Dynamic verification method and system for security effectiveness of complex network system

Abstract

The invention belongs to the technical field of network security verification, and particularly relates to a dynamic verification method and system for security effectiveness of a complex network system.The method comprises the steps that firstly, a layered distributed effective verification network composed of a distributed security verification layer and a distributed function verification layer is configured according to attributes of the complex network system; the method comprises the following steps: acquiring complex network system parameters to be verified and updated, obtaining a continuous to-be-verified node network and a first security to-be-verified parameter and a first function to-be-verified parameter of each node through a built-in verification decomposition model, constructing a forward attack verification packet according to the node parameters and a connection relationship attribute, performing forward verification attack on the nodes and a data transmission chain, and obtaining a forward attack verification result. And judging the validity of the parameters, if the parameters are valid, continuously verifying until all the nodes are completed, and if the parameters are invalid, invalidating the parameters to be verified, thereby effectively avoiding a single-point fault and improving the reliability of the system through a layered distributed architecture.

Description

Technical Field

[0001] The present invention belongs to the technical field of network security verification, and in particular, relates to a dynamic verification method and system for the security effectiveness of a complex network system. Background Art

[0002] In the field of industrial control, the real-time and reliability requirements of industrial control systems in industries such as power, petrochemicals, and automobile manufacturing are extremely high. In the complex network systems in the above fields, with the continuous expansion of the generation scale and the corresponding network scale and the increasing complexity of application scenarios, ensuring the security and effectiveness of the system has become a crucial issue; the existing complex network system verification technology has many shortcomings. On the one hand, traditional verification methods mostly adopt a centralized architecture. When facing large-scale complex networks, centralized verification is prone to single point failures and the security verification of a single node cannot capture cross-node related attacks, making it difficult to meet real-time and security requirements. On the other hand, there is often a lack of a comprehensive and dynamic evaluation mechanism for the security and effectiveness verification of nodes in the network system, which only focuses on the verification of some parameters or specific scenarios and cannot adapt to the complex and changing network environment.

[0003] For example, the validity verification method and system of the threshold proxy re-encryption collaborative network disclosed in the Chinese patent with the authorization announcement number CN116112284B generates relevant public verification parameters through the cooperation of the threshold encryption fragment generator and the data agent, and the validity verifier completes the validity verification of the threshold proxy re-encryption collaborative network based on these parameters. However, from the perspective of architecture, it is not clearly mentioned whether the single point failure problem existing in the traditional centralized architecture can be solved. If the threshold encryption fragment generator or other key parts fail during the verification process, it may affect the validity verification of the entire network, making it difficult to ensure the real-time and reliability of the system. Secondly, in terms of the verification mechanism, it only focuses on the validity verification of the threshold proxy re-encryption collaborative network. There is a lack of comprehensive evaluation of the security and validity verification of nodes in the network system, and it does not fully consider the various associations between nodes in a complex network environment and possible cross-node association attacks. It cannot fully adapt to the complex and changeable network environment in the field of industrial control. The demand for security and validity verification. Summary of the invention

[0004] In view of the shortcomings of the prior art, the present invention proposes a dynamic verification method and system for the security and effectiveness of complex network systems. First, a hierarchical distributed effective verification network consisting of a distributed security verification layer and a distributed functional verification layer is configured according to the properties of the complex network system. Secondly, the complex network system parameters to be verified and updated are obtained, and the first security parameter set to be verified and the first functional parameter set to be verified of the continuous node network to be verified and each node are obtained through the built-in verification decomposition model. Then, a forward attack verification package is constructed according to the node parameters and connection relationship attributes, and a forward verification attack is performed on the nodes and data transmission chain to determine the validity of the parameters. If valid, the verification is continued until all nodes are completed. If invalid, the parameters to be verified are invalid. The present invention effectively avoids single point failures and improves system reliability through a hierarchical distributed architecture.

[0005] To achieve the above object, the present invention provides the following technical solutions: Dynamic verification methods for the security effectiveness of complex network systems include: Configuring a hierarchical distributed effective verification network based on complex network system properties, wherein the hierarchical distributed effective verification network includes a distributed security verification layer and a distributed function verification layer; Obtain the updated complex network system parameters to be verified, and obtain the continuous node network to be verified and the first security parameter set to be verified and the first function parameter set to be verified corresponding to each node through the built-in verification decomposition model; Based on the first security parameter to be verified and the first function parameter to be verified corresponding to two consecutive nodes in the continuous node network to be verified and the connection relationship attribute, a forward attack verification package corresponding to each node to be verified is constructed and built into the hierarchical distributed effective verification network; Using the hierarchical distributed effective verification network, a forward verification attack is performed on any node in the continuous node network to be verified and the corresponding data transmission chain, and determining whether the first security parameter to be verified and the first function parameter to be verified corresponding to each attacked node are valid; If valid, continue verification and share the attack type corresponding to the previous node in the continuous node network to be verified backward until all nodes to be verified are verified. If invalid, the updated complex network system parameters to be verified will be invalid.

[0006] Specifically, the distributed security verification layer and the distributed functional verification layer have the same corresponding distribution structure; The number of security attack verification nodes in the distributed security verification layer and the number of nodes to be verified in the first-level continuous node to be verified subnet in the continuous node to be verified network are the same and correspond one to one; The number of the function attack verification nodes in the distributed function verification layer and the number of the function sub-nodes to be verified in the secondary functional sub-network to be verified in the continuous node network to be verified are the same and correspond one to one; Each node to be verified containsM Function sub-nodes to be verified; The distributed security verification layer is used to perform attack verification on the data encryption strength and access control process corresponding to each node to be verified and the connection relationship between nodes in the continuous node network to be verified; The distributed function verification layer is used to perform attack verification on the delay tolerance, load balancing, and node control standard parameters corresponding to each functional sub-node to be verified and the connection relationship between the sub-nodes in the secondary functional sub-network to be verified.

[0007] Specifically, the steps for building a continuous network of nodes to be verified include: Update the complex network system parameters to be verified, obtain the information of each key function control point in the complex network system and the data transmission relationship information between the key function control points; Each of the key function control points corresponds one-to-one to a node to be verified in the first-level continuous node subnet to be verified; According to the information of each key function control point, secondary decomposition is performed to obtain the sub-function control point set corresponding to each key function control point and the data transmission relationship within the sub-function control point set and the data transmission relationship between the key function control points and the corresponding sub-function control point sets; According to the sub-function control point set corresponding to each key function control point, the data transmission relationship within the sub-function control point set, and the data transmission relationship between the sub-function control point sets corresponding to the key function control points, clustering is performed through an adaptive clustering algorithm to obtain the sub-function control point set with the same function and mark the key function control point labels.

[0008] Specifically, the steps of constructing a continuous network of nodes to be verified also include: According to the number of key function control points and the data transmission relationship information between the key function control points, a first-level continuous node subnet to be verified is constructed through a topology algorithm, and the data transmission direction is marked on the connection relationship between the nodes in the first-level continuous node subnet to be verified; According to the information of each key function control point in the subnet of the node to be verified, the scalable function information of each key function control point and the corresponding required resources and memory are obtained through the function requirement analysis model; According to the expandable function information and the corresponding required resources and memory of each corresponding key function control point, the corresponding required resources and memory are reserved. When the system is updated, the lower-level sub-function control points are mounted and the resources and memory are allocated at each corresponding key function control point according to the update requirements and the reserved required resources and memory.

[0009] Specifically, the steps of constructing a continuous network of nodes to be verified also include: According to the sub-function control point set corresponding to each key function control point and the data transmission relationship within the sub-function control point set, the second-level regional functional subnet to be verified corresponding to the function sub-node set to be verified under each first-level continuous node to be verified is obtained; Constructing a directed connection relationship set between corresponding function sub-nodes to be verified between all the secondary regional functional sub-networks to be verified according to the data transmission relationship between the corresponding sub-function control point sets between the key function control points; Based on the directed connection relationship set and all the secondary regional functional subnets to be verified, a secondary functional subnet to be verified is obtained.

[0010] Specifically, the forward attack verification package corresponding to each node to be verified consists of a security attack verification sub-package and a functional attack verification sub-package; Specifically, the construction steps of the distributed security verification layer and the distributed function verification layer include: Based on the number and connection relationship of the nodes to be verified in the first-level continuous node subnet to be verified, a distributed security verification node subnet with the same structure is constructed; Based on the direction of data transmission in the first-level continuous node subnet to be verified, construct an initial security attack verification node, and configure the security attack verification sub-package into the initial security attack verification node; Based on the secondary functional subnet to be verified and the corresponding data transmission direction, a distributed function verification subnet is constructed and the order of verification of each node in the distributed function verification subnet is marked according to the data transmission direction; At the same time, according to the order of verification of each node in the distributed function verification subnet, the functional attack verification sub-package is configured to each functional attack verification node in the initial area functional attack verification subnet in the distributed function verification subnet; Specifically, the distributed functional verification subnet is composed of a regional functional attack verification subnet, and the regional functional attack verification subnet has the same structure and number of nodes as the secondary regional functional subnet to be verified; A distributed synchronous verification and evaluation control model is configured, and the distributed synchronous verification and evaluation control model is built into the distributed security verification node subnet, distributed function verification subnet and continuous node network to be verified, and synchronous verification and evaluation control is performed to obtain verification and evaluation results corresponding to the continuous node network to be verified.

[0011] Specifically, the distributed synchronous verification evaluation control model includes a distributed pass control sub-model, a distributed evaluation parameter sub-model and a differential backward sharing sub-model; The distributed control sub-model is used to control the synchronization of the corresponding security attack verification nodes and functional attack verification nodes in the distributed security verification layer and the distributed functional verification layer, and share the security attack parameter of the security attack verification sub-package of the security attack verification node corresponding to the high-risk node to be verified with the next security attack verification node according to the direction of the connection relationship in the distributed security verification node subnet; Specifically, the high-risk node to be verified is obtained by combining the distributed evaluation parameter sub-model with the preset risk assessment interval level according to the first security parameter to be verified and the first function parameter to be verified corresponding to each synchronously attacked node to be verified and the corresponding M function sub-nodes to be verified; At the same time, the effective attack parameters of the function attack verification node corresponding to the high-risk function sub-node to be verified are shared with the next function attack verification node corresponding to the direction of the connection relationship in the distributed function verification subnet and the sub-function control point set with the same function obtained according to the clustering algorithm.

[0012] Specifically, the distributed evaluation parameter sub-model is used to evaluate the first security parameter to be verified and the first function parameter to be verified of each synchronously attacked node to be verified and the corresponding M function sub-nodes to be verified, and combine the preset risk assessment interval level to obtain the attack risk score of the node to be verified and the corresponding M function sub-nodes to be verified and the corresponding risk level and effectiveness assessment score; Specifically, the differential backward sharing sub-model performs sharing judgment backward toward the nodes to be verified and the functional sub-nodes to be verified that are in the same data transmission chain according to the direction of the connection relationship in the continuous network of nodes to be verified and the attack type parameters of the currently attacked nodes to be verified and the functional sub-nodes to be verified. If the corresponding nodes to be verified or the functional sub-nodes to be verified contain the same attack type parameters, they are not shared; if not, the attack type parameters are shared.

[0013] Specifically, the steps of performing synchronous verification and evaluation control and obtaining verification and evaluation results corresponding to the continuous node network to be verified include: Attacking the initial node to be verified and the directed connection relationship between the initial node to be verified and the second node to be verified in the continuous node to be verified network according to the initial security attack verification node; At the same time, the initial regional functional attack verification subnet corresponding to the initial security attack verification node is controlled by the distributed control submodel to attack the initial secondary regional functional subnet to be verified and the directed connection relationship between the initial secondary regional functional subnet to be verified and the second secondary regional functional subnet to be verified; The initial secondary regional functional subnet to be verified corresponds to the initial node to be verified; Obtain the first security parameters to be verified and the first functional parameters to be verified after the initial nodes to be verified and the corresponding connection relationships and the initial secondary regional functional subnets to be verified and the corresponding directed connection relationships are attacked, and label the corresponding nodes to be verified and the functional subnodes to be verified, so as to construct an initial attack parameter set; The constructed initial attack parameter set is input into the distributed evaluation parameter sub-model to evaluate the initial node to be verified and each functional sub-node to be verified in the initial secondary area functional sub-network to be verified, so as to obtain the corresponding danger level and effectiveness evaluation score of the initial node to be verified and each functional sub-node to be verified in the initial secondary area functional sub-network to be verified.

[0014] Specifically, the step of performing synchronous verification and evaluation control to obtain verification and evaluation results corresponding to the continuous node network to be verified also includes: The validity assessment threshold is constructed with the score value corresponding to the lower limit of the high-risk level interval within the preset risk assessment interval. If the validity assessment score corresponding to the initial node to be verified or any functional sub-node to be verified in the initial secondary regional functional sub-network to be verified is greater than or equal to the validity assessment threshold, the update of the complex network system parameters to be verified is determined to be invalid; If the validity evaluation scores corresponding to the initial node to be verified and all the functional sub-nodes to be verified in the initial secondary regional functional sub-network to be verified are less than the validity evaluation threshold, then the initial node to be verified and all the functional sub-nodes to be verified in the corresponding initial secondary regional functional sub-network to be verified are determined to be valid; When it is determined that the initial node to be verified and all the functional sub-nodes to be verified in the corresponding initial secondary regional functional sub-network to be verified are valid, the attack parameters are backward shared and propagated according to the danger levels corresponding to the initial node to be verified and all the functional sub-nodes to be verified in the corresponding initial secondary regional functional sub-network to be verified.

[0015] Specifically, the step of performing synchronous verification and evaluation control to obtain verification and evaluation results corresponding to the continuous node network to be verified also includes: If the initial node to be verified is of high risk level or any of the functional sub-nodes to be verified in the corresponding initial secondary regional functional sub-network to be verified is of high risk level, the security attack verification sub-package corresponding to the initial security attack verification node is shared with the next security attack verification node through the distributed control sub-model according to the direction of the connection relationship in the distributed security verification node sub-network; At the same time, the functional attack verification sub-package in the functional attack verification node corresponding to the high-risk functional sub-node to be verified in the initial secondary regional functional to-be-verified sub-network is shared according to the clustering algorithm with the obtained sub-function control point set with the same function and the next functional attack verification node in the direction of the connection relationship corresponding to the current functional attack verification node in the distributed functional verification sub-network; If the initial node to be verified and any of the functional sub-nodes to be verified in the corresponding initial secondary regional functional sub-network to be verified are not of high risk level, the backward attack verification sub-package sharing will not be performed on the security attack verification node and the functional attack verification node; At the same time, the attack type parameters corresponding to the initial node to be verified and all the functional sub-nodes to be verified in the corresponding initial secondary regional functional sub-network to be verified are shared backwards according to the connection relationship direction corresponding to the data transmission in the continuous node to be verified network through the differential backward sharing sub-model.

[0016] Specifically, the step of performing synchronous verification and evaluation control to obtain verification and evaluation results corresponding to the continuous node network to be verified also includes: Repeat the attack process of the initial node to be verified and all the functional sub-nodes to be verified in the corresponding initial secondary regional functional sub-network to be verified according to the connection relationship direction corresponding to the data transmission in the continuous node to be verified network, and attack each subsequent node to be verified in the continuous node to be verified network and all the functional sub-nodes to be verified in the corresponding secondary regional functional sub-network to be verified; At the same time, according to the security attack verification nodes and regional functional attack verification subnets corresponding to each node to be verified and the corresponding secondary regional functional subnet to be verified, a forward verification attack is performed on the verification nodes and corresponding connection relationships in the forward sequence on the data transmission chain where the current node to be verified and the corresponding secondary regional functional subnet to be verified are located, and the functional subnodes to be verified and the corresponding connection relationships in the corresponding secondary regional functional subnet to be verified; Determine the danger level and effectiveness evaluation score of each of the above-mentioned nodes to be verified and the corresponding secondary regional functional subnet to be verified after being attacked. If the effectiveness evaluation score corresponding to the corresponding node to be verified and the corresponding secondary regional functional subnet to be verified is greater than or equal to the effectiveness evaluation threshold, then determine that the update of the complex network system parameters to be verified is invalid; Otherwise, verification continues and the attack type parameters corresponding to each node to be verified and all the functional sub-nodes to be verified in the corresponding secondary regional functional sub-node to be verified are shared backward according to the connection relationship direction corresponding to the data transmission in the continuous node network to be verified until the verification of all nodes to be verified is completed.

[0017] Dynamic verification system for security and effectiveness of complex network systems, including: verification network module, parameter parsing module, attack verification module; The verification network module configures a hierarchical distributed effective verification network based on complex network system properties, wherein the hierarchical distributed effective verification network includes a distributed security verification layer and a distributed function verification layer; The parameter parsing module is used to obtain the complex network system parameters to be verified and updated, and obtain the continuous node network to be verified and the first security parameter set to be verified and the first function parameter set to be verified corresponding to each node through the built-in verification decomposition model.

[0018] The attack verification module includes an attack construction unit and an attack verification unit; The attack construction unit constructs a forward attack verification package corresponding to each node to be verified based on the first security parameter to be verified and the first function parameter to be verified corresponding to two consecutive nodes in the continuous node network to be verified and the connection relationship attribute, and builds the package into the hierarchical distributed effective verification network; The attack verification unit uses the hierarchical distributed effective verification network to perform a forward verification attack on any node in the continuous node network to be verified and the corresponding data transmission chain, and determines whether the first security parameter to be verified and the first function parameter to be verified corresponding to each attacked node are valid; if valid, continue to verify and share the attack type corresponding to the previous node in the continuous node network to be verified backward until the verification of all nodes to be verified is completed; if invalid, the updated complex network system parameters to be verified are invalid.

[0019] Compared with the prior art, the present invention has the following beneficial effects: In view of the deficiencies of the prior art, the present invention constructs a three-in-one collaborative mechanism of "dynamic defense-correlation analysis-active verification" through a hierarchical distributed effective verification network, thereby achieving a systematic improvement in the verification efficiency of complex networks. In particular, through the decoupled collaboration of the distributed security verification layer and the distributed functional verification layer, a double protection barrier of security parameter verification and network parameter validity evaluation is formed while avoiding single point failures. The chain attack verification mechanism of the node-level verification package enables the cross-node attack path to be dynamically tracked, solving the problem of the separation of local protection and global security in traditional verification. Secondly, based on the parameter decoupling technology of the verification decomposition model, security verification (such as encryption strength, access control) and validity verification (such as delay tolerance, load balancing, node control standard parameters) are dynamically correlated and analyzed. Combined with the spatiotemporal modeling of connection relationship attributes, the coupling risk of parameter anomalies and topological evolution can be accurately identified, further improving the coverage of verification indicators. The present invention also transforms traditional passive response into attack path preview verification through the active injection mechanism of forward attack verification packages and the backward attack sharing mechanism. This strategy of promoting defense through attack, combined with the recursive verification logic of the continuous node network, can expose the vulnerable links of multiple attack chains in advance and further improve the recognition speed of new compound attacks. BRIEF DESCRIPTION OF THE DRAWINGS

[0020] Figure 1 This is a flow chart of a dynamic verification method for security effectiveness of a complex network system according to Embodiment 1 of the present invention; Figure 2 This is a module diagram of a dynamic verification system for the security and effectiveness of a complex network system according to Embodiment 2 of the present invention. DETAILED DESCRIPTION

[0021] Example 1 In the field of industrial control, the real-time and reliability requirements of industrial control systems in industries such as power, petrochemicals, and automobile manufacturing are extremely high. In the complex network systems in the above fields, with the continuous expansion of the generation scale and the corresponding network scale and the increasing complexity of the application scenarios, and the control process corresponding to each generation step is extremely delicate and complex, the corresponding complex network system is also more vulnerable to attacks during the update, resulting in system failure and irreparable losses. In order to solve the above problems, refer to Figure 1 The present invention provides an embodiment: a dynamic verification method for the security effectiveness of a complex network system, comprising the following steps: S1. configuring a hierarchical distributed effective verification network based on complex network system properties, wherein the hierarchical distributed effective verification network includes a distributed security verification layer and a distributed function verification layer; Furthermore, in this embodiment, the complex network system attributes are acquired according to the corresponding fields, and the specific field attribute parameters are obtained to build a hierarchical distributed effective verification network. For example, the power field corresponds to: equipment parameters, operation parameters and communication parameters, etc.; The device parameters include: Power generation equipment: rated power, rated voltage, rated current, power factor, rotor speed, excitation current, etc. of the generator. These parameters determine the generator's power generation capacity and operating characteristics. When the complex network system is updated, its parameter changes may affect the stable supply of electricity. For example, the increase in the rated power of the generator may change the power balance of the power grid, and the load balancing capability of the relevant nodes needs to be verified.

[0022] Transmission equipment: electrical parameters such as resistance, reactance, capacitance, and conductance of the transmission line, as well as physical parameters such as line length, tower height, and conductor model. Resistance and reactance affect power loss and voltage drop during transmission, while capacitance and conductance are related to the charging power and leakage current of the line. For example, changes in the resistance of the transmission line may affect the transmission efficiency of the line, and the data encryption strength needs to be verified to prevent malicious tampering of parameters.

[0023] Transformer equipment: transformer rated capacity, ratio, short-circuit impedance, no-load loss, load loss, etc. The ratio determines the proportion of voltage transformation, and the short-circuit impedance affects the short-circuit current and voltage fluctuation of the transformer. When the transformer parameters change, it is necessary to verify its impact on the operation of the power grid and whether the access control process is safe.

[0024] The operating parameters include: Voltage parameters: voltage amplitude and phase angle of each node in the power grid. The stability of voltage amplitude is the key to ensure the normal operation of power equipment, and the phase angle difference affects the direction and size of power transmission. When a complex network system is updated, the access of new equipment or line adjustment may cause voltage fluctuations. It is necessary to verify the delay tolerance of the connection relationship between nodes to ensure the timeliness of voltage stability control.

[0025] Current parameters: the current magnitude and phase of each line. The current magnitude reflects the load of the line, and the phase is related to the power factor. When the current exceeds the rated current of the line, it may cause problems such as line overheating. It is necessary to verify the load balancing mechanism and reasonably distribute the current.

[0026] Power parameters: distribution of active power and reactive power. Active power is used for the conversion and consumption of electric energy, and reactive power is used to maintain the establishment of electric and magnetic fields. The balance of power in the power grid is crucial to the stable operation of the system. When complex network systems are updated, it is necessary to verify the node control standard parameters to ensure the reasonable distribution and regulation of power.

[0027] The communication parameters include: Data transmission rate: The data transmission rate of each communication link in the power system, such as the communication rate between the substation and the dispatch center, and between different substations. The data transmission rate affects the timeliness and accuracy of information transmission. When updating a complex network system, it is necessary to verify whether it meets the real-time requirements and whether the data encryption strength can ensure communication security.

[0028] Communication delay: The delay time of data transmission in the communication network. Communication delay may affect the control accuracy and stability of the power system, such as affecting the action time of the relay protection device. During the verification process, it is necessary to pay attention to the delay tolerance to ensure that the communication delay is within an acceptable range.

[0029] Communication reliability: Reliability indicators of communication links, such as bit error rate, packet loss rate, etc. High bit error rate and packet loss rate may lead to data transmission errors or loss, affecting the normal operation of the power system. In the distributed security verification layer and distributed function verification layer, communication reliability needs to be verified by attack to ensure the stability of communication.

[0030] Furthermore, the distributed security verification layer and the distributed function verification layer in this embodiment have the same corresponding distribution structure; Furthermore, the number of security attack verification nodes in the distributed security verification layer in this embodiment and the number of nodes to be verified in the first-level continuous node to be verified subnet in the continuous node to be verified network are the same and correspond one to one; Furthermore, the number of the function attack verification nodes in the distributed function verification layer in this embodiment and the number of the function sub-nodes to be verified in the secondary functional sub-network to be verified in the continuous node network to be verified are the same and correspond one to one; Furthermore, each node to be verified in this embodiment includes M Function sub-nodes to be verified; Furthermore, the distributed security verification layer in this embodiment is used to perform attack verification on the data encryption strength and access control process corresponding to each node to be verified and the connection relationship between nodes in the continuous node network to be verified; Furthermore, the distributed function verification layer in this embodiment is used to perform attack verification on the delay tolerance, load balancing, and node control standard parameters corresponding to each function sub-node to be verified and the connection relationship between the sub-nodes in the secondary functional sub-net to be verified.

[0031] Furthermore, in this embodiment, the attack verification algorithms corresponding to the distributed security verification layer and the distributed function verification layer are specifically set by corresponding personnel in this field according to the corresponding fields and security requirements.

[0032] S2. Obtain the updated complex network system parameters to be verified, and obtain the continuous node network to be verified and the first security parameter set to be verified and the first function parameter set to be verified corresponding to each node through the built-in verification decomposition model; Furthermore, the steps of constructing a continuous network of nodes to be verified in this embodiment include: Update the complex network system parameters to be verified, obtain the information of each key function control point in the system and the data transmission relationship information between the key function control points; Each of the key function control points corresponds one-to-one to a node to be verified in the first-level continuous node subnet to be verified; According to the information of each key function control point, secondary decomposition is performed to obtain the sub-function control point set corresponding to each key function control point and the data transmission relationship within the sub-function control point set and the data transmission relationship between the key function control points and the corresponding sub-function control point sets; For example, in the power industry, the first-level key function control points include regional control centers and substations 1 to 10.

[0033] The secondary sub-function control points include feeder terminal units (20), smart meters (100), photovoltaic inverter control units (5), etc. under each substation.

[0034] According to the sub-function control point set corresponding to each key function control point, the data transmission relationship within the sub-function control point set, and the data transmission relationship between the sub-function control point sets corresponding to the key function control points, clustering is performed through an adaptive clustering algorithm to obtain the sub-function control point set with the same function and mark the key function control point labels.

[0035] According to the number of key function control points and the data transmission relationship information between the key function control points, a first-level continuous node subnet to be verified is constructed through a topology algorithm, and the data transmission direction is marked on the connection relationship between the nodes in the first-level continuous node subnet to be verified; According to the information of each key function control point in the first-level continuous node subnet to be verified, the scalable function information of each key function control point and the corresponding required resources and memory are obtained through the function requirement analysis model; For example, in this embodiment, the functional requirement analysis model is used to reserve 5% computing resources for substation 1 for the calculation of new photovoltaic inverter control units in the future. At the same time, 10MB of memory and 2 CPU cores are reserved for each photovoltaic inverter control unit for subsequent update and storage of new system functions or corresponding control sub-functions of the control device.

[0036] According to the scalable function information and the corresponding required resources and memory of each corresponding key function control point, the corresponding required resources and memory are reserved. When the system is updated, the lower-level sub-function control points are mounted and resources and memory are allocated at each corresponding key function control point according to the update requirements and the reserved required resources and memory; Furthermore, the functional requirement analysis model in this embodiment is constructed by using a support vector machine and historical functional parameters and corresponding demand resources and memory; According to the sub-function control point set corresponding to each key function control point and the data transmission relationship within the sub-function control point set, the second-level regional functional subnet to be verified corresponding to the function sub-node set to be verified under each first-level continuous node to be verified is obtained; Constructing a directed connection relationship set between corresponding function sub-nodes to be verified between all the secondary regional functional sub-networks to be verified according to the data transmission relationship between the corresponding sub-function control point sets between the key function control points; Exemplarily, in this embodiment for the power field, the first-level continuous node subnet to be verified in this embodiment includes regional control center → substation 1 → substation 2 → ... → substation N (based on the physical topology of the power grid), and the corresponding directed arrow is the direction of data transmission.

[0037] The secondary functional subnet to be verified in this embodiment is a subnet structure formed by a feeder terminal unit (FTU), a smart meter, and a photovoltaic inverter control unit mounted under each substation; Based on the directed connection relationship set and all the secondary regional functional subnets to be verified, a secondary functional subnet to be verified is obtained.

[0038] S3. Based on the first security parameter to be verified and the first function parameter to be verified corresponding to two consecutive nodes in the continuous node network to be verified and the connection relationship attribute, a forward attack verification package corresponding to each node to be verified is constructed and built into the hierarchical distributed effective verification network; Furthermore, the forward attack verification package corresponding to each node to be verified in this embodiment is composed of a security attack verification sub-package and a functional attack verification sub-package; Furthermore, the security attack verification sub-package in this embodiment simulates a man-in-the-middle attack against substation 1 in the power field (testing whether AES-256 encryption is cracked) and simulates unauthorized access (testing whether operator authority classification is effective).

[0039] The functional attack verification sub-package in this embodiment simulates network congestion in the power field (testing the FTU delay tolerance), simulates a sudden increase in photovoltaic power generation (testing the voltage regulation accuracy of the inverter), and tampering with the corresponding smart meter control parameters (testing the process of tampering with the corresponding sub-function control parameters, such as the smart meter corresponding voltage regulation function, assuming that the standard safety voltage is 36V, which is tampered to 72V during the update process); The steps of constructing the distributed security verification layer and the distributed function verification layer include: Based on the number and connection relationship of the nodes to be verified in the first-level continuous node subnet to be verified, a distributed security verification node subnet with the same structure is constructed; Based on the direction of data transmission in the first-level continuous node subnet to be verified, construct an initial security attack verification node, and configure the security attack verification sub-package into the initial security attack verification node; Based on the secondary functional subnet to be verified and the corresponding data transmission direction, a distributed function verification subnet is constructed and the order of verification of each node in the distributed function verification subnet is marked according to the data transmission direction; At the same time, according to the order of verification of each node in the distributed function verification subnet, the functional attack verification sub-package is configured to each functional attack verification node in the initial area functional attack verification subnet in the distributed function verification subnet; Further, the distributed functional verification subnet is composed of a regional functional attack verification subnet, and the regional functional attack verification subnet has the same structure and number of nodes as the secondary regional functional subnet to be verified; Furthermore, the function attack verification nodes in the distributed function verification subnet in this embodiment increase accordingly with the increase of the corresponding function sub-nodes to be verified in the secondary functional subnet to be verified, and maintain a one-to-one correspondence in real time.

[0040] The regional effective attack verification subnet has the same structure as the functional subnet to be verified in the secondary region and has a one-to-one correspondence; A distributed synchronous verification and evaluation control model is configured, and the distributed synchronous verification and evaluation control model is built into the distributed security verification node subnet, distributed function verification subnet and continuous node network to be verified, and synchronous verification and evaluation control is performed to obtain verification and evaluation results corresponding to the continuous node network to be verified.

[0041] Further, the distributed synchronous verification evaluation control model in this embodiment includes a distributed pass control sub-model, a distributed evaluation parameter sub-model and a differential backward sharing sub-model; Furthermore, the distributed control sub-model in this embodiment is used to control the synchronization of the corresponding security attack verification nodes and functional attack verification nodes in the distributed security verification layer and the distributed functional verification layer, and share the security attack parameter of the security attack verification sub-package of the security attack verification node corresponding to the high-risk node to be verified with the next security attack verification node according to the direction of the connection relationship in the distributed security verification node subnet; Furthermore, the high-risk node to be verified in this embodiment is obtained by combining the distributed synchronous verification assessment control model with the preset risk assessment interval level according to the first security parameter to be verified and the first function parameter to be verified corresponding to each synchronous attacked node to be verified and the corresponding M function sub-nodes to be verified; At the same time, the effective attack parameters of the function attack verification node corresponding to the high-risk function sub-node to be verified are shared with the next function attack verification node corresponding to the direction of the connection relationship in the distributed function verification subnet and the sub-function control point set with the same function obtained according to the clustering algorithm.

[0042] Furthermore, the distributed evaluation parameter sub-model in this embodiment is used to evaluate the first security parameter to be verified and the first function parameter to be verified of each synchronously attacked node to be verified and the corresponding M function sub-nodes to be verified, and combine the preset risk assessment interval level to obtain the attack risk score of the node to be verified and the corresponding M function sub-nodes to be verified and the corresponding risk level and effectiveness assessment score; Furthermore, the preset risk assessment interval levels in this embodiment are set by technical personnel in the corresponding field according to the specific safety requirements of the corresponding field to set specific intervals and scores corresponding to the intervals; Furthermore, the differential backward sharing sub-model in this embodiment makes a sharing judgment backward toward the nodes to be verified and the functional sub-nodes to be verified in the same data transmission chain according to the direction of the connection relationship in the continuous network of nodes to be verified and the attack type parameters of the currently attacked nodes to be verified and the functional sub-nodes to be verified. If the corresponding nodes to be verified or the functional sub-nodes to be verified contain the same attack type parameters, they are not shared; if not, the attack type parameters are shared.

[0043] S4, using the hierarchical distributed effective verification network to perform a forward verification attack on any node in the continuous node network to be verified and the corresponding data transmission chain, and determine whether the first security parameter to be verified and the first function parameter to be verified corresponding to each attacked node are valid; S5. If it is valid, continue to verify and share the attack type corresponding to the previous node in the continuous node network to be verified backward until all nodes to be verified are verified. If it is invalid, the complex network system parameters to be verified will be invalid.

[0044] Furthermore, the step of performing synchronous verification and evaluation control in this embodiment to obtain verification and evaluation results corresponding to the continuous node network to be verified includes: Attacking the initial node to be verified and the directed connection relationship between the initial node to be verified and the second node to be verified in the continuous node to be verified network according to the initial security attack verification node; At the same time, the initial regional functional attack verification subnet corresponding to the initial security attack verification node is controlled by the distributed control submodel to attack the initial secondary regional functional subnet to be verified and the directed connection relationship between the initial secondary regional functional subnet to be verified and the second secondary regional functional subnet to be verified; The initial secondary regional functional subnet to be verified corresponds to the initial node to be verified; Obtain the first security parameters to be verified and the first functional parameters to be verified after the initial nodes to be verified and the corresponding connection relationships and the initial secondary regional functional subnets to be verified and the corresponding directed connection relationships are attacked, and label the corresponding nodes to be verified and the functional subnodes to be verified, so as to construct an initial attack parameter set; Input the constructed initial attack parameter set into the distributed evaluation parameter sub-model to evaluate the initial node to be verified and each functional sub-node to be verified in the initial secondary regional functional sub-network to be verified, and obtain the corresponding danger level and effectiveness evaluation score of each functional sub-node to be verified in the initial node to be verified and the initial secondary regional functional sub-network to be verified; The validity assessment threshold is constructed with the score value corresponding to the lower limit of the high-risk level interval within the preset risk assessment interval. If the validity assessment score corresponding to the initial node to be verified or any functional sub-node to be verified in the initial secondary regional functional sub-network to be verified is greater than or equal to the validity assessment threshold, the update of the complex network system parameters to be verified is determined to be invalid; If the validity evaluation scores corresponding to the initial node to be verified and all the functional sub-nodes to be verified in the initial secondary regional functional sub-network to be verified are less than the validity evaluation threshold, then the initial node to be verified and all the functional sub-nodes to be verified in the corresponding initial secondary regional functional sub-network to be verified are determined to be valid; When it is determined that the initial node to be verified and all the functional sub-nodes to be verified in the corresponding initial secondary regional functional sub-network to be verified are valid, the attack parameters are backward shared and propagated according to the danger levels corresponding to the initial node to be verified and all the functional sub-nodes to be verified in the corresponding initial secondary regional functional sub-network to be verified.

[0045] If the initial node to be verified is of high risk level or any of the functional sub-nodes to be verified in the corresponding initial secondary regional functional sub-network to be verified is of high risk level, the security attack verification sub-package corresponding to the initial security attack verification node is shared with the next security attack verification node through the distributed control sub-model according to the direction of the connection relationship in the distributed security verification node sub-network; At the same time, the functional attack verification sub-package in the functional attack verification node corresponding to the high-risk functional sub-node to be verified in the initial secondary regional functional to-be-verified sub-network is shared according to the clustering algorithm with the obtained sub-function control point set with the same function and the next functional attack verification node in the direction of the connection relationship corresponding to the current functional attack verification node in the distributed functional verification sub-network; If the initial node to be verified and any of the functional sub-nodes to be verified in the corresponding initial secondary regional functional sub-network to be verified are not of high risk level, the backward attack verification sub-package sharing will not be performed on the security attack verification node and the functional attack verification node; At the same time, the attack type parameters corresponding to the initial node to be verified and all the functional sub-nodes to be verified in the corresponding initial secondary regional functional sub-network to be verified are shared backwards according to the connection relationship direction corresponding to the data transmission in the continuous node to be verified network through the differential backward sharing sub-model.

[0046] Repeat the attack process of the initial node to be verified and all the functional sub-nodes to be verified in the corresponding initial secondary regional functional sub-network to be verified according to the connection relationship direction corresponding to the data transmission in the continuous node to be verified network, and attack each subsequent node to be verified in the continuous node to be verified network and all the functional sub-nodes to be verified in the corresponding secondary regional functional sub-network to be verified; At the same time, according to the security attack verification nodes and regional functional attack verification subnets corresponding to each node to be verified and the corresponding secondary regional functional subnet to be verified, a forward verification attack is performed on the verification nodes and corresponding connection relationships in the forward sequence on the data transmission chain where the current node to be verified and the corresponding secondary regional functional subnet to be verified are located, and the functional subnodes to be verified and the corresponding connection relationships in the corresponding secondary regional functional subnet to be verified; Determine the danger level and effectiveness evaluation score of each of the above-mentioned nodes to be verified and the corresponding secondary regional functional subnet to be verified after being attacked. If the effectiveness evaluation score corresponding to the corresponding node to be verified and the corresponding secondary regional functional subnet to be verified is greater than or equal to the effectiveness evaluation threshold, then determine that the update of the complex network system parameters to be verified is invalid; Otherwise, verification continues and the attack type parameters corresponding to each node to be verified and all the functional sub-nodes to be verified in the corresponding secondary regional functional sub-node to be verified are shared backward according to the connection relationship direction corresponding to the data transmission in the continuous node network to be verified until the verification of all nodes to be verified is completed.

[0047] In order to better illustrate the above forward verification attack process, it is assumed that the first-level continuous to-be-verified node subnet in the current continuous to-be-verified node network includes 5 to-be-verified nodes and corresponding 5 second-level functional to-be-verified subnets; Here, the first node to be verified and the corresponding node in the secondary functional subnet to be verified are attacked first, and the first security parameter to be verified and the first functional parameter to be verified corresponding to the node to be verified and the secondary functional subnet to be verified after the attack are evaluated and verified. When the valid evaluation score corresponding to one of the nodes to be verified and the secondary functional subnet to be verified is greater than the valid evaluation score threshold, the entire system parameter to be updated is invalid. If it passes, the security attack verification node and the functional attack verification node corresponding to the high-risk node to be verified and the functional subnode to be verified in the secondary functional subnet are shared with the functional attack verification node corresponding to the high-risk functional subnode to be verified in the second node to be verified and the secondary functional subnet; and the attack type parameters of all the functional subnodes to be verified in the node to be verified and the secondary functional subnet are shared with the next 4 nodes to be verified and the corresponding 4 functional subnodes to be verified in the secondary functional subnet; When the third node to be verified and the secondary functional subnet to be verified are verified, in addition to attacking the third node to be verified and the functional subnodes to be verified in the secondary functional subnet according to the same steps as above, the first and second nodes to be verified, the secondary functional subnet to be verified, the first and second or the second and third nodes to be verified, and the directed connection process between the secondary functional subnet are simultaneously attacked synchronously through the security attack verification nodes and regional functional attack verification subnets corresponding to the third node to be verified and the secondary functional subnet, and the attack is verified to be effective. Repeat the above steps until all nodes to be verified are verified.

[0048] In this embodiment, the corresponding structural design of the distributed security verification layer and the distributed function verification layer and the continuous node network to be verified ensures the comprehensiveness and scalability of verification. Specifically, the distributed security verification layer and the distributed function verification layer and the node subnet to be verified adopt a corresponding structural design, and the functional attack verification nodes can be increased in real time with the increase of the functional sub-nodes to be verified and maintain a one-to-one correspondence. This design not only ensures comprehensive verification coverage of each node and connection relationship in the network system, avoiding verification blind spots, but also can be flexibly expanded when the system scale is expanded or the function is expanded, continuously meet the verification needs, and improve the adaptability and scalability of the system.

[0049] In this embodiment, the configuration of the distributed synchronous verification and evaluation control model and the collaborative work of its sub-models greatly enhance the effectiveness of the verification process and the risk response capability of the system. The distributed control sub-model ensures the synchronization of the safety and functional verification nodes and realizes the sharing of attack parameters of high-risk nodes, so that subsequent nodes can perceive potential risks in advance and make preparations for prevention, thereby promoting collaborative defense among various parts of the system. The distributed evaluation parameter sub-model can quantitatively evaluate the parameters of nodes and sub-nodes, clarify the danger level and effectiveness score, and provide a scientific and objective basis for judging the effectiveness of system parameters. The differential backward sharing sub-model intelligently judges the sharing of attack type parameters, avoids resource waste and repeated verification, improves verification efficiency, and enables the system to respond to various attack situations more quickly and accurately.

[0050] The corresponding forward verification and backward sharing in this embodiment are combined to enhance the stability of the system. Specifically, the verification method combines the forward verification attack with the backward attack type parameter sharing. While performing validity checks on each node one by one, the attack type information of the previous node can be shared with subsequent nodes in a timely manner. This enables subsequent nodes to take targeted measures in advance when facing the same or similar attacks, thereby enhancing the overall defense capability and stability of the system, effectively avoiding the collapse or failure of the entire system due to the vulnerability of some nodes, and ensuring the reliable operation of complex network systems.

[0051] In the verification process of this embodiment, by setting clear validity evaluation thresholds and failure judgment rules, it is possible to accurately determine whether the complex network system parameters to be verified and updated are valid. If it is found that the validity evaluation score of a node or sub-node exceeds the threshold, the parameter is promptly determined to be invalid, preventing parameters with security risks or functional defects from entering the system, thereby ensuring the security and reliability of the system update process and providing a strong guarantee for the continuous and stable operation of the system.

[0052] In order to better illustrate the above complex system verification process, this embodiment takes the power industry as an example to decompose the specific instance verification process, and the steps include: 1. System hierarchical construction and parameter decomposition: Target system: A regional smart grid system, including 1 regional control center, 5 substations (substations 1 to 5), each substation is equipped with 20 FTUs (feeder terminal units), 100 smart meters, and 5 photovoltaic inverter control units.

[0053] Steps to achieve: 1.1. Constructing a hierarchical verification network includes: Distributed security verification layer: includes 6 security attack verification nodes (regional control center + 5 substations), and the structure is consistent with the physical power grid.

[0054] Distributed functional verification layer: Each security verification node corresponds to a functional verification subnet. For example, the functional verification subnet of substation 1 contains 20 FTU nodes, 100 smart meter nodes, and 5 photovoltaic inverter nodes.

[0055] 1.2. Decomposition of key control points includes: Level 1 nodes (i.e., level 1 continuous nodes to be verified): regional control center, substations 1 to 5, constitute a level 1 continuous node subnet to be verified, and the data transmission direction is regional control center → substation 1 → substation 2 → ... → substation 5.

[0056] Secondary subnode (i.e., functional subnode to be verified): The FTU, smart meter, and photovoltaic inverter under each substation constitute a secondary functional subnet to be verified. The same type of equipment under the same substation (such as all FTUs) is clustered into one category through an adaptive clustering algorithm, marked as "substation 1-FTU cluster".

[0057] 1.3. Resource reservation and scalability design: Use support vector machines (trained based on historical data) to predict resource requirements: reserve 5% computing resources (for future additions of PV inverters) and 10MB of memory / 2 CPU cores (for equipment expansion) for each substation.

[0058] Example: Substation 1 currently has 5 PV inverters, and reserved resources can support the addition of 1 inverter in the future.

[0059] 2. Forward attack verification package configuration includes: 2.1 Attack scenario design: Security attack verification sub-package (distributed security verification layer): Man-in-the-middle attack: Simulates an attacker to intercept the communication between the regional control center and substation 1 and attempts to crack the AES-256 encryption protocol.

[0060] Unauthorized access: Test the operator authority classification and simulate a low-authority user trying to modify the protection settings of substation 1.

[0061] Functional attack verification sub-package (distributed functional verification layer): Network congestion attack: Inject high-traffic data into the FTU node of substation 1 to test its delay tolerance (whether it responds within 50ms).

[0062] Sudden increase in photovoltaic power generation: simulates a sudden increase in photovoltaic output from 0% to 100%, and tests whether the inverter control unit can control the voltage fluctuation within ±5% within 1 second.

[0063] Parameter tampering attack: Tamper with the safety voltage threshold of the smart meter (from 36V to 72V) to verify whether the control system can detect and alarm.

[0064] 3. The steps of synchronous attack verification and dynamic sharing include: 3.1. Verification process: Initial attack (regional control center): Security verification: Initiate a man-in-the-middle attack. If AES-256 is not cracked and the permission classification is effective, the security assessment score (e.g. 80 points) is lower than the high-risk threshold (90 points).

[0065] Functional verification: simulate the regional control center to send high-frequency instructions to substation 1 to test its load balancing ability. If the CPU usage rate is ≤70%, the functional evaluation score (such as 85 points) is valid.

[0066] Parameter sharing and subsequent attacks: Backward sharing: After verification by the regional control center, the attack type (such as man-in-the-middle attack mode) is shared to the security verification node of substation 1.

[0067] Chain attack: The security verification node of substation 1 launches the same attack on itself and its connection with substation 2, while its functional verification subnet simulates FTU congestion and inverter surge attacks.

[0068] Dynamic Extended Validation: New equipment test: Mount the sixth PV inverter in the reserved resources to simulate whether the system can automatically allocate resources and maintain voltage stability when it is connected to the grid.

[0069] Cross-site attack: If the smart meter at substation 3 is tampered with, the attack parameters are synchronized to the same type of meter nodes at substations 4 and 5 through the differential backward sharing model to verify the immunity of the entire link.

[0070] Through the above exemplary verification process, it can be seen that the complex network system verification method, in terms of hierarchical targeted verification, realizes the decoupling of security and function, independently verifies the encryption strength and equipment performance, avoids test blind spots, and designs the verification network for the hierarchical structure of power industry substations to adapt to the physical topology of the power grid; in terms of dynamic resource reservation and expansion, it supports the evolution of smart grids, realizes uninterrupted expansion of the system by reserving resources, and uses support vector machines based on historical records for training, and the data-driven prediction accuracy is much higher than the traditional empirical reservation method; the intelligent sharing of attack parameters is reflected in the rapid spread of high-risk attacks. For example, when the smart meter is tampered and evaluated as high-risk, the parameters are automatically shared, and the rapid verification of similar devices in the entire network is realized, which takes only 1 / 5 of the time of testing one by one, and differential backward sharing is used to avoid repeated testing; the synchronous evaluation model improves real-time performance, and realizes multi-link coverage, which can discover cross-site data transmission vulnerabilities; in addition, this method also supports real-time verification of system updates; and successfully supports the grid-connected transformation of wind farms, and the reserved resource verification identifies risks in advance to avoid downtime after going online.

[0071] Example 2 See also Figure 2 ,Another embodiment provided by the present invention: A dynamic verification system for the security and effectiveness of a complex network system, comprising: a verification network module, a parameter parsing module, and an attack verification module; The verification network module configures a hierarchical distributed effective verification network based on complex network system properties, wherein the hierarchical distributed effective verification network includes a distributed security verification layer and a distributed function verification layer; The parameter parsing module is used to obtain the complex network system parameters to be verified and updated, and obtain the continuous node network to be verified and the first security parameter set to be verified and the first function parameter set to be verified corresponding to each node through the built-in verification decomposition model.

[0072] The attack verification module includes an attack construction unit and an attack verification unit; The attack construction unit constructs a forward attack verification package corresponding to each node to be verified based on the first security parameter to be verified and the first function parameter to be verified corresponding to two consecutive nodes in the continuous node network to be verified and the connection relationship attribute, and builds the package into the hierarchical distributed effective verification network; The attack verification unit uses the hierarchical distributed effective verification network to perform a forward verification attack on any node in the continuous node network to be verified and the corresponding data transmission chain, and determines whether the first security parameter to be verified and the first function parameter to be verified corresponding to each attacked node are valid; if valid, continue to verify and share the attack type corresponding to the previous node in the continuous node network to be verified backward until the verification of all nodes to be verified is completed; if invalid, the updated complex network system parameters to be verified are invalid.

[0073] The embodiments of the present invention are described above in conjunction with the accompanying drawings, but the present invention is not limited to the above-mentioned specific implementation modes, which are merely illustrative rather than restrictive. Under the guidance of the present invention, ordinary technicians in the field may also change, modify, replace and modify the above-mentioned embodiments without departing from the scope of protection of the purpose of the present invention and the claims, and all of these are within the protection of the present invention.

[0074] If the disclosed technical solution involves personal information, the product using the disclosed technical solution has clearly informed the personal information processing rules and obtained the individual's voluntary consent before processing the personal information. If the disclosed technical solution involves sensitive personal information, the product using the disclosed technical solution has obtained the individual's separate consent before processing the sensitive personal information, and at the same time meets the "explicit consent" requirement. For example, on personal information collection devices such as cameras, clear and prominent signs are set to inform that the personal information collection scope has been entered and personal information will be collected. If the individual voluntarily enters the collection scope, it is deemed that he or she agrees to the collection of his or her personal information; or on the device that processes personal information, when the personal information processing rules are notified by obvious signs / information, the individual's authorization is obtained through pop-up information or by asking the individual to upload his or her personal information; among them, the personal information processing rules may include information such as the personal information processor, the purpose of personal information processing, the processing method, and the type of personal information processed.

Claims

1. A dynamic verification method for the security effectiveness of complex network systems, characterized by: include: Configuring a hierarchical distributed effective verification network based on complex network system properties, wherein the hierarchical distributed effective verification network includes a distributed security verification layer and a distributed function verification layer; Obtain the updated complex network system parameters to be verified, and obtain the continuous node network to be verified and the first security parameter set to be verified and the first function parameter set to be verified corresponding to each node through the built-in verification decomposition model; Based on the first security parameter to be verified and the first function parameter to be verified corresponding to two consecutive nodes in the continuous node network to be verified and the connection relationship attribute, a forward attack verification package corresponding to each node to be verified is constructed and built into the hierarchical distributed effective verification network; Using the hierarchical distributed effective verification network, a forward verification attack is performed on any node in the continuous node network to be verified and the corresponding data transmission chain, and determining whether the first security parameter to be verified and the first function parameter to be verified corresponding to each attacked node are valid; If valid, the verification will continue and the attack type corresponding to the previous node in the continuous node network to be verified will be shared backward until the verification of all nodes to be verified is completed. If invalid, the complex network system parameters to be verified will be invalid.

2. The dynamic verification method for security effectiveness of complex network systems according to claim 1, characterized in that: The distributed security verification layer and the distributed function verification layer have the same corresponding distribution structure; The number of security attack verification nodes in the distributed security verification layer and the number of nodes to be verified in the first-level continuous node to be verified subnet in the continuous node to be verified network are the same and correspond one to one; The number of the function attack verification nodes in the distributed function verification layer and the number of the function sub-nodes to be verified in the secondary functional sub-network to be verified in the continuous node network to be verified are the same and correspond one to one; Each of the nodes to be verified includes M Function sub-nodes to be verified; The distributed security verification layer is used to perform attack verification on the data encryption strength and access control process corresponding to each node to be verified and the connection relationship between nodes in the continuous node network to be verified; The distributed function verification layer is used to perform attack verification on the delay tolerance, load balancing, and node control standard parameters corresponding to each function sub-node to be verified and the connection relationship between the sub-nodes in the secondary functional sub-network to be verified.

3. The dynamic verification method for security effectiveness of complex network systems as claimed in claim 2, characterized in that: The steps of constructing the continuous network of nodes to be verified include: Update the complex network system parameters to be verified, obtain the information of each key function control point in the complex network system and the data transmission relationship information between the key function control points; Each of the key function control points corresponds one-to-one to a node to be verified in the first-level continuous node subnet to be verified; According to the information of each key function control point, secondary decomposition is performed to obtain the sub-function control point set corresponding to each key function control point and the data transmission relationship within the sub-function control point set and the data transmission relationship between the key function control points and the corresponding sub-function control point sets; According to the sub-function control point set corresponding to each key function control point, the data transmission relationship within the sub-function control point set, and the data transmission relationship between the sub-function control point sets corresponding to the key function control points, clustering is performed through an adaptive clustering algorithm to obtain the sub-function control point set with the same function and mark the key function control point labels.

4. The dynamic verification method for security effectiveness of complex network systems as claimed in claim 3 is characterized in that: The step of constructing the continuous node network to be verified also includes: According to the number of key function control points and the data transmission relationship information between the key function control points, a first-level continuous node subnet to be verified is constructed through a topology algorithm, and the data transmission direction is marked on the connection relationship between the nodes in the first-level continuous node subnet to be verified; According to the information of each key function control point in the first-level continuous node subnet to be verified, the scalable function information of each key function control point and the corresponding required resources and memory are obtained through the function requirement analysis model; According to the expandable function information and the corresponding required resources and memory of each corresponding key function control point, the corresponding required resources and memory are reserved. When the system is updated, the lower-level sub-function control points are mounted and the resources and memory are allocated at each corresponding key function control point according to the update requirements and the reserved required resources and memory.

5. The dynamic verification method for security effectiveness of complex network systems as claimed in claim 4, characterized in that: The step of constructing the continuous node network to be verified also includes: According to the sub-function control point set corresponding to each key function control point and the data transmission relationship within the sub-function control point set, the second-level regional functional subnet to be verified corresponding to the function sub-node set to be verified under each first-level continuous node to be verified is obtained; Constructing a directed connection relationship set between corresponding function sub-nodes to be verified between all the secondary regional functional sub-networks to be verified according to the data transmission relationship between the corresponding sub-function control point sets between the key function control points; Based on the directed connection relationship set and all the secondary regional functional subnets to be verified, a secondary functional subnet to be verified is obtained.

6. The dynamic verification method for security effectiveness of complex network systems as claimed in claim 5, characterized in that: The forward attack verification package corresponding to each node to be verified consists of a security attack verification sub-package and a functional attack verification sub-package; The steps of constructing the distributed security verification layer and the distributed function verification layer include: Based on the number and connection relationship of the nodes to be verified in the first-level continuous node subnet to be verified, a distributed security verification node subnet with the same structure is constructed; Based on the direction of data transmission in the first-level continuous node subnet to be verified, construct an initial security attack verification node, and configure the security attack verification sub-package into the initial security attack verification node; Based on the secondary functional subnet to be verified and the corresponding data transmission direction, a distributed function verification subnet is constructed and the order of verification of each node in the distributed function verification subnet is marked according to the data transmission direction; At the same time, according to the order of verification of each node in the distributed function verification subnet, the functional attack verification sub-package is configured to each functional attack verification node in the initial area functional attack verification subnet in the distributed function verification subnet; The distributed function verification subnet is composed of a regional function attack verification subnet, and the regional function attack verification subnet has the same structure and number of nodes as the secondary regional functional subnet to be verified; A distributed synchronous verification and evaluation control model is configured, and the distributed synchronous verification and evaluation control model is built into the distributed security verification node subnet, distributed function verification subnet and continuous node network to be verified, and synchronous verification and evaluation control is performed to obtain verification and evaluation results corresponding to the continuous node network to be verified.

7. The dynamic verification method for security effectiveness of complex network systems according to claim 6, characterized in that: The distributed synchronous verification and evaluation control model includes a distributed pass control sub-model, a distributed evaluation parameter sub-model and a differential backward sharing sub-model; The distributed control sub-model is used to control the synchronization of the corresponding security attack verification nodes and functional attack verification nodes in the distributed security verification layer and the distributed functional verification layer, and share the security attack parameter of the security attack verification sub-package of the security attack verification node corresponding to the high-risk node to be verified with the next security attack verification node according to the direction of the connection relationship in the distributed security verification node subnet; The high-risk node to be verified is obtained by combining the distributed evaluation parameter sub-model with the preset risk assessment interval level according to the first security parameter to be verified and the first function parameter to be verified corresponding to each synchronously attacked node to be verified and the corresponding M function sub-nodes to be verified; At the same time, the effective attack parameters of the function attack verification node corresponding to the high-risk function sub-node to be verified are shared with the next function attack verification node corresponding to the direction of the connection relationship in the distributed function verification subnet and the sub-function control point set with the same function obtained according to the clustering algorithm.

8. The dynamic verification method for security effectiveness of complex network systems as claimed in claim 7, characterized in that: The distributed evaluation parameter sub-model is used to evaluate the first security parameter to be verified and the first function parameter to be verified of each synchronously attacked node to be verified and the corresponding M function sub-nodes to be verified, and combine the preset risk assessment interval level to obtain the attack risk score of the node to be verified and the corresponding M function sub-nodes to be verified and the corresponding risk level and effectiveness assessment score; The differential backward sharing sub-model performs sharing judgment backward toward the nodes to be verified and the functional sub-nodes to be verified in the same data transmission chain according to the direction of the connection relationship in the continuous node network to be verified and the attack type parameters of the currently attacked nodes to be verified and the functional sub-nodes to be verified. If the corresponding nodes to be verified or the functional sub-nodes to be verified contain the same attack type parameters, they are not shared; if not, the attack type parameters are shared.

9. The dynamic verification method for security effectiveness of complex network systems as claimed in claim 8, characterized in that: The step of performing synchronous verification and evaluation control to obtain verification and evaluation results corresponding to the continuous node network to be verified includes: Attacking the initial node to be verified in the continuous node to be verified network and the directed connection relationship between the initial node to be verified and the second node to be verified according to the initial security attack verification node; At the same time, the initial regional functional attack verification subnet corresponding to the initial security attack verification node is controlled by the distributed control submodel to attack the initial secondary regional functional subnet to be verified and the directed connection relationship between the initial secondary regional functional subnet to be verified and the second secondary regional functional subnet to be verified; The initial secondary regional functional subnet to be verified corresponds to the initial node to be verified; Obtain the first security parameters to be verified and the first functional parameters to be verified after the initial nodes to be verified and the corresponding connection relationships and the initial secondary regional functional subnets to be verified and the corresponding directed connection relationships are attacked, and label the corresponding nodes to be verified and the functional subnodes to be verified, so as to construct an initial attack parameter set; The constructed initial attack parameter set is input into the distributed evaluation parameter sub-model to evaluate the initial node to be verified and each functional sub-node to be verified in the initial secondary area functional sub-network to be verified, so as to obtain the corresponding danger level and effectiveness evaluation score of the initial node to be verified and each functional sub-node to be verified in the initial secondary area functional sub-network to be verified.

10. The dynamic verification method for security effectiveness of complex network systems according to claim 9, characterized in that: The step of performing synchronous verification and evaluation control to obtain verification and evaluation results corresponding to the continuous node network to be verified also includes: The validity assessment threshold is constructed with the score value corresponding to the lower limit of the high-risk level interval within the preset risk assessment interval. If the validity assessment score corresponding to the initial node to be verified or any functional sub-node to be verified in the initial secondary regional functional sub-network to be verified is greater than or equal to the validity assessment threshold, the update of the complex network system parameters to be verified is determined to be invalid; If the validity evaluation scores corresponding to the initial node to be verified and all the functional sub-nodes to be verified in the initial secondary regional functional sub-network to be verified are less than the validity evaluation threshold, then the initial node to be verified and all the functional sub-nodes to be verified in the corresponding initial secondary regional functional sub-network to be verified are determined to be valid; When it is determined that the initial node to be verified and all the functional sub-nodes to be verified in the corresponding initial secondary regional functional sub-network to be verified are valid, the attack parameters are backward shared and propagated according to the danger levels corresponding to the initial node to be verified and all the functional sub-nodes to be verified in the corresponding initial secondary regional functional sub-network to be verified.

11. The dynamic verification method for security effectiveness of complex network systems according to claim 10, characterized in that: The step of performing synchronous verification and evaluation control to obtain verification and evaluation results corresponding to the continuous node network to be verified also includes: If the initial node to be verified is of high risk level or any of the functional sub-nodes to be verified in the corresponding initial secondary regional functional sub-network to be verified is of high risk level, the security attack verification sub-package corresponding to the initial security attack verification node is shared with the next security attack verification node through the distributed control sub-model according to the direction of the connection relationship in the distributed security verification node sub-network; At the same time, the functional attack verification sub-package in the functional attack verification node corresponding to the high-risk functional sub-node to be verified in the initial secondary regional functional to-be-verified sub-network is shared according to the clustering algorithm with the obtained sub-function control point set with the same function and the next functional attack verification node in the direction of the connection relationship corresponding to the current functional attack verification node in the distributed functional verification sub-network; If the initial node to be verified and any of the functional sub-nodes to be verified in the corresponding initial secondary regional functional sub-network to be verified are not of high risk level, the backward attack verification sub-package sharing will not be performed on the security attack verification node and the functional attack verification node; At the same time, the attack type parameters corresponding to the initial node to be verified and all the functional sub-nodes to be verified in the corresponding initial secondary regional functional sub-network to be verified are shared backwards according to the connection relationship direction corresponding to the data transmission in the continuous node to be verified network through the differential backward sharing sub-model.

12. The dynamic verification method for security effectiveness of complex network systems according to claim 11, characterized in that: The step of performing synchronous verification and evaluation control to obtain verification and evaluation results corresponding to the continuous node network to be verified also includes: Repeat the attack process of the initial node to be verified and all the functional sub-nodes to be verified in the corresponding initial secondary regional functional sub-network to be verified according to the connection relationship direction corresponding to the data transmission in the continuous node to be verified network, and attack each subsequent node to be verified in the continuous node to be verified network and all the functional sub-nodes to be verified in the corresponding secondary regional functional sub-network to be verified; At the same time, according to the security attack verification nodes and regional functional attack verification subnets corresponding to each node to be verified and the corresponding secondary regional functional subnet to be verified, a forward verification attack is performed on the verification nodes and corresponding connection relationships in the forward sequence on the data transmission chain where the current node to be verified and the corresponding secondary regional functional subnet to be verified are located, and the functional subnodes to be verified and the corresponding connection relationships in the corresponding secondary regional functional subnet to be verified; Determine the danger level and effectiveness evaluation score of each of the above-mentioned nodes to be verified and the corresponding secondary regional functional subnet to be verified after being attacked. If the effectiveness evaluation score corresponding to the corresponding node to be verified and the corresponding secondary regional functional subnet to be verified is greater than or equal to the effectiveness evaluation threshold, then determine that the update of the complex network system parameters to be verified is invalid; Otherwise, verification continues and the attack type parameters corresponding to each node to be verified and all the functional sub-nodes to be verified in the corresponding secondary regional functional sub-node to be verified are shared backward according to the connection relationship direction corresponding to the data transmission in the continuous node network to be verified until the verification of all nodes to be verified is completed.

13. A dynamic verification system for the security effectiveness of a complex network system, which is used to implement the dynamic verification method for the security effectiveness of a complex network system as claimed in any one of claims 1 to 12, characterized in that: include: Verify network module, parameter parsing module, and attack verification module; The verification network module configures a hierarchical distributed effective verification network based on complex network system properties, wherein the hierarchical distributed effective verification network includes a distributed security verification layer and a distributed function verification layer; The parameter parsing module is used to obtain the parameters of the complex network system to be verified and updated, and obtain the continuous node network to be verified and the first security parameter set to be verified and the first function parameter set to be verified corresponding to each node through the built-in verification decomposition model; The attack verification module includes an attack construction unit and an attack verification unit; The attack construction unit constructs a forward attack verification package corresponding to each node to be verified based on the first security parameter to be verified and the first function parameter to be verified corresponding to two consecutive nodes in the continuous node network to be verified and the connection relationship attribute, and builds the package into the hierarchical distributed effective verification network; The attack verification unit uses the hierarchical distributed effective verification network to perform a forward verification attack on any node in the continuous node network to be verified and the corresponding data transmission chain, and determines whether the first security parameter to be verified and the first function parameter to be verified corresponding to each attacked node are valid; if valid, continue to verify and share the attack type corresponding to the previous node in the continuous node network to be verified backward until the verification of all nodes to be verified is completed; if invalid, the updated complex network system parameters to be verified are invalid.

Images