Power plant network security asset management method based on differential privacy and related device

Abstract

This invention discloses a method and related apparatus for power plant cybersecurity asset management based on differential privacy, belonging to the field of power plant cybersecurity technology. The method for power plant cybersecurity asset management based on differential privacy provided by this invention firstly identifies and classifies assets to better understand their characteristics and attributes, which facilitates subsequent risk assessment and security management; secondly, through differential privacy processing, it protects the privacy of individuals or organizations without affecting the analysis results, preventing the leakage of sensitive information; furthermore, through risk assessment and security strategy formulation, targeted measures can be taken to improve the security level of assets; finally, through monitoring and optimization, the effectiveness of privacy protection can be continuously improved, ensuring the security of asset information.

Description

Technical Field

[0001] This invention relates to the field of power plant network security technology, specifically to a method and related apparatus for power plant network security asset management based on differential privacy. Background Technology

[0002] As a core hub in the energy supply system, the cybersecurity of power plants directly affects the stable operation of the power system and the normal order of people's daily lives.

[0003] Effective management of cybersecurity assets at power plants forms an indispensable cornerstone for the stable operation of the power system. In complex power networks, the interaction between power plants and with the grid relies on dense data exchange and communication links. If there are loopholes in the management of cybersecurity assets at power plants, it can easily trigger security crises such as malware infiltration, illegal data leaks or tampering, thereby undermining the overall stability of the power system. Therefore, strengthening cybersecurity asset management is of profound strategic significance for ensuring the safe and reliable operation of the power system. Once a power plant's network system is attacked or damaged, it could lead to catastrophic consequences such as sudden power outages and severe damage to critical equipment. Therefore, strengthening the management of cybersecurity assets at power plants and building a solid security barrier for critical infrastructure is a crucial link in safeguarding national security and maintaining social stability.

[0004] Furthermore, cybersecurity vulnerabilities can also cause significant economic losses to power plants. For example, the infiltration of malware can paralyze a power plant's control systems, leading to equipment damage and production stoppages; data breaches can expose a power plant's core technologies and trade secrets, causing incalculable commercial damage. Therefore, improving cybersecurity asset management and effectively preventing cybersecurity risks are equally crucial for safeguarding the economic interests of power plants.

[0005] Currently, the main steps in power plant network security asset management include: conducting a comprehensive inventory of all network assets within the power plant, including hardware equipment (such as servers, routers, switches, etc.), software systems (such as operating systems, application software, databases, etc.), and network architecture (such as network topology, IP address allocation, etc.); classifying and managing the identified assets to facilitate targeted protection and management later; establishing detailed ledgers for each type of asset, recording basic asset information (such as name, model, specifications, manufacturer, etc.), usage status (such as online, offline, under maintenance, etc.), responsible person, and related security configurations and protection measures; and strengthening the power plant network. Physical security measures for the equipment, such as installing access control systems and surveillance cameras, are implemented to prevent unauthorized personnel from entering the equipment area. Network security equipment, including firewalls, intrusion detection systems (IDS), and intrusion prevention systems (IPS), are configured to monitor and filter data entering and leaving the power plant network in real time, preventing malicious attacks and virus intrusions. Data encryption, backup, and recovery technologies are employed to ensure the security and integrity of power plant data. Simultaneously, a data access control mechanism is established to restrict access to sensitive data. Network security monitoring tools and technologies are used to continuously monitor and provide early warnings for the power plant network, promptly identifying and addressing potential security risks.

[0006] However, the aforementioned power plant cybersecurity asset management solution has a significant flaw: it fails to adequately address the dual needs of cybersecurity and prevention of sensitive information leakage. Differential privacy technology, as a cutting-edge privacy protection method, is unique in that it doesn't simply mask data, but rather maintains data usability and accuracy as much as possible while ensuring privacy. This technology cleverly incorporates random noise into the original data, subtly disrupting its intuitiveness, thus supporting data analysis while protecting privacy. Even if an attacker manages to obtain some data, it is difficult to accurately reconstruct the original data, thereby effectively guaranteeing data privacy.

[0007] In light of this, those skilled in the art are currently facing an urgent technical challenge: how to design and implement a differential privacy-based method and related devices for power plant cybersecurity asset management, effectively curbing the leakage of sensitive information while ensuring the comprehensiveness and efficiency of power plant cybersecurity asset management. Achieving this goal will not only help improve the cybersecurity protection level of power plants but also provide a more robust guarantee for the protection of sensitive information. Summary of the Invention

[0008] The purpose of this invention is to provide a method and related apparatus for power plant network security asset management based on differential privacy, so as to overcome the problem that the existing technology for power plant network asset management cannot fully meet the dual needs of network security and sensitive information leakage prevention.

[0009] The present invention solves the above-mentioned technical problems through the following technical solution:

[0010] A method for managing cybersecurity assets in power plants based on differential privacy includes the following steps:

[0011] S1. Identify the asset data of the power plant network, classify the identified asset data, and obtain asset data of different categories.

[0012] S2. Perform the following operations on the asset data for each category:

[0013] S2.1 preprocesses the asset data to obtain asset data A;

[0014] S2.2 classifies the importance and security levels of asset data A;

[0015] S2.3 sets differential privacy parameters based on different combinations of importance and security levels, including privacy budget ε and sensitivity. f, calculate the Laplace noise scale parameter This generates Laplace noise;

[0016] S2.4 To obtain the actual number of vulnerabilities, perform differential privacy processing on asset data A, add Laplace noise, and obtain the number of virtual vulnerabilities;

[0017] S2.5 collects risk indicators for asset data A, including normalized patch level, security event history, number of virtual vulnerabilities and corresponding privacy budget ε. Risk weights are assigned to the risk indicators, and a security risk assessment is performed on asset data A to obtain risk values. Based on the risk values, the security risk assessment results are obtained.

[0018] S3. Based on the security risk assessment results calculated for each category, formulate corresponding security strategies and apply the security strategies to the asset data of the corresponding category.

[0019] Furthermore, different categories of asset data include at least hardware devices, software systems, and network services.

[0020] Furthermore, preprocessing includes data cleaning and format standardization.

[0021] Furthermore, the importance levels include high importance, medium importance, and low importance; the security levels include high risk, medium risk, and low risk.

[0022] Furthermore, the Laplace noise scale parameter Specifically:

[0023]

[0024] Furthermore, the specific risk value is as follows:

[0025] Number of virtual vulnerabilities × their corresponding weight + Security event history × their corresponding weight + Privacy budget ε × their corresponding weight + (1 - Patch level) × Patch level's corresponding weight;

[0026] The security risk assessment results specifically include Level 1 risk, Level 2 risk, and Level 3 risk. When the security risk assessment result is Level 1 risk, the corresponding security strategy is to prioritize high-level handling, and perform security hardening and vulnerability patching. When the security risk assessment result is Level 2 risk, the corresponding security strategy is to prioritize low-level handling, and perform patch management and vulnerability patching. When the security risk assessment result is Level 3 risk, the corresponding security strategy is to maintain the status quo and monitor the security risk assessment results regularly.

[0027] Furthermore, it also includes step S4: real-time monitoring of changes in external threats and internal business needs and adjusting the privacy budget ε. When new external threats are added, the privacy budget ε is reduced; when internal business needs increase the accuracy requirements for data analysis, the privacy budget ε is increased.

[0028] An electronic device includes a memory, a processor, and a computer program stored in the memory and executable on the processor. When the processor executes the program, it implements the aforementioned method for managing cybersecurity assets of power plants based on differential privacy.

[0029] A computer-readable storage medium having a computer program stored thereon, which, when executed by a processor, implements the aforementioned differential privacy-based power plant cybersecurity asset management method.

[0030] A computer program product includes a computer program that, when executed by a processor, implements the aforementioned differential privacy-based power plant cybersecurity asset management method.

[0031] Compared with the prior art, the positive and progressive effects of the present invention are as follows:

[0032] This invention provides a differential privacy-based method for managing cybersecurity assets in power plants, comprising multiple stages, each with clearly defined goals and tasks. These stages work together to effectively manage and protect cybersecurity assets in power plants. Specifically, firstly, asset identification and classification allow for a better understanding of their characteristics and attributes, facilitating subsequent risk assessment and security management. Secondly, differential privacy processing protects the privacy of individuals or organizations without affecting the analysis results, preventing the leakage of sensitive information. Furthermore, risk assessment and security strategy development enable targeted measures to improve asset security. Finally, monitoring and optimization continuously improve the effectiveness of privacy protection, ensuring the security of asset information. Attached Figure Description

[0033] The accompanying drawings are provided to further understand the invention and constitute a part of this invention. The illustrative embodiments of the invention and their descriptions are used to explain the invention and do not constitute an improper limitation of the invention.

[0034] Figure 1 This is a flowchart of a power plant cybersecurity asset management method based on differential privacy, provided in an exemplary embodiment of this application. Detailed Implementation

[0035] To make the objectives, technical solutions, and advantages of the embodiments of the present invention clearer, the technical solutions of the embodiments of the present invention will be clearly and completely described below with reference to the accompanying drawings. Obviously, the described embodiments are only some embodiments of the present invention, and not all embodiments. The components of the embodiments of the present invention described and shown in the accompanying drawings can generally be arranged and designed in various different configurations.

[0036] Therefore, the following detailed description of the embodiments of the invention provided in the accompanying drawings is not intended to limit the scope of the claimed invention, but merely to illustrate selected embodiments of the invention. All other embodiments obtained by those skilled in the art based on the embodiments of the invention without inventive effort are within the scope of protection of the invention.

[0037] It should be noted that similar labels and letters in the following figures indicate similar items. Therefore, once an item is defined in one figure, it does not need to be further defined and explained in subsequent figures.

[0038] In the description of the embodiments of the present invention, it should be noted that if terms such as "upper," "lower," "horizontal," or "inner" indicate the orientation or positional relationship based on the orientation or positional relationship shown in the accompanying drawings, or the orientation or positional relationship commonly used when the product of the invention is in use, they are only for the convenience of describing the present invention and simplifying the description, and do not indicate or imply that the device or element referred to must have a specific orientation, or be constructed and operated in a specific orientation, and therefore should not be construed as a limitation of the present invention. Furthermore, terms such as "first" and "second" are only used to distinguish descriptions and should not be construed as indicating or implying relative importance.

[0039] Furthermore, the use of the term "horizontal" does not imply that the component must be absolutely horizontal, but rather that it can be slightly tilted. For example, "horizontal" simply means that its direction is more horizontal than "vertical," and does not mean that the structure must be completely horizontal, but can be slightly tilted.

[0040] In the description of the embodiments of the present invention, it should also be noted that, unless otherwise explicitly specified and limited, the terms "set," "install," "connect," and "link" should be interpreted broadly. For example, they can refer to a fixed connection, a detachable connection, or an integral connection; they can refer to a mechanical connection or an electrical connection; they can refer to a direct connection or an indirect connection through an intermediate medium; and they can refer to the internal connection of two components. Those skilled in the art can understand the specific meaning of the above terms in the present invention according to the specific circumstances.

[0041] The present invention will be further described in detail below with reference to the accompanying drawings. These descriptions are for illustrative purposes only and are not intended to limit the scope of the invention.

[0042] See Figure 1 This invention provides a method for managing cybersecurity assets in power plants based on differential privacy, comprising the following steps:

[0043] S1. Identify the asset data of the power plant network, classify the identified asset data, and obtain asset data of different categories.

[0044] S2. Perform the following operations on the asset data for each category:

[0045] S2.1 preprocesses the asset data to obtain asset data A;

[0046] S2.2 classifies the importance and security levels of asset data A;

[0047] S2.3 sets differential privacy parameters based on different combinations of importance and security levels, including privacy budget ε and sensitivity. f, calculate the Laplace noise scale parameter This generates Laplace noise;

[0048] S2.4 To obtain the actual number of vulnerabilities, perform differential privacy processing on asset data A, add Laplace noise, and obtain the number of virtual vulnerabilities;

[0049] S2.5 collects risk indicators for asset data A, including normalized patch level, security event history, number of virtual vulnerabilities and corresponding privacy budget ε. Risk weights are assigned to the risk indicators, and a security risk assessment is performed on asset data A to obtain risk values. Based on the risk values, the security risk assessment results are obtained.

[0050] S3. Based on the security risk assessment results calculated for each category, formulate corresponding security strategies and apply the security strategies to the asset data of the corresponding category.

[0051] This method utilizes differential privacy technology, adding Laplace noise to asset data to effectively protect data privacy. Even if an attacker obtains partial data, they cannot accurately infer the original data, thus significantly reducing the risk of sensitive information leakage. By collecting patch levels, security event history, and the number of virtual vulnerabilities from asset data, and performing normalization and risk weighting, this method can generate accurate security risk assessment results. These results directly guide the formulation of security policies, enabling them to be efficiently applied to corresponding categories of asset data, improving the overall effectiveness of power plant cybersecurity management. Simultaneously, by continuously collecting and analyzing the security risk assessment results of asset data, power plants can promptly identify potential security vulnerabilities and take corresponding improvement measures. This continuous improvement mechanism helps enhance the cybersecurity protection capabilities of power plants, ensuring the stable operation of the power system and the normal order of people's lives.

[0052] Specifically, different categories of asset data include at least hardware devices, software systems, and network services.

[0053] Specifically, preprocessing includes data cleaning and format standardization.

[0054] Specifically, the importance levels include high importance, medium importance, and low importance; the security levels include high risk, medium risk, and low risk.

[0055] For example, critical servers and core databases are considered high importance; ordinary workstations and secondary servers are considered medium importance; network peripherals and auxiliary services are considered low importance; unpatched critical servers and devices with significant known vulnerabilities are considered high risk; devices that are updated on time but may be exposed to external attacks are considered medium risk; and devices with strong protection measures and low exposure risk are considered low risk.

[0056] By classifying asset data into detailed importance and security levels and setting differential privacy parameters based on these levels, this granular approach enables more accurate security risk assessments and allows for the development of more targeted security strategies for different categories of asset data.

[0057] Specifically, the Laplace noise scale parameter Specifically:

[0058]

[0059] Specifically, the risk value is as follows:

[0060] Number of virtual vulnerabilities × their corresponding weight + Security event history × their corresponding weight + Privacy budget ε × their corresponding weight + (1 - Patch level) × Patch level's corresponding weight;

[0061] The security risk assessment results specifically include Level 1 risk, Level 2 risk, and Level 3 risk. When the security risk assessment result is Level 1 risk, the corresponding security strategy is to prioritize high-level handling, and perform security hardening and vulnerability patching. When the security risk assessment result is Level 2 risk, the corresponding security strategy is to prioritize low-level handling, and perform patch management and vulnerability patching. When the security risk assessment result is Level 3 risk, the corresponding security strategy is to maintain the status quo and monitor the security risk assessment results regularly.

[0062] Specifically, the method also includes step S4: real-time monitoring of changes in external threats and internal business needs, and adjusting the privacy budget ε accordingly. When new external threats emerge, the privacy budget ε is reduced; when internal business needs increase the accuracy requirements for data analysis, the privacy budget ε is increased. The privacy budget ε in this method can be adjusted according to actual circumstances to adapt to different privacy protection needs and security risk assessment requirements. This flexibility and adaptability enable this method to be widely applied in various power plant cybersecurity asset management scenarios.

[0063] For example, privacy budget ε ranges are defined for different combinations based on importance and security levels. Determining the privacy budget must consider both the availability of data analytics and the strength of privacy protection.

[0064] Privacy budget ε can be set as follows:

[0065]

[0066] For example, for a critical server of high importance and high risk, the corresponding privacy budget ε is set to 0.1, and the sensitivity is... f = 1, the Laplace noise scale parameter is calculated. =10;

[0067] Assuming the number of real vulnerabilities is 3, differential privacy processing is performed, and the generated Laplace noise is -2.2, then the number of virtual vulnerabilities is 3 + (-2.1) = 0.8.

[0068] For example, suppose we collect the patch level, security event history, and number of virtual vulnerabilities for asset data A, and the normalized result and the specific value of the privacy budget ε are as follows:

[0069]

[0070] Based on their relative importance in the overall risk calculation, risk weights are assigned as follows: number of virtual vulnerabilities: 40%; patch level: 30%; security event history: 10%; specific value of the privacy budget ε for asset data A: 20%.

[0071] A security risk assessment is performed on asset data A to obtain a risk value. When the risk value > 0.6, the security risk assessment result is Level 1 risk; when 0.4 < risk value ≤ 0.6, the security risk assessment result is Level 2 risk; when the risk value ≤ 0.4, the security risk assessment result is Level 3 risk.

[0072] A security risk assessment was conducted on asset data A: ASSET01, specifically: 0.4 × 0.8 + 0.3 × (1 -0.6) + 0.2 × 1.0 + 0.1 × 0.2 = 0.32 + 0.12 + 0.20 + 0.02 = 0.66

[0073] The security risk assessment result for this category is Level 1 risk, and the corresponding security strategy is to prioritize it at a high level, and to carry out security hardening and vulnerability patching.

[0074] A security risk assessment was conducted on asset data A: ASSET02, specifically: 0.4 × 0.3 + 0.3 × (1 -0.9) + 0.2 × 0.5 + 0.1 × 0.1 = 0.12 + 0.03 + 0.10 + 0.01 = 0.26

[0075] The security risk assessment result for this category is Level 3 risk, and the corresponding security strategy is to maintain the status quo and regularly monitor the security risk assessment results.

[0076] A security risk assessment was conducted on asset data A: ASSET03, specifically: 0.4 × 0.6 + 0.3 × (1 -0.4) + 0.2 × 0.1 + 0.1 × 0.3 = 0.24 + 0.18 + 0.02 + 0.03 = 0.47

[0077] The security risk assessment result for this category is Level 2 risk, and the corresponding security strategy is to prioritize low-level handling and perform patch management and vulnerability remediation.

[0078] Based on the same inventive concept, embodiments of this application provide an electronic device, including a memory, a processor, and a computer program stored in the memory and executable on the processor. When the processor executes the computer program, it implements the steps of a differential privacy-based power plant network security asset management method. The memory may include main memory, such as high-speed random access memory, and may also include non-volatile memory, such as at least one disk storage device. The processor, network interface, and memory are interconnected via an internal bus, which may be an industry-standard architecture bus, a peripheral component interconnection standard bus, an extended industry-standard architecture bus, etc. The bus can be divided into an address bus, a data bus, a control bus, etc. The memory stores the program; specifically, the program may include program code, which includes computer operation instructions. The memory may include main memory and non-volatile memory, and provides instructions and data to the processor.

[0079] Based on the same inventive concept, embodiments of this application provide a computer-readable storage medium storing a computer program. When executed by a processor, the computer program implements the steps of the differential privacy-based power plant network security asset management method. Specifically, the computer-readable storage medium includes, but is not limited to, volatile memory and / or non-volatile memory. The volatile memory may include random access memory (RAM) and / or cache memory, etc. The non-volatile memory may include read-only memory (ROM), hard disk, flash memory, optical disk, magnetic disk, etc.

[0080] Based on the same inventive concept, this application provides a computer program product, which includes a computer program stored on a computer-readable storage medium. The computer program includes program instructions, which, when executed by a computer device, cause the computer device to perform the steps of the above-described differential privacy-based power plant network security asset management method.

[0081] Those skilled in the art will understand that embodiments of the present invention can be provided as methods, systems, or computer program products. Therefore, the present invention can take the form of a completely hardware embodiment, a completely software embodiment, or an embodiment combining software and hardware aspects. Furthermore, the present invention can take the form of a computer program product embodied on one or more computer-usable storage media (including, but not limited to, disk storage, CD-ROM, optical storage, etc.) containing computer-usable program code.

[0082] This invention is described with reference to flowchart illustrations and / or block diagrams of methods, apparatus (systems), and computer program products according to embodiments of the invention. It will be understood that each block of the flowchart illustrations and / or block diagrams, and combinations of blocks in the flowchart illustrations and / or block diagrams, can be implemented by computer program instructions. These computer program instructions can be provided to a processor of a general-purpose computer, special-purpose computer, embedded processor, or other programmable data processing apparatus to produce a machine, such that the instructions, which execute via the processor of the computer or other programmable data processing apparatus, generate instructions for implementing the flowchart illustrations and / or block diagrams. Figure 1 One or more processes and / or boxes Figure 1 A device that provides the functions specified in one or more boxes.

[0083] These computer program instructions may also be stored in a computer-readable storage medium that can direct a computer or other programmable data processing device to function in a particular manner, such that the instructions stored in the computer-readable storage medium produce an article of manufacture including instruction means, which are implemented in a process Figure 1 One or more processes and / or boxes Figure 1 The function specified in one or more boxes.

[0084] These computer program instructions may also be loaded onto a computer or other programmable data processing equipment to cause a series of operational steps to be performed on the computer or other programmable equipment to produce a computer-implemented process, thereby providing instructions that execute on the computer or other programmable equipment for implementing the process. Figure 1 One or more processes and / or boxes Figure 1 The steps of the function specified in one or more boxes.

[0085] Finally, it should be noted that the embodiments listed above are merely one or more specific manifestations of the technical solution of this invention. Their purpose is to clearly illustrate the concept, principle, and application of this invention through specific examples, and is by no means intended to limit the scope of protection of this invention to these specific embodiments. In fact, the true value of this invention lies in its proposed technical ideas and innovations, rather than its manifestations or implementation methods.

[0086] For those skilled in the art, after thoroughly reading and understanding the technical solution of this invention, they are fully capable of making various changes, modifications, or equivalent substitutions to the specific implementation of the invention based on their own professional knowledge and skills. These changes may include, but are not limited to: adjusting the range of technical parameters, optimizing the algorithm flow to improve efficiency, and replacing some technical components to achieve better compatibility or reduce costs. As long as these modified technical solutions substantially retain the technical features claimed by the original invention, that is, they can still achieve the core functions and effects of this invention, then these changes should be considered to fall within the scope of protection of the pending claims of this invention.

[0087] Furthermore, with the continuous progress and development of technology, new technical means and methods are constantly emerging, which provides ample space for further improvement and perfection of this invention. Therefore, the scope of protection of this invention should also include reasonable and foresightful improvements and extensions based on existing technology. As long as these improvements and extensions do not depart from the basic principles and core concepts of this invention, they should be considered equivalents of this invention and are equally protected by patent rights.

Claims

1. A method for managing cybersecurity assets in power plants based on differential privacy, characterized in that, Includes the following steps: S1. Identify the asset data of the power plant network, classify the identified asset data, and obtain asset data of different categories. S2. Perform the following operations on the asset data for each category: S2.1 preprocesses the asset data to obtain asset data A; S2.2 classifies the importance and security levels of asset data A; S2.3 sets differential privacy parameters based on different combinations of importance and security levels, including privacy budget ε and sensitivity. f, calculate the Laplace noise scale parameter This generates Laplace noise; S2.4 Obtain the actual number of vulnerabilities, perform differential privacy processing on the actual number of vulnerabilities, add Laplace noise, and obtain the number of virtual vulnerabilities. S2.5 Collect risk indicators for asset data A. These risk indicators include normalized patch levels, security event history, number of virtual vulnerabilities, and corresponding privacy budgets ε. Assign risk weights to these risk indicators, perform a security risk assessment on asset data A, obtain risk values, and derive the security risk assessment result based on these risk values. Specifically, the risk values ​​are: Number of virtual vulnerabilities × their corresponding weight + Security event history × their corresponding weight + Privacy budget ε × their corresponding weight + (1 - Patch level) × Patch level's corresponding weight; The security risk assessment results specifically include Level 1 risk, Level 2 risk, and Level 3 risk. When the security risk assessment result is Level 1 risk, the corresponding security strategy is to prioritize high-level handling, and perform security hardening and vulnerability patching. When the security risk assessment result is Level 2 risk, the corresponding security strategy is to prioritize low-level handling, and perform patch management and vulnerability patching. When the security risk assessment result is Level 3 risk, the corresponding security strategy is to maintain the status quo and monitor the security risk assessment results regularly. S3. Based on the security risk assessment results calculated for each category, formulate corresponding security strategies and apply the security strategies to the asset data of the corresponding category; S4. Monitor changes in external threats and internal business needs in real time and adjust the privacy budget ε accordingly. When new external threats are introduced, reduce the privacy budget ε; when internal business needs increase the accuracy requirements for data analysis, increase the privacy budget ε.

2. The method for managing power plant network security assets based on differential privacy according to claim 1, characterized in that, The different categories of asset data include at least hardware devices, software systems, and network services.

3. The method for managing power plant network security assets based on differential privacy according to claim 1, characterized in that, The preprocessing includes data cleaning and format standardization.

4. The method for managing cybersecurity assets in power plants based on differential privacy according to claim 1, characterized in that, Importance levels include high importance, medium importance, and low importance; security levels include high risk, medium risk, and low risk.

5. The method for managing power plant network security assets based on differential privacy according to claim 1, characterized in that, Laplace noise scale parameters Specifically:

6. An electronic device comprising a memory, a processor, and a computer program stored in the memory and executable on the processor, characterized in that, When the processor executes the program, it implements the power plant network security asset management method based on differential privacy as described in any one of claims 1 to 5.

7. A computer-readable storage medium having a computer program stored thereon, characterized in that, When the computer program is executed by the processor, it implements the differential privacy-based power plant network security asset management method as described in any one of claims 1 to 5.

8. A computer program product, comprising a computer program, characterized in that, When the computer program is executed by the processor, it implements the differential privacy-based power plant network security asset management method as described in any one of claims 1 to 5.

Images