Power system test method and device, electronic equipment, storage medium and program

Abstract

The embodiment of the invention discloses a power system test method and device, electronic equipment, a storage medium and a program, and the method comprises the steps: generating a target power system model of a target power system; wherein the target power system model comprises power hardware equipment, a virtual software model and a detection tool set; performing data acquisition processing on the electric power hardware equipment, the virtual software model and the detection tool set in the target electric power system model to obtain target test electric power data; and performing risk assessment on the target power system according to the target test power data to obtain a power system risk assessment result. According to the technical scheme of the embodiment of the invention, comprehensive and deep testing of the power system can be realized, the testing efficiency of the power system is improved, and the testing cost is reduced.

Description

Technical Field

[0001] Embodiments of the present invention relate to the technical field of power system testing, and in particular to a power system testing method, device, electronic equipment, storage medium and program. Background Art

[0002] The power system is an important part of the national infrastructure, and its safety and stability are of great significance to national security and economic development. In the construction and development of the power system, the testing and evaluation of power equipment and systems is an important step to ensure its reliable operation.

[0003] At present, power system testing is mainly carried out in actual environments or simulated environments. Actual environment testing can directly reflect the performance of equipment and power systems under real operating conditions. Simulated environment testing can reduce the dependence on physical equipment through simulation, thereby saving the purchase and maintenance costs of physical equipment, and allowing developers to test in a variety of virtual scenarios.

[0004] In the process of realizing the present invention, the inventors found that the prior art has the following defects: (1) Actual environmental testing is often limited by factors such as time, space and resources, and it is impossible to conduct comprehensive and in-depth testing of the power system. In addition, during the testing process, power system failures may occur due to operational errors or insufficient assessment of unknown risks; (2) Simulation environment testing cannot truly simulate the complex and changeable operating conditions of the power system, and it is also impossible to conduct comprehensive and in-depth testing of the power system. Summary of the invention

[0005] The embodiments of the present invention provide a power system testing method, device, electronic device, storage medium and program, which can realize comprehensive and in-depth testing of the power system, while improving the testing efficiency of the power system and reducing the testing cost.

[0006] According to one aspect of the present invention, there is provided a power system testing method, comprising:

[0007] Generate a target power system model of the target power system; wherein the target power system model includes power hardware equipment, a virtual software model and a detection tool set;

[0008] Performing data collection and processing on the power hardware equipment, the virtual software model and the detection tool set in the target power system model to obtain target test power data;

[0009] A risk assessment is performed on the target power system according to the target test power data to obtain a power system risk assessment result.

[0010] According to another aspect of the present invention, there is provided a power system testing device, comprising:

[0011] A model generation module, used to generate a target power system model of a target power system; wherein the target power system model includes power hardware equipment, a virtual software model and a detection tool set;

[0012] A target test power data acquisition module is used to perform data acquisition processing on the power hardware equipment, the virtual software model and the detection tool set in the target power system model to obtain target test power data;

[0013] The risk assessment result acquisition module is used to perform risk assessment on the target power system according to the target test power data to obtain a power system risk assessment result.

[0014] According to another aspect of the present invention, an electronic device is provided, the electronic device comprising:

[0015] at least one processor; and

[0016] a memory communicatively connected to the at least one processor; wherein,

[0017] The memory stores a computer program executable by the at least one processor, and the computer program is executed by the at least one processor so that the at least one processor can execute the power system testing method described in any embodiment of the present invention.

[0018] According to another aspect of the present invention, a computer-readable storage medium is provided, wherein the computer-readable storage medium stores computer instructions, and the computer instructions are used to enable a processor to implement the power system testing method described in any embodiment of the present invention when executed.

[0019] According to another aspect of the present invention, a computer program product is provided, including a computer program. When the computer program is executed by a processor, the power system testing method according to any embodiment of the present invention is implemented.

[0020] The embodiment of the present invention generates a target power system model of the target power system including components such as power hardware equipment, virtual software models and detection tool sets; further, data collection and processing are performed on the power hardware equipment, virtual software models and detection tool sets in the target power system model to obtain target test power data, so that risk assessment of the target power system can be performed based on the target test power data to obtain a power system risk assessment result, which solves the problem that the existing testing methods are unable to perform comprehensive and in-depth testing of the power system, and can achieve comprehensive and in-depth testing of the power system, while improving the testing efficiency of the power system and reducing the testing cost.

[0021] It should be understood that the contents described in this section are not intended to identify the key or important features of the embodiments of the present invention, nor are they intended to limit the scope of the present invention. Other features of the present invention will become easily understood through the following description. BRIEF DESCRIPTION OF THE DRAWINGS

[0022] In order to more clearly illustrate the technical solutions in the embodiments of the present invention, the accompanying drawings required for use in the description of the embodiments will be briefly introduced below. Obviously, the accompanying drawings in the following description are only some embodiments of the present invention. For ordinary technicians in this field, other accompanying drawings can be obtained based on these accompanying drawings without paying creative work.

[0023] Figure 1 is a flow chart of a power system testing method provided by Embodiment 1 of the present invention;

[0024] Figure 2 is a flow chart of a power system testing method provided by Embodiment 2 of the present invention;

[0025] Figure 3 is a schematic diagram of a power system testing device provided in Embodiment 3 of the present invention;

[0026] Figure 4 A schematic diagram of the structure of an electronic device provided in Embodiment 4 of the present invention. DETAILED DESCRIPTION

[0027] In order to enable those skilled in the art to better understand the scheme of the present invention, the technical scheme in the embodiments of the present invention will be clearly and completely described below in conjunction with the drawings in the embodiments of the present invention. Obviously, the described embodiments are only part of the embodiments of the present invention, not all of the embodiments. Based on the embodiments of the present invention, all other embodiments obtained by ordinary technicians in this field without creative work should fall within the scope of protection of the present invention.

[0028] It should be noted that the terms "target", etc. in the specification and claims of the present invention and the above-mentioned drawings are used to distinguish similar objects, and are not necessarily used to describe a specific order or sequence. It should be understood that the data used in this way can be interchangeable where appropriate, so that the embodiments of the present invention described herein can be implemented in an order other than those illustrated or described herein. In addition, the terms "including" and "having" and any variations thereof are intended to cover non-exclusive inclusions, for example, a process, method, system, product or device that includes a series of steps or units is not necessarily limited to those steps or units that are clearly listed, but may include other steps or units that are not clearly listed or inherent to these processes, methods, products or devices.

[0029] Embodiment 1

[0030] Figure 1 This is a flow chart of a power system testing method provided by the first embodiment of the present invention. This embodiment is applicable to the case where a power system is tested by building a virtual-real power system model. The method can be executed by a power system testing device, which can be implemented by software and / or hardware and can generally be integrated in an electronic device. The electronic device can be a terminal device or a server device. As long as it can execute the power system testing method, the embodiment of the present invention does not limit the specific device type of the electronic device. Accordingly, Figure 1 As shown, the method includes the following operations:

[0031] S110, generating a target power system model of a target power system; wherein the target power system model includes power hardware equipment, a virtual software model and a detection tool set.

[0032] Among them, the target power system may be a power system to be tested. The target power system model may be a power system model established according to the actual situation of the target power system. The target power system model may be used to simulate, analyze and study the behavior and performance of the target power system. Exemplarily, the target power system model may include but is not limited to components such as power hardware equipment, virtual software models and detection tool sets. Power hardware equipment may be physical equipment used for power generation, transmission, transformation and power consumption in the target power system. Exemplarily, power hardware equipment may include but is not limited to general hardware equipment such as servers, workstations and switches and real power-specific equipment, such as global positioning system (GPS) devices, forward and reverse isolation devices, longitudinal encryption devices, measurement and control devices, protection devices, merging units, intelligent terminals, fault recording devices and distribution terminals. The virtual software model may be a software model that can accurately simulate the functions and operating characteristics of actual power equipment in the target power system. Exemplarily, the virtual software model may include but is not limited to electrical parameters, control logic and communication protocols of actual power equipment in the target power system, and the embodiment of the present invention does not limit the specific content included in the virtual software model. For example, virtual models of various target power system components such as wind power plants, photovoltaic power stations, substations, distribution terminals, and dispatch centers can be generated based on virtualization technology. The detection tool set can be a collection of equipment and technical means for monitoring, diagnosing, and protecting the normal operation of the target power system. Exemplarily, the detection tool set may include, but is not limited to, industrial control protocol robustness testing, vulnerability scanning, firmware security analysis, automated penetration testing, and application programming interface (Application Programming Interface, API) testing, etc. The embodiment of the present invention does not limit the specific detection tools included in the detection tool set.

[0033] In an embodiment of the present invention, the target power system to be tested can be determined first. After the target power system is determined, it can be determined based on actual conditions whether the actual power equipment in the target power system is presented in the target power system model in the form of power hardware equipment or virtual software models. Furthermore, a variety of detection tools can be integrated into the target power system model, so that the target power system can be comprehensively and in-depth tested from different angles, thereby discovering potential safety risks and performance problems in the target power system.

[0034] S120: Perform data collection and processing on the power hardware equipment, the virtual software model and the detection tool set in the target power system model to obtain target test power data.

[0035] The target test power data may be data generated by power hardware equipment, virtual software models, and detection tool sets during the test of the target power system model. Exemplarily, the target test power data may include, but are not limited to, data of types such as electrical quantity data, equipment status data, network communication data, and detection result data. The embodiment of the present invention does not limit the specific data types included in the target test current data.

[0036] Among them, electrical quantity data may include but are not limited to data of types such as voltage, current, and power. Equipment status data may include but are not limited to data of types such as switch position and protection action signal. Network communication data may include but are not limited to data of types such as data packet flow and protocol interaction information. Detection result data may include but are not limited to data of types such as vulnerability scanning reports and protocol robustness test data.

[0037] Correspondingly, the target power system model can also be equipped with a data acquisition device. After the target power system model of the target power system is generated, the target power system model can be tested. Furthermore, in the process of testing the target power system, the data acquisition device can be used to collect and process data on power hardware equipment, virtual software models and detection tool sets, so as to obtain target test power data.

[0038] It should be noted that after data collection of power hardware equipment, virtual software models and detection tool sets, the collected data can be preprocessed, such as data cleaning, denoising and format conversion, so as to improve the quality and availability of the data. In a specific example, outliers and interference signals in the collected data can be removed, and data in different formats can be uniformly converted into a format that is easy to analyze and process, such as converting analog signals into digital signals, or parsing data packets of different protocols into a unified data structure. Further, the preprocessed data can be stored and a data warehouse can be established for subsequent analysis and query. The data warehouse can adopt a hierarchical storage structure, and classify and store data according to dimensions such as data type, time and test items, so as to facilitate rapid retrieval and call. Exemplarily, electrical quantity data can be stored according to different voltage levels and time intervals, and vulnerability scan results can also be classified and stored according to equipment type and vulnerability severity.

[0039] Distributed computing technology can also be used to process data from multiple data sources simultaneously to improve processing speed, and data mining algorithms can be used to mine potential risk patterns and performance trends from a large amount of historical data, thereby generating data reports and visual charts to intuitively display test results and analysis conclusions. Reports and charts can include statistical analysis results, trend charts, bar charts, and pie charts of various types of data to help users quickly understand the performance and security status of the target power system. For example, a pie chart of vulnerability distribution can be generated to show the proportion of different types of vulnerabilities in the system; a trend chart of system performance indicators over time can be drawn to intuitively reflect the stability of system performance.

[0040] S130. Perform risk assessment on the target power system according to the target test power data to obtain a power system risk assessment result.

[0041] Among them, the power system risk assessment result can be the conclusion obtained after identifying, analyzing and evaluating various risks that may occur in the target power system.

[0042] Correspondingly, after obtaining the target test power data, a risk assessment of the target power system can be performed based on the target test power data, thereby obtaining a power system risk assessment result of the target power system.

[0043] It can be seen that the target power system model in the above scheme includes power hardware equipment, virtual software models and detection tool sets, realizing the integration of virtual software models, power hardware equipment and multiple detection tools. Virtual software models and power hardware equipment at different levels can be flexibly combined according to system test requirements to form a distributed test environment, which can simulate various operating states and fault scenarios from local equipment to the entire target power system. By building a virtual-real power system simulation environment, resource utilization efficiency can be improved, a wider range of test scenario simulations can be achieved, and test risks can be effectively controlled, test cycles can be shortened, and test costs can be reduced. At the same time, the target power system model integrates a variety of detection tools, which can conduct comprehensive and in-depth tests on the target power system from different angles, ensure the safety and stability of the target power system, and enhance the target power system's ability to cope with various complex situations.

[0044] The embodiment of the present invention generates a target power system model of the target power system including components such as power hardware equipment, virtual software models and detection tool sets; further, data collection and processing are performed on the power hardware equipment, virtual software models and detection tool sets in the target power system model to obtain target test power data, so that risk assessment of the target power system can be performed based on the target test power data to obtain a power system risk assessment result, which solves the problem that the existing testing methods are unable to perform comprehensive and in-depth testing of the power system, and can achieve comprehensive and in-depth testing of the power system, while improving the testing efficiency of the power system and reducing the testing cost.

[0045] Embodiment 2

[0046] Figure 2 is a flow chart of a power system testing method provided by the second embodiment of the present invention. This embodiment is specific based on the above embodiment. In this embodiment, a target power system model of the target power system is generated, and data collection and processing of the power hardware equipment, virtual software model and detection tool set in the target power system model are performed to obtain multiple specific optional implementation methods of target test power data. Figure 2 As shown, the method of this embodiment may include:

[0047] S210, determining the power system components included in the target power system, and obtaining interaction restriction data of each of the power system components in the target power system;

[0048] Among them, the power system components may be basic units and devices constituting the target power system. The interaction restriction data of the power system components may be data content such as restrictions and constraints imposed on data interaction between different power system components in the target power system. Exemplarily, the interaction restriction data of the power system components may include, but are not limited to, data on power transmission and interaction relationships between different voltage levels and different regions, etc. The embodiment of the present invention does not limit the specific data content included in the interaction restriction data of the power system components.

[0049] In an embodiment of the present invention, the power system components included in the target power system can be determined first, and further, the interaction restriction data of each power system component in the target power system can be obtained, so that the target power system model of the target power system can be generated according to the interaction restriction data of each power system component. By using the interaction restriction data of the power system components to conditionally constrain the virtual software model, the authenticity and validity of the virtual software model can be ensured, thereby realizing the real, safe, reliable and efficient data exchange between the power system components in the target power system model.

[0050] S220: Generate a virtual software model of each of the power system components according to the interaction restriction data of the power system components using virtualization technology.

[0051] Among them, virtualization technology can be a technology that abstracts physical resources through software or hardware to create virtual resources.

[0052] Accordingly, after obtaining the interaction restriction data of each power system component in the target power system, virtualization technology can be used to generate a virtual software model of each power system component according to the actual architecture and achievable functions of the target power system, and each component in the virtual software model can be simulated and verified according to the interaction restriction data of the power system components, thereby ensuring the authenticity and validity of the virtual software model.

[0053] In a specific example, virtualization technology can be used to generate virtual software models of various power system components such as wind farms, photovoltaic power stations, substations, distribution terminals, and dispatch centers. These virtual software models can accurately simulate the functions and operating characteristics of actual power equipment, such as electrical parameters, control logic, and communication protocols of power equipment. For example, the virtual wind turbine model can simulate the power output under different wind speeds and wind directions and the grid-connected control process with the power grid. According to the topological structure and operating requirements of the target power system, the virtual software models are reasonably combined and connected to construct a complete target power system model. In the construction process, the power transmission and interaction between different voltage levels and different regions are fully considered, so as to ensure the authenticity and effectiveness of the virtual software model. For example, a virtual software model containing multiple wind farms, photovoltaic power stations, booster substations, transmission lines, and load centers is constructed to simulate the transmission and distribution of the target power system from the power generation end to the user end.

[0054] S230: Connecting the device access components of the power hardware devices of the target power system to the virtual simulation environment formed by the virtual software models.

[0055] Among them, the device access component of the power hardware device can be various interfaces or modules used to connect the power hardware device to the virtual simulation environment. Exemplarily, the device access component of the power hardware device may include a network interface and / or a communication bus, etc. The embodiment of the present invention does not limit the specific component types included in the device access component of the power hardware device. The virtual simulation environment can be a simulation environment composed of a virtual software model, which can be used to simulate and analyze the operating status and behavior of the target power system.

[0056] Correspondingly, after generating the virtual software models of each power system component, the power hardware devices in the target power system can be connected to the virtual simulation environment composed of each virtual software model through the device access component, so as to achieve seamless connection between the virtual software model and the power hardware device, while ensuring the compatibility of the communication protocols and correct data interaction between the virtual software model and the power hardware device.

[0057] In a specific example, the real measurement and control device can communicate data with the virtual substation model, obtain simulated electrical quantity data in real time, and send control instructions to the virtual substation model to achieve remote monitoring and operation of the virtual software model.

[0058] Optionally, the power hardware equipment can be identified and configured so that it can be accurately identified and called in the virtual simulation environment. By establishing a device management database to record information such as the model, parameters, and location of the power hardware equipment, the equipment can be flexibly configured and managed in the simulation test. For example, when performing different test tasks, the connected power hardware equipment can be quickly switched as needed, or the parameter settings of the power hardware equipment can be adjusted.

[0059] Optionally, users can define the parameters, topology, access mode and configuration information of the virtual software model through a graphical interface or configuration file. For example, users can intuitively drag virtual device icons on the interface, connect lines, and set device parameters, such as the rated power of the generator and the transformation ratio of the transformer. At the same time, you can also select the power hardware device to be connected and configure its communication parameters and interface type. It can also provide users with scene saving, loading and reuse functions based on the graphical interface, so that users can quickly build different test environments. Users can also save commonly used simulation scenarios as templates and load them directly when needed to avoid the tedious work of repeatedly building scenarios. For example, for different types of substation tests, corresponding simulation scenario templates can be created separately, including the configuration of the equipment in the station and the connection method with the external power grid, etc. When testing different substations, the corresponding templates can be directly called and fine-tuned.

[0060] S240 , configuring system detection tools according to risk indicator detection requirements of the target power system, and generating the detection tool set according to each of the system detection tools.

[0061] The risk indicator detection requirement may be a requirement for detecting a series of specific risk indicators in order to assess the risk faced by the target power system. The system detection tool may be a tool for detecting specific risk indicators of the target power system.

[0062] Specifically, after completing the configuration of the power hardware equipment and virtual software model in the target power system model, the corresponding system detection tools can be configured according to the risk indicator detection requirements of the target power system, and the system detection tools can be integrated to generate a detection tool set.

[0063] S250 . Generate a system test plan for the target power system according to the system type, system scale, and system test requirements of the target power system.

[0064] Among them, the system type may be the type of the target power system. Exemplarily, the system type may include but is not limited to power generation systems, transmission systems, and distribution systems. The system scale may be the size of the target power system. Exemplarily, the system scale may include but is not limited to large power systems, medium-sized power systems, and small power systems. The system test requirements may be a series of test objectives and standards formulated to ensure that the target power system meets established functional, performance, safety, and compatibility requirements. The system test plan may be a test plan formulated based on the system type, system scale, and system test requirements of the target power system. Exemplarily, the system test plan may include but is not limited to test items, test methods, test steps, and test results. The embodiment of the present invention does not limit the specific content included in the system test plan.

[0065] Specifically, after generating the target power system model of the target power system, appropriate detection technologies and tools may be selected according to the system type, system scale and system testing requirements of the target power system to generate a system testing plan for the target power system.

[0066] In a specific example, assuming a newly built smart substation, the system test plan of the target power system can be to verify the functional correctness of the automatic control system, the reliability of the communication network, and the accuracy of the protection device for all equipment and systems in the smart substation and the communication interface with the superior dispatching center. For example, when conducting a comprehensive test, you can first start a vulnerability scanning tool to conduct a preliminary scan of the system, and then you can conduct a targeted penetration test based on the scan results, while monitoring the performance indicators of the target power system in real time during the test. Monitor the execution status of the test task, including task progress, equipment status, and data collection. The above scheme can achieve collaborative work and data sharing between detection technologies, thereby improving test efficiency and accuracy.

[0067] Optionally, the real-time status of the test task can be displayed to the user through a visual interface, so that the user can understand the progress of the test in a timely manner. For example, the completion percentage of each test task can be displayed in the form of a progress bar, the normal or abnormal status of the device can be marked with different colors, and the quantity and quality information of the data collection can be updated in real time.

[0068] S260: Testing the target power system model according to the system test plan.

[0069] Accordingly, after generating a system test plan for the target power system, a suitable detection tool may be selected according to the system test plan to test the target power system model.

[0070] In a specific example, assuming that the reliability of the communication network in the target power system model is tested, a network performance testing tool can be used to adopt a stress testing method to gradually increase network traffic and observe changes in indicators such as network delay and packet loss rate. The expected result is that under the specified network load, the network delay does not exceed a certain threshold and the packet loss rate is lower than the set value.

[0071] Optionally, during the testing of the target power system model, the execution order and time nodes of the test tasks can be arranged so that the test resources can be reasonably allocated to ensure the efficient implementation of the test plan. For example, before performing a vulnerability scan, the basic function test of the target power system needs to be completed to ensure that the system is in a stable operating state. At the same time, the execution time of each test project can be reasonably arranged according to the availability of test equipment and personnel to avoid idle or excessive resource occupation.

[0072] In an optional embodiment of the present invention, the testing of the target power system model according to the system test plan may include: performing a robustness test on the industrial control protocol in the target power system model through a protocol fuzzy testing system; performing a comprehensive vulnerability scan on various devices and systems of the target power system model through an industrial control vulnerability scanning system; performing a security check on the firmware of the target power system model through a firmware security detection system; and simulating hacker attack behavior through an automated penetration testing tool to perform a comprehensive security monitoring of the target power system model.

[0073] Among them, the protocol fuzzy testing system can be an automated testing tool for monitoring the security of network protocols. The protocol fuzzy testing system simulates the behavior of network attackers by sending a large number of abnormal or randomized data packets to the target power system model, thereby triggering potential protocol vulnerabilities in the target power system model. The industrial control protocol can be the rules and conventions used for communication between devices in the target power system. Exemplarily, the industrial control protocol can include but is not limited to the IEC61850 protocol or the distributed network protocol 3.0, etc., and the embodiment of the present invention does not limit the specific protocol types included in the industrial control protocol. Robustness testing can be a test method for evaluating the ability of the target power system model to operate normally in the event of a fault or abnormality. The industrial control vulnerability scanning system can be a tool for detecting security vulnerabilities in the target power system model. The firmware security detection system can be a system for evaluating and detecting potential security vulnerabilities and risks in the firmware of the target power system model. The so-called firmware can be a software embedded in a device that can be used to control the functions and behaviors of the device. The automated penetration testing tool can be a software tool for simulating network attacks, which can detect the security of the target power system model.

[0074] In an embodiment of the present invention, in the process of testing the target power system model according to the system test plan, on the one hand, the protocol fuzzy test system can be used to perform robustness testing on the industrial control protocol in the target power system model. In the process of performing robustness testing, an abnormal message can be sent to a specific power system component in the target power system model, and by observing the response of the specific power system component, loopholes and defects that may exist in the implementation process of the industrial control protocol can be detected. In a specific example, assuming that the industrial control protocol is the IEC61850 protocol, in the process of performing robustness testing on the IEC61850 protocol, the protocol fuzzy test system can simulate various abnormal communication scenarios, such as illegal message formats, out-of-range parameter values, and abnormal communication sequences, so as to check the processing capabilities of equipment such as substation protection devices and measurement and control devices for these abnormal situations. Further, it can be judged whether the protocol can meet the real-time and reliability requirements of the target power system based on indicators such as the response time, error handling mechanism, and recovery capability of the equipment. For example, if the device can respond quickly after receiving an abnormal message, correctly identify the error and take effective recovery measures, it means that the industrial control protocol is robust. On the contrary, if the device freezes, malfunctions or cannot resume normal communication for a long time, it indicates that there are serious problems with the industrial control protocol.

[0075] On the other hand, the industrial control vulnerability scanning system can also be used to perform a comprehensive vulnerability scan on various devices and systems of the target power system model. Various devices and systems may include, but are not limited to, traditional network devices (e.g., servers, workstations, and switches), industrial control system devices (e.g., programmable logic controllers, distributed control systems, and remote terminal units), and power-specific software (e.g., data acquisition and monitoring control systems and power dispatching software). The scanning content can cover multiple aspects such as operating system vulnerabilities, application vulnerabilities, network service vulnerabilities, and weak passwords. In a specific example, an industrial control vulnerability scanning system can be used to perform a vulnerability scan on a server in a substation to check whether its operating system has unrepaired security vulnerabilities, whether the network service has vulnerabilities such as SQL (Structured Query Language) injection and XSS (Cross-Site Scripting), and whether there are security risks such as weak password users, so that potential security vulnerabilities can be discovered and reported in a timely manner, providing a basis for subsequent repairs and reinforcements. The industrial control vulnerability scanning system can generate a detailed scan report including information such as vulnerability name, number, location, and severity, helping operation and maintenance personnel to quickly locate and handle security issues. For example, the report can clearly point out that a certain device has a high-risk vulnerability located in a certain version of its firewall software, and it is recommended to upgrade the firewall software to the latest version in time to repair it.

[0076] On the other hand, the firmware of the target power system model can also be tested for security through the firmware security detection system. The detection content may include but is not limited to security vulnerabilities, malicious code, and sensitive information leakage that may exist in the firmware. In a specific example, the key information of the firmware, such as system calls, data structures, and encryption algorithms, can be extracted through static analysis and dynamic testing of the firmware, and compared with known vulnerability libraries and security rules. For example, when analyzing the firmware of a smart meter through the firmware security detection system, it can be checked whether there are security risks such as unauthorized system calls, hard-coded passwords, and buffer overflow vulnerabilities. Further, the analyzed firmware security issues can be evaluated and repaired. According to the severity and scope of the vulnerability, corresponding repair solutions are provided, such as firmware upgrades, patch development, and security configuration adjustments. For example, for the buffer overflow vulnerability found, it is recommended that the equipment manufacturer release a new firmware version to fix the vulnerability and strengthen the legitimacy check of the input data.

[0077] On the other hand, the automated penetration testing tool can also be used to simulate hacker attacks and conduct comprehensive security monitoring of the target power system model. The automated penetration testing tool has powerful attack capabilities and intelligent decision-making capabilities, and can automatically select appropriate attack paths and methods based on the characteristics of the target system. During the test, the virtual simulation system can be used to build various complex attack scenarios, including internal attacks, external attacks, and distributed attacks, to comprehensively evaluate the security defense capabilities of the target power system. At the same time, combined with the results of other detection technologies, the security issues found in the penetration test are deeply analyzed to determine their degree of harm and scope of impact.

[0078] S270. During the test of the target power system model, data generated by the power hardware equipment, the virtual software model and the detection tool set in the target power system model are collected in real time to obtain the target test power data.

[0079] In an embodiment of the present invention, during the testing process of the target power system model, data generated by the power hardware equipment, virtual software model and detection tool set in the target power system model can be collected in real time as target test power data, so that the target power system can be risk assessed based on the target test power data.

[0080] S280. Perform risk assessment on the target power system according to the target test power data to obtain a power system risk assessment result.

[0081] In an optional embodiment of the present invention, the risk assessment of the target power system according to the target test power data to obtain the power system risk assessment result may include: determining the system risk assessment factors of the target power system and the weights of the system risk assessment factors according to the target test power data; wherein the system risk assessment factors include at least one of the operating status, equipment health status, network security status and system detection results; calculating the risk index of the target power system according to the system risk assessment factors and the weights of the system risk assessment factors; the risk index includes at least one of the safety index, reliability index, performance index and compatibility index; determining the risk source and risk propagation path of the target power system according to the risk index of the target power system; predicting the risk impact range of the risk source according to the risk source and risk propagation path of the target power system; generating the power system risk assessment result according to the risk index, risk source, risk propagation path and risk impact range of the target power system.

[0082] Among them, the system risk assessment factors may be various influencing factors that need to be considered when conducting risk assessment on the target power system. Exemplarily, the system risk assessment factors may include but are not limited to the operating status, equipment health status, network security status and system detection results, etc., and the embodiment of the present invention does not limit the specific content included in the system risk assessment factors. The weight of the system risk assessment factor may be a quantitative value of the relative importance or degree of influence given to different system risk assessment factors in the process of risk assessment on the target power system. Exemplarily, the weight of each system risk assessment factor may be determined by subjective evaluation method, hierarchical analysis method or entropy method. The risk index may be a metric for quantitatively assessing the potential risks in the target power system. Exemplarily, the risk index may include but are not limited to safety index, reliability index, performance index and compatibility index, etc., and the embodiment of the present invention does not limit the specific content included in the risk index. The safety index may be used to measure the ability of the target power system to resist security threats. Exemplarily, the safety index may include but are not limited to the number of vulnerabilities, the severity of vulnerabilities and the success rate of attacks, etc. The reliability index may be used to reflect the stable operation capability of the target power system. Exemplarily, the reliability index may include but are not limited to the equipment failure rate, the mean time between failures of the system and the recovery time, etc. Performance indicators can be used to evaluate the operating efficiency of the target power system. Exemplarily, performance indicators may include but are not limited to data transmission rate, response time, and throughput. Compatibility indicators can be used to ensure that the various components of the target power system can work together. Exemplarily, compatibility indicators may include but are not limited to interface compatibility and protocol compatibility between different devices or systems. Risk sources may be the cause or factor that causes the risk of the target power system. The risk propagation path may be the path by which the risk in the target power system starts from the risk source, passes through a series of physical connections, electrical couplings, or operational associations, and gradually spreads and affects other parts of the target power system. The risk impact range of the risk source may be the geographical area, equipment set, and operating state of the target power system that the risk caused by the risk source can affect in the target power system. The power system risk assessment result may be a conclusion obtained after a comprehensive assessment of various risks faced by the target power system. Exemplarily, the power system risk assessment result may include but are not limited to risk assessment results, risk analysis process, and risk response suggestions. The embodiment of the present invention does not limit the specific content included in the power system risk assessment result.

[0083] In an embodiment of the present invention, in order to obtain a power system risk assessment result, first, the system risk assessment factors of the target power system and the weights of the system risk assessment factors can be determined based on the target test power data. Further, the risk index of the target power system can be calculated based on the system risk assessment factors and the weights of the system risk assessment factors. Further, the risk source and risk propagation path of the target power system can be determined based on the risk index of the target power system. Based on the risk source and risk propagation path of the target power system, the risk impact range of the risk source can be predicted, so that the power system risk assessment result can be generated based on the risk index, risk source, risk propagation path and risk impact range of the target power system.

[0084] In a specific example, according to the collected target test power data, the security risk of the target power system is evaluated using a risk assessment algorithm. First, the risk assessment algorithm can be used to comprehensively consider the operating status, equipment health status, network security status, detection results and other factors of the target power system to calculate the risk index of the target power system. For example, the analytic hierarchy process can be used to determine the weights of different system risk assessment factors in risk assessment, and the risk can be quantitatively assessed in combination with the fuzzy comprehensive evaluation method to obtain the risk level of the power system in different operating scenarios. Exemplarily, the risk level can be divided into high risk, medium risk, and low risk, etc., and the embodiment of the present invention does not limit the specific classification of the risk level. For example, the severity of the vulnerability can be divided into three levels: high risk, medium risk, and low risk, corresponding to vulnerabilities that may cause system paralysis, partial functional impairment and slight impact. The equipment failure rate is calculated as the ratio of the number of equipment failures per unit time to the total number of equipment. Reasonable thresholds and weights can be set for each system risk assessment factor to accurately reflect its importance in the overall performance of the power system. The setting of the threshold is based on power industry standards, equipment manufacturer specifications and actual operating experience. For example, for the response time of critical business systems, the threshold can be set to no more than 500 milliseconds and the weight can be set to a higher value, because a long response time may affect the real-time control and dispatch of the power system, while for the compatibility indicators of some non-critical equipment, the weight can be set relatively low.

[0085] Furthermore, the assessed risks can be deeply analyzed to determine the risk sources and risk propagation paths of the target power system. For example, the root causes of the risks, such as equipment failure, configuration errors, and network attacks, can be found through correlation analysis and causal mining of data. At the same time, the propagation law of risks in the target power system can be analyzed to predict the scope and extent of the possible impact of risks. For example, by analyzing network communication data, it can be found that the communication failure of a certain node may cause multiple downstream devices to lose control, thereby determining the risk propagation path and the scope of risk impact. Finally, the power system risk assessment results can be generated, and a risk assessment report can be generated based on the power system risk assessment results to provide a basis for subsequent decision-making. The power system risk assessment results can include but are not limited to risk assessment results, risk analysis process, and risk response recommendations, and are presented to the target power system operation and maintenance personnel and managers in an intuitive and clear manner. For example, the report clearly points out the high-risk areas and equipment in the target power system, analyzes the causes of the risks, and proposes corresponding improvement measures and emergency plans.

[0086] In a specific example, the model matching algorithm can be used to match the target test power data with the predefined power system model to identify the operating status and behavior pattern of the target power system. By comparing the actual data with the normal operating data range in the model, it can be determined whether the target power system is abnormal. For example, a model can be built based on the normal operating current and voltage range of the substation. When the target test power data exceeds the range, it is determined that there may be a fault or abnormality. The scoring algorithm is used to quantitatively score the performance of the target power system based on the evaluation indicators and the algorithm calculation results. The scoring algorithm comprehensively considers the actual value, threshold and weight of each indicator, and obtains the risk indicator of the target power system by weighted summation and other methods. For example, for security indicators, if a high-risk vulnerability is found, a higher score is deducted, while for some low-risk vulnerabilities, relatively fewer scores are deducted; for performance indicators, points are deducted according to the gap between actual performance and expected performance. An aggregation algorithm is designed to summarize and comprehensively analyze the evaluation results of different levels and types to obtain the risk assessment results of the power system. The aggregation algorithm can summarize the evaluation results of a single device into the evaluation results of the subsystem, and further summarize them into the evaluation results of the entire target power system. For example, the risk index of the equipment in each substation is first calculated, and then the risk index of each substation is aggregated into the risk index of the entire transmission network based on the importance and connection relationship of the substation in the power system.

[0087] Optionally, after obtaining the power system risk assessment results, a detailed test identification and evaluation report can be automatically generated based on the power system risk assessment results. The report content can cover aspects such as system test requirements, test process, test results, risk assessment, and adjustment and optimization measures, and be presented to users in a standardized and clear format. For example, the report begins by clearly stating the system test requirements for this test, and then describes in detail the methods and tools used in the test process, and then lists the test results of each test separately, including the vulnerabilities found, equipment performance indicators, and robustness test results, etc., to conduct a comprehensive assessment of the risks of the target power system, and put forward targeted optimization suggestions and rectification measures. Supports the export and printing functions of the report, which is convenient for users to use the report for archiving, reporting, and decision-making reference. Users can also choose to export the report to common document formats, such as portable document format and document format, or print it directly.

[0088] In an optional embodiment of the present invention, after performing risk assessment on the target power system according to the target test power data and obtaining the power system risk assessment result, it may also include: generating adjustment and optimization measures for the target power system according to the power system risk assessment result; wherein the adjustment and optimization measures include at least one of equipment parameter adjustment, configuration optimization, software upgrade and vulnerability repair; and adjusting and optimizing the target power system according to the adjustment and optimization measures.

[0089] The adjustment and optimization measures may be a series of adjustment measures taken to improve the performance of the target power system. Exemplarily, the adjustment and optimization measures may include, but are not limited to, optimization measures such as equipment parameter adjustment, configuration optimization, software upgrade, and vulnerability repair. The embodiments of the present invention do not limit the specific optimization measures included in the adjustment and optimization measures.

[0090] In an embodiment of the present invention, after risk assessment of the target power system is performed based on the target test power data to obtain the power system risk assessment result, a series of adjustment and optimization measures can be generated based on the power system risk assessment result, covering equipment parameter adjustment, configuration optimization, software upgrade and vulnerability repair and other aspects, so that the target power system can be adjusted according to a series of adjustment and optimization measures.

[0091] In a specific example, based on the vulnerability scanning results, the firmware of the device with security vulnerabilities can be upgraded or patches can be installed; or based on the network performance test results, the network configuration parameters can be optimized to improve the network transmission efficiency.

[0092] Optionally, after adjusting the target power system according to a series of adjustment and optimization measures, the test can be conducted again to verify the effectiveness of the adjustment and optimization measures. By repeating the above test process and comparing the test results before and after optimization, it can be ensured that the performance and safety of the target power system are effectively improved. For example, after optimizing the network configuration, the network performance test is conducted again to observe whether indicators such as network delay and packet loss rate have been improved; after repairing the equipment vulnerability, the vulnerability scan is re-performed to confirm whether the vulnerability has been successfully repaired. Therefore, based on the verification results, the test identification methods and devices can be further optimized, and the test process and technical means can be continuously improved.

[0093] Optionally, after completing the test of the target power system, the lessons learned during the test can be summarized to improve the system test plan, data collection method, and risk assessment algorithm, etc., to improve the accuracy and reliability of the test identification. For example, according to the actual test situation, the parameters in the risk assessment algorithm can be adjusted to make it more consistent with the actual operating characteristics of the target power system, and the functions of the data collection software can be improved to increase the support for the collection of data of new power equipment.

[0094] Optionally, artificial intelligence and machine learning technologies can be used to intelligently analyze and predict the results of power system risk assessment, so that potential problems in the target power system can be discovered in advance. For example, a large amount of historical test power data can be learned through machine learning algorithms to establish a risk prediction model, so that possible risks can be predicted in real time during the test process, providing a basis for taking timely measures.

[0095] The embodiment of the present invention determines the power system components included in the target power system and obtains the interaction restriction data of each power system component in the target power system. Further, virtualization technology can be used to generate virtual software models of each power system component according to the interaction restriction data of the power system components, and the device access components of the power hardware equipment of the target power system are connected to the virtual simulation environment composed of each virtual software model. Further, the system detection tool can be configured according to the risk indicator detection requirements of the target power system, and the detection tool set can be generated according to each system detection tool. Further, the system test plan of the target power system can be generated according to the system type, system scale and system test requirements of the target power system, and the target power system model can be tested according to the system test plan. Further, in the test process of the target power system model, the data generated by the power hardware equipment, virtual software model and detection tool set in the target power system model are collected in real time, so that the target test power data can be obtained. The problem that the existing test method cannot perform comprehensive and in-depth testing on the power system is solved, and a comprehensive and in-depth test of the power system can be achieved, while improving the test efficiency of the power system and reducing the test cost.

[0096] In the technical solution of the present disclosure, the collection, storage, use, processing, transmission, provision and disclosure of user personal information are in compliance with the relevant laws and regulations and do not violate public order and good morals.

[0097] It should be noted that any arrangement and combination of the technical features in the above embodiments also falls within the protection scope of the present invention.

[0098] Embodiment 3

[0099] Figure 3 is a schematic diagram of a power system testing device provided in Embodiment 3 of the present invention, such as Figure 3 As shown, the device includes: a model generation module 310, a target test power data acquisition module 320 and a risk assessment result acquisition module 330, wherein:

[0100] The model generation module 310 is used to generate a target power system model of a target power system; wherein the target power system model includes power hardware equipment, a virtual software model and a detection tool set.

[0101] The target test power data acquisition module 320 is used to perform data collection and processing on the power hardware equipment, the virtual software model and the detection tool set in the target power system model to obtain target test power data.

[0102] The risk assessment result acquisition module 330 is used to perform risk assessment on the target power system according to the target test power data to obtain a power system risk assessment result.

[0103] The embodiment of the present invention generates a target power system model of the target power system including components such as power hardware equipment, virtual software models and detection tool sets; further, data collection and processing are performed on the power hardware equipment, virtual software models and detection tool sets in the target power system model to obtain target test power data, so that risk assessment of the target power system can be performed based on the target test power data to obtain a power system risk assessment result, which solves the problem that the existing testing methods are unable to perform comprehensive and in-depth testing of the power system, and can achieve comprehensive and in-depth testing of the power system, while improving the testing efficiency of the power system and reducing the testing cost.

[0104] Optionally, the model generation module 310 is specifically used to: determine the power system components included in the target power system, and obtain the interaction restriction data of each of the power system components in the target power system; wherein the interaction restriction data includes data on power transmission and interaction relationships between different voltage levels and different regions; use virtualization technology to generate virtual software models of each of the power system components based on the interaction restriction data of the power system components; connect the device access components of the power hardware equipment of the target power system to the virtual simulation environment constituted by each of the virtual software models; configure system detection tools according to the risk indicator detection requirements of the target power system, and generate the detection tool set based on each of the system detection tools.

[0105] Optionally, the target test power data acquisition module 320 is specifically used to: generate a system test plan for the target power system according to the system type, system scale and system test requirements of the target power system; test the target power system model according to the system test plan; and during the testing process of the target power system model, collect the data generated by the power hardware equipment, the virtual software model and the detection tool set in the target power system model in real time to obtain the target test power data.

[0106] Optionally, the target test power data acquisition module 320 is also used to: perform robustness testing on the industrial control protocol in the target power system model through a protocol fuzzy testing system; perform a comprehensive vulnerability scan on various devices and systems of the target power system model through an industrial control vulnerability scanning system; perform security testing on the firmware of the target power system model through a firmware security testing system; simulate hacker attack behavior through an automated penetration testing tool, and perform comprehensive security monitoring of the target power system model.

[0107] Optionally, the risk assessment result acquisition module 330 is specifically used to: determine the system risk assessment factors of the target power system and the weights of the system risk assessment factors based on the target test power data; wherein the system risk assessment factors include at least one of the operating status, equipment health status, network security status and system detection results; calculate the risk indicators of the target power system based on the system risk assessment factors and the weights of the system risk assessment factors; the risk indicators include at least one of the safety indicators, reliability indicators, performance indicators and compatibility indicators; determine the risk sources and risk propagation paths of the target power system based on the risk indicators of the target power system; predict the risk impact range of the risk sources based on the risk sources and risk propagation paths of the target power system; generate the power system risk assessment results based on the risk indicators, risk sources, risk propagation paths and risk impact range of the target power system.

[0108] Optionally, the above-mentioned device may also include an adjustment and optimization module, which is specifically used to: generate adjustment and optimization measures for the target power system based on the power system risk assessment results; wherein the adjustment and optimization measures include at least one of equipment parameter adjustment, configuration optimization, software upgrade and vulnerability repair; and adjust and optimize the target power system according to the adjustment and optimization measures.

[0109] The above-mentioned power system testing device can execute the power system testing method provided by any embodiment of the present invention, and has the corresponding functional modules and beneficial effects of the execution method. For technical details not described in detail in this embodiment, please refer to the power system testing method provided by any embodiment of the present invention.

[0110] Since the power system test device introduced above is a device that can execute the power system test method in the embodiment of the present invention, based on the power system test method introduced in the embodiment of the present invention, the technical personnel in this field can understand the specific implementation of the power system test device of this embodiment and its various variations, so how the power system test device implements the power system test method in the embodiment of the present invention is not introduced in detail here. As long as the technical personnel in this field implement the device used in the power system test method in the embodiment of the present invention, it belongs to the scope of protection of this application.

[0111] Embodiment 4

[0112] Figure 4 A schematic diagram of the structure of an electronic device 10 that can be used to implement an embodiment of the present invention is shown. The electronic device is intended to represent various forms of digital computers, such as laptop computers, desktop computers, workstations, personal digital assistants, servers, blade servers, mainframe computers, and other suitable computers. The electronic device can also represent various forms of mobile devices, such as personal digital processing, cellular phones, smart phones, wearable devices (such as helmets, glasses, watches, etc.) and other similar computing devices. The components shown herein, their connections and relationships, and their functions are merely examples and are not intended to limit the implementation of the present invention described and / or required herein.

[0113] like Figure 4As shown, the electronic device 10 includes at least one processor 11, and a memory connected to the at least one processor 11, such as a read-only memory (ROM) 12, a random access memory (RAM) 13, etc., wherein the memory stores a computer program that can be executed by at least one processor, and the processor 11 can perform various appropriate actions and processes according to the computer program stored in the read-only memory (ROM) 12 or the computer program loaded from the storage unit 18 to the random access memory (RAM) 13. In the RAM 13, various programs and data required for the operation of the electronic device 10 can also be stored. The processor 11, the ROM 12, and the RAM 13 are connected to each other through a bus 14. An input / output (I / O) interface 15 is also connected to the bus 14.

[0114] A number of components in the electronic device 10 are connected to the I / O interface 15, including: an input unit 16, such as a keyboard, a mouse, etc.; an output unit 17, such as various types of displays, speakers, etc.; a storage unit 18, such as a disk, an optical disk, etc.; and a communication unit 19, such as a network card, a modem, a wireless communication transceiver, etc. The communication unit 19 allows the electronic device 10 to exchange information / data with other devices through a computer network such as the Internet and / or various telecommunication networks.

[0115] The processor 11 may be a variety of general and / or special processing components with processing and computing capabilities. Some examples of the processor 11 include, but are not limited to, a central processing unit (CPU), a graphics processing unit (GPU), various special artificial intelligence (AI) computing chips, various processors running machine learning model algorithms, a digital signal processor (DSP), and any appropriate processor, controller, microcontroller, etc. The processor 11 executes the various methods and processes described above, such as the power system test method.

[0116] In some embodiments, the power system test method may be implemented as a computer program, which is tangibly contained in a computer-readable storage medium, such as a storage unit 18. In some embodiments, part or all of the computer program may be loaded and / or installed on the electronic device 10 via the ROM 12 and / or the communication unit 19. When the computer program is loaded into the RAM 13 and executed by the processor 11, one or more steps of the power system test method described above may be performed. Alternatively, in other embodiments, the processor 11 may be configured to execute the power system test method in any other appropriate manner (e.g., by means of firmware).

[0117] Optionally, the power system testing method may include: generating a target power system model of a target power system; wherein the target power system model includes power hardware equipment, a virtual software model and a detection tool set; performing data acquisition and processing on the power hardware equipment, the virtual software model and the detection tool set in the target power system model to obtain target test power data; performing risk assessment on the target power system based on the target test power data to obtain a power system risk assessment result.

[0118] Various implementations of the systems and techniques described above herein can be implemented in digital electronic circuit systems, integrated circuit systems, field programmable gate arrays (FPGAs), application specific integrated circuits (ASICs), application specific standard products (ASSPs), systems on chips (SOCs), load programmable logic devices (CPLDs), computer hardware, firmware, software, and / or combinations thereof. These various implementations can include: being implemented in one or more computer programs that can be executed and / or interpreted on a programmable system including at least one programmable processor, which can be a special purpose or general purpose programmable processor that can receive data and instructions from a storage system, at least one input device, and at least one output device, and transmit data and instructions to the storage system, the at least one input device, and the at least one output device.

[0119] Computer programs for implementing the methods of the present invention may be written in any combination of one or more programming languages. These computer programs may be provided to a processor of a general-purpose computer, a special-purpose computer, or other programmable data processing device, so that when the computer program is executed by the processor, the functions / operations specified in the flow chart and / or block diagram are implemented. The computer program may be executed entirely on the machine, partially on the machine, partially on the machine and partially on a remote machine as a stand-alone software package, or entirely on a remote machine or server.

[0120] In the context of the present invention, a computer-readable storage medium may be a tangible medium that may contain or store a computer program for use by or in combination with an instruction execution system, device or equipment. A computer-readable storage medium may include, but is not limited to, electronic, magnetic, optical, electromagnetic, infrared, or semiconductor systems, devices or equipment, or any suitable combination of the foregoing. Alternatively, a computer-readable storage medium may be a machine-readable signal medium. A more specific example of a machine-readable storage medium may include an electrical connection based on one or more lines, a portable computer disk, a hard disk, a random access memory (RAM), a read-only memory (ROM), an erasable programmable read-only memory (EPROM or flash memory), an optical fiber, a portable compact disk read-only memory (CD-ROM), an optical storage device, a magnetic storage device, or any suitable combination of the foregoing.

[0121] To provide interaction with a user, the systems and techniques described herein may be implemented on an electronic device having: a display device (e.g., a CRT (cathode ray tube) or LCD (liquid crystal display) monitor) for displaying information to the user; and a keyboard and a pointing device (e.g., a mouse or trackball) through which the user can provide input to the electronic device. Other types of devices may also be used to provide interaction with the user; for example, the feedback provided to the user may be any form of sensory feedback (e.g., visual feedback, auditory feedback, or tactile feedback); and input from the user may be received in any form (including acoustic input, voice input, or tactile input).

[0122] The systems and techniques described herein may be implemented in a computing system that includes backend components (e.g., as a data server), or a computing system that includes middleware components (e.g., an application server), or a computing system that includes frontend components (e.g., a user computer with a graphical user interface or a web browser through which a user can interact with implementations of the systems and techniques described herein), or a computing system that includes any combination of such backend components, middleware components, or frontend components. The components of the system may be interconnected by any form or medium of digital data communication (e.g., a communication network). Examples of communication networks include: a local area network (LAN), a wide area network (WAN), a blockchain network, and the Internet.

[0123] A computing system may include a client and a server. The client and the server are generally remote from each other and usually interact through a communication network. The client and server relationship is generated by computer programs running on the corresponding computers and having a client-server relationship with each other. The server may be a cloud server, also known as a cloud computing server or cloud host, which is a host product in the cloud computing service system to solve the defects of difficult management and weak business scalability in traditional physical hosts and VPS services.

[0124] It should be understood that the various forms of processes shown above can be used to reorder, add or delete steps. For example, the steps recorded in this disclosure can be executed in parallel, sequentially or in different orders, as long as the desired results of the technical solutions disclosed in this disclosure can be achieved, and this document does not limit this.

[0125] The above specific implementations do not constitute a limitation on the protection scope of the present disclosure. It should be understood by those skilled in the art that various modifications, combinations, sub-combinations and substitutions can be made according to design requirements and other factors. Any modification, equivalent substitution and improvement made within the spirit and principle of the present disclosure shall be included in the protection scope of the present disclosure.

Claims

1. A power system testing method, characterized in that: include: Generate a target power system model of the target power system; wherein the target power system model includes power hardware equipment, a virtual software model and a detection tool set; Performing data collection and processing on the power hardware equipment, the virtual software model and the detection tool set in the target power system model to obtain target test power data; A risk assessment is performed on the target power system according to the target test power data to obtain a power system risk assessment result.

2. The method according to claim 1, characterized in that The generating of the target power system model of the target power system comprises: Determine the power system components included in the target power system, and obtain interaction restriction data of each of the power system components in the target power system; wherein the interaction restriction data includes data on power transmission and interaction relationships between different voltage levels and different regions; Generate a virtual software model of each of the power system components according to the interaction restriction data of the power system components by using virtualization technology; Connecting the device access components of the power hardware devices of the target power system to the virtual simulation environment formed by each of the virtual software models; System detection tools are configured according to risk indicator detection requirements of the target power system, and the detection tool set is generated according to each of the system detection tools.

3. The method according to claim 1, characterized in that The data collection and processing of the power hardware equipment, the virtual software model and the detection tool set in the target power system model to obtain target test power data includes: generating a system test plan for the target power system according to the system type, system scale and system test requirements of the target power system; Testing the target power system model according to the system test plan; During the test of the target power system model, data generated by the power hardware equipment, the virtual software model and the detection tool set in the target power system model are collected in real time to obtain the target test power data.

4. The method according to claim 3, characterized in that: The testing of the target power system model according to the system test plan includes: Performing a robustness test on the industrial control protocol in the target power system model through a protocol fuzzy testing system; Perform a comprehensive vulnerability scan on various devices and systems of the target power system model through an industrial control vulnerability scanning system; Performing security detection on the firmware of the target power system model by means of a firmware security detection system; The target power system model is comprehensively monitored for security by simulating hacker attack behaviors through automated penetration testing tools.

5. The method according to claim 1, characterized in that The step of performing risk assessment on the target power system according to the target test power data to obtain a power system risk assessment result includes: Determine the system risk assessment factors of the target power system and the weights of the system risk assessment factors according to the target test power data; wherein the system risk assessment factors include at least one of the operating status, equipment health status, network security status and system detection results; Calculating a risk index of the target power system according to the system risk assessment factors and the weights of the system risk assessment factors; the risk index includes at least one of a safety index, a reliability index, a performance index and a compatibility index; Determining the risk source and risk propagation path of the target power system according to the risk index of the target power system; According to the risk sources and risk propagation paths of the target power system, predicting the risk impact scope of the risk sources; The power system risk assessment result is generated according to the risk indicators, risk sources, risk propagation paths and risk impact scope of the target power system.

6. The method according to claim 1, characterized in that After performing risk assessment on the target power system according to the target test power data to obtain a power system risk assessment result, the method further includes: Generating adjustment and optimization measures for the target power system according to the power system risk assessment result; wherein the adjustment and optimization measures include at least one of equipment parameter adjustment, configuration optimization, software upgrade and vulnerability repair; The target power system is adjusted and optimized according to the adjustment and optimization measures.

7. A power system testing device, characterized in that: include: A model generation module, used to generate a target power system model of a target power system; wherein the target power system model includes power hardware equipment, a virtual software model and a detection tool set; A target test power data acquisition module is used to perform data acquisition processing on the power hardware equipment, the virtual software model and the detection tool set in the target power system model to obtain target test power data; The risk assessment result acquisition module is used to perform risk assessment on the target power system according to the target test power data to obtain a power system risk assessment result.

8. An electronic device, characterized in that: The electronic device comprises: at least one processor; and a memory communicatively connected to the at least one processor; wherein, The memory stores a computer program executed by the at least one processor, and the computer program is executed by the at least one processor so that the at least one processor can execute the power system testing method according to any one of claims 1 to 6.

9. A computer-readable storage medium, characterized in that: The computer-readable storage medium stores computer instructions, and the computer instructions are used to enable a processor to implement the power system testing method described in any one of claims 1-6 when executed.

10. A computer program product comprising a computer program / instructions, wherein: When the computer program / instructions are executed by a processor, the power system testing method according to any one of claims 1 to 6 is implemented.

Images