on differential privacy, comprising the following steps: S1. Identify the asset data of the power plant network, classify the identified asset data, and obtain asset data of different categories; S2. Perform the following operations on each category of asset data: S2.1 pre-processes the asset data to obtain asset data A; S2.2 Classify the importance level and security level of asset data A; S2.3 Set the parameters of differential privacy based on different combinations of importance level and security level, including privacy budget ε and sensitivity f, calculate the Laplace noise scale parameter , generate Laplace noise; S2.4 obtains the real number of vulnerabilities, performs differential privacy processing on asset data A, adds Laplace noise, and obtains the number of virtual vulnerabilities; S2.5 collects risk indicators of asset data A, including normalized patch level, security incident history, number of virtual vulnerabilities, and corresponding privacy budget ε, assigns risk weights to risk indicators, conducts security risk assessment on asset data A, obtains risk values, and obtains security risk assessment results based on the risk values; S3. Based on the security risk assessment results calculated for each category, formulate corresponding security policies and apply the security policies to the asset data of the corresponding category.

[0031] This method uses differential privacy technology to effectively protect the privacy of data by adding Laplace noise to asset data. Even if an attacker obtains part of the data, the original data cannot be accurately inferred, which greatly reduces the risk of sensitive information leakage. By collecting the patch level, security event history, and number of virtual vulnerabilities of asset data, and performing normalization and risk weight assignment, this method can generate accurate security risk assessment results. These results directly guide the formulation of security policies, so that security policies can be efficiently applied to the corresponding categories of asset data, improving the overall effectiveness of network security management in power plants. At the same time, by continuously collecting and analyzing the security risk assessment results of asset data, power plants can promptly discover potential safety hazards and take corresponding improvement measures. This continuous improvement mechanism helps to improve the network security protection capabilities of power plants and ensure the stable operation of the power system and the normal order of people's lives.

[0032] Specifically, different categories of asset data include at least hardware equipment, software systems, and network services.

[0033] Specifically, preprocessing includes data cleaning and format unification.

[0034] Specifically, the importance levels include high importance, medium importance and low importance; the security levels include high risk, medium risk and low risk.

[0035] For example, critical servers and core databases are of high importance; ordinary workstations and secondary servers are of medium importance; network peripherals and auxiliary services are of low importance; unpatched critical servers and devices with major known vulnerabilities are of high risk; devices that are updated on time but may be exposed to external attack surfaces are of medium risk; and devices that have strong protection measures installed and have a low risk of exposure are of low risk.

[0036] By dividing asset data into detailed importance and security levels and setting differential privacy parameters based on these levels, this refined processing method makes security risk assessment more accurate and enables more targeted security strategies to be formulated for different categories of asset data.

[0037] Specifically, the Laplace noise scale parameter Specifically: .

[0039] Specifically, the risk value is: The number of virtual vulnerabilities × their corresponding weight + the history of security incidents × their corresponding weight + the corresponding privacy budget ε × their corresponding weight + (1 - patch level) × the weight corresponding to the patch level; The security risk assessment results specifically include level one risk, level two risk and level three risk; when the security risk assessment result is level one risk, the corresponding security policy is high-level priority processing, and security reinforcement and vulnerability repair are carried out; when the security risk assessment result is level two risk, the corresponding security policy is low-level priority processing, and patch management and vulnerability repair are carried out; when the security risk assessment result is level three risk, the corresponding security policy is to maintain the status quo and regularly monitor the security risk assessment results.

[0040] Specifically, it also includes step S4, real-time monitoring of changes in external threats and internal business requirements and adjusting the privacy budget ε. When a new external threat is added, the privacy budget ε is reduced; when the internal business requirements add new requirements for the accuracy of data analysis, the privacy budget ε is increased. The privacy budget ε in this method can be adjusted according to actual conditions to adapt to different privacy protection needs and security risk assessment requirements. This flexibility and adaptability enable this method to be widely used in various scenarios of power plant network security asset management.

[0041] For example, based on the importance level and security level, the privacy budget ε range under different combinations is defined. The determination of the privacy budget should take into account both the availability of data analysis and the strength of privacy protection.

[0042] The privacy budget ε can be set as follows:

[0043] For example, for a high-importance, high-risk critical server, the corresponding privacy budget ε is set to 0.1 and the sensitivity f = 1, the Laplace noise scale parameter is calculated =10; Assuming that the number of real vulnerabilities is 3, differential privacy processing is performed, and the generated Laplace noise is -2.2, the number of virtual vulnerabilities is 3 + (-2.1) = 0.8.

[0044] For example, assuming that the patch level, security incident history, and number of virtual vulnerabilities of asset data A are collected, the normalized results and the specific value of the privacy budget ε are as follows:

[0045] Risk weights are assigned based on their relative importance in the overall risk calculation, including: number of virtual vulnerabilities: 40%; patch level: 30%; security incident history: 10%; specific value of the privacy budget ε of asset data A: 20%; Perform security risk assessment on asset data A to obtain a risk value. When the risk value is greater than 0.6, the security risk assessment result is a first-level risk; when 0.4 is less than or equal to 0.6, the security risk assessment result is a second-level risk; when the risk value is less than or equal to 0.4, the security risk assessment result is a third-level risk. The security risk assessment of asset data A: ASSET01 is as follows: 0.4 × 0.8 + 0.3 × (1 -0.6) + 0.2 × 1.0 + 0.1 × 0.2 = 0.32 + 0.12 + 0.20 + 0.02 = 0.66 The security risk assessment result for this category is level 1 risk, and the corresponding security policy is high-level priority processing, and security reinforcement and vulnerability repair are carried out; The security risk assessment of asset data A: ASSET02 is as follows: 0.4 × 0.3 + 0.3 × (1 -0.9) + 0.2 × 0.5 + 0.1 × 0.1 = 0.12 + 0.03 + 0.10 + 0.01 = 0.26 The security risk assessment result for this category is level 3 risk, and the corresponding security strategy is to maintain the status quo and regularly monitor the security risk assessment results; The security risk assessment of asset data A: ASSET03 is as follows: 0.4 × 0.6 + 0.3 × (1 -0.4) + 0.2 × 0.1 + 0.1 × 0.3 = 0.24 + 0.18 + 0.02 + 0.03 = 0.47 The security risk assessment result for this category is level 2 risk, and the corresponding security policy is to prioritize low-level processing and perform patch management and vulnerability repair.

[0046] Based on the same inventive concept, an embodiment of the present application provides an electronic device, including a memory, a processor, and a computer program stored in the memory and executable on the processor. When the processor executes the computer program, the steps of the power plant network security asset management method based on differential privacy are implemented, wherein the memory may include a memory, such as a high-speed random access memory, and may also include a non-volatile memory, such as at least one disk memory, etc.; the processor, the network interface, and the memory are interconnected through an internal bus, and the internal bus may be an industrial standard architecture bus, a peripheral component interconnection standard bus, an extended industrial standard structure bus, etc. The bus can be divided into an address bus, a data bus, a control bus, etc. The memory is used to store programs. Specifically, the program may include a program code, and the program code includes computer operation instructions. The memory may include a memory and a non-volatile memory, and provide instructions and data to the processor.

[0047] Based on the same inventive concept, an embodiment of the present application provides a computer-readable storage medium, wherein the computer-readable storage medium stores a computer program, and when the computer program is executed by a processor, the steps of the power plant network security asset management method based on differential privacy are implemented. Specifically, the computer-readable storage medium includes, but is not limited to, for example, volatile memory and / or non-volatile memory. The volatile memory may include a random access memory (RAM) and / or a cache memory (cache), etc. The non-volatile memory may include a read-only memory (ROM), a hard disk, a flash memory, an optical disk, a magnetic disk, etc.

[0048] Based on the same inventive concept, an embodiment of the present application provides a computer program product, which includes a computer program stored on a computer-readable storage medium, and the computer program includes program instructions. When the program instructions are executed by a computer device, the computer device executes the steps of the above-mentioned power plant network security asset management method based on differential privacy.

[0049] It will be appreciated by those skilled in the art that embodiments of the present invention may be provided as methods, systems, or computer program products. Therefore, the present invention may take the form of a complete hardware embodiment, a complete software embodiment, or an embodiment combining software and hardware. Furthermore, the present invention may take the form of a computer program product implemented on one or more computer-usable storage media (including but not limited to disk storage, CD-ROM, optical storage, etc.) containing computer-usable program code.

[0050] The present invention is described with reference to flowcharts and / or block diagrams of methods, devices (systems), and computer program products according to embodiments of the present invention. It should be understood that each process and / or block in the flowchart and / or block diagram, as well as the combination of processes and / or blocks in the flowchart and / or block diagram, can be implemented by computer program instructions. These computer program instructions can be provided to a processor of a general-purpose computer, a special-purpose computer, an embedded processor, or other programmable data processing device to produce a machine, so that the instructions executed by the processor of the computer or other programmable data processing device generate instructions for implementing the processes in the flowchart and / or block diagram. Figure 1 A process or multiple processes and / or boxes Figure 1 A device that provides the functions specified in a block or multiple blocks.

[0051] These computer program instructions may also be stored in a computer-readable memory capable of directing a computer or other programmable data processing device to operate in a specific manner, so that the instructions stored in the computer-readable memory produce an article of manufacture comprising an instruction device, which implements the process Figure 1A process or multiple processes and / or boxes Figure 1 A function specified in one or more boxes.

[0052] These computer program instructions can also be loaded onto a computer or other programmable data processing device so that a series of operating steps are executed on the computer or other programmable device to produce a computer-implemented process, thereby providing instructions for implementing the process. Figure 1 A process or multiple processes and / or boxes Figure 1 The steps for the functions specified in one or more boxes.

[0053] Finally, it should be noted that the above-listed embodiments exist only as one or more specific forms of expression of the technical solution of the present invention. Their purpose is to clearly explain the concept, principle and application of the present invention through specific examples, and it is by no means intended to limit the protection scope of the present invention to these specific embodiments. In fact, the real value of the present invention lies in the technical ideas and innovations it proposes, rather than its form of expression or means of implementation.

[0054] For ordinary technicians in the relevant technical field, after in-depth reading and understanding of the technical solution of the present invention, they are fully capable of making various forms of changes, modifications or equivalent substitutions to the specific implementation methods of the invention based on their own professional knowledge and skills. These changes may include but are not limited to: adjusting the value range of technical parameters, optimizing algorithm processes to improve efficiency, replacing some technical components to achieve better compatibility or reduce costs, etc. As long as these changed technical solutions still substantially maintain the technical features claimed for protection by the original invention, that is, they can still achieve the core functions and effects of the present invention, then these changes should be deemed to fall within the scope of protection of the pending claims of the present invention.

[0055] In addition, with the continuous progress and development of technology, new technical means and methods continue to emerge, which also provides broad space for further improvement and perfection of the present invention. Therefore, the protection scope of the present invention should also include those reasonably foreseeable improvements and extensions based on the existing technology. As long as these improvements and extensions do not deviate from the basic principles and core concepts of the present invention, they should be regarded as equivalents of the present invention and are also protected by patent rights.

Claims

1. A power plant network security asset management method based on differential privacy, characterized in that: The following steps are involved: S1. Identify the asset data of the power plant network, classify the identified asset data, and obtain asset data of different categories; S2. Perform the following operations on each category of asset data: S2.1 pre-processes the asset data to obtain asset data A; S2.2 Classify the importance level and security level of asset data A; S2.3 Set the parameters of differential privacy based on different combinations of importance level and security level, including privacy budget ε and sensitivity f, calculate the Laplace noise scale parameter , generate Laplace noise; S2.4 obtains the real number of vulnerabilities, performs differential privacy processing on asset data A, adds Laplace noise, and obtains the number of virtual vulnerabilities; S2.5 collect risk indicators of asset data A, wherein the risk indicators include normalized patch level, security incident history, number of virtual vulnerabilities, and corresponding privacy budget ε, assign risk weights to the risk indicators, perform security risk assessment on asset data A, obtain risk values, and obtain security risk assessment results based on the risk values; S3. Based on the security risk assessment results calculated for each category, formulate corresponding security policies and apply the security policies to the asset data of the corresponding category.

2. A power plant network security asset management method based on differential privacy according to claim 1, characterized in that: The different categories of asset data include at least hardware equipment, software systems and network services.

3. A power plant network security asset management method based on differential privacy according to claim 1, characterized in that: The preprocessing includes data cleaning and format unification.

4. A power plant network security asset management method based on differential privacy according to claim 1, characterized in that: Importance levels include high importance, medium importance and low importance; security levels include high risk, medium risk and low risk.

5. A power plant network security asset management method based on differential privacy according to claim 1, characterized in that: Laplace noise scale parameter Specifically: 。 6. A power plant network security asset management method based on differential privacy according to claim 1, characterized in that: The risk value is specifically: The number of virtual vulnerabilities × their corresponding weight + the history of security incidents × their corresponding weight + the corresponding privacy budget ε × their corresponding weight + (1 - patch level) × the weight corresponding to the patch level; The security risk assessment results specifically include level one risk, level two risk and level three risk; when the security risk assessment result is level one risk, the corresponding security policy is high-level priority processing, and security reinforcement and vulnerability repair are carried out; when the security risk assessment result is level two risk, the corresponding security policy is low-level priority processing, and patch management and vulnerability repair are carried out; when the security risk assessment result is level three risk, the corresponding security policy is to maintain the status quo and regularly monitor the security risk assessment results.

7. A power plant network security asset management method based on differential privacy according to claim 1, characterized in that: The method also includes step S4, monitoring the changes of external threats and internal business needs in real time and adjusting the privacy budget ε. When a new external threat is added, the privacy budget ε is reduced; when the internal business needs add new requirements for the accuracy of data analysis, the privacy budget ε is increased.

8. An electronic device comprising a memory, a processor, and a computer program stored in the memory and executable on the processor, wherein: When the processor executes the program, it implements the power plant network security asset management method based on differential privacy as described in any one of claims 1 to 7.

9. A computer-readable storage medium having a computer program stored thereon, characterized in that: When the computer program is executed by a processor, it implements the power plant network security asset management method based on differential privacy as described in any one of claims 1 to 7.

10. A computer program product, comprising a computer program, characterized in that When the computer program is executed by a processor, it implements the power plant network security asset management method based on differential privacy as described in any one of claims 1 to 7.

Images