A power system causal verification attack tracing method and system

By constructing an attack attribution knowledge graph that deeply integrates the semantics of the power sector within the power system, and combining business rules and physical feasibility constraints, the problems of high false alarm rate and low physical reliability in existing technologies are solved, achieving high-precision attack attribution and effective defense strategy formulation.

CN122372343BActive Publication Date: 2026-08-25NARI INFORMATION & COMM TECH +2
4 Cites 0 Cited by

Patent Information

Application Number
CN202610829674.5
Authority / Receiving Office
CN · China
Patent Type
Patents(China)
Current Assignee / Owner
Filing Date
2026-06-10
Publication Date
2026-08-25
Estimated Expiration
2046-06-10

AI Technical Summary

Technical Problem

Existing power system attack tracing technologies suffer from high false alarm rates, low physical reliability, and poor practicality of results. In particular, they are difficult to accurately locate the source of attacks and reconstruct the attack propagation path when identifying complex and covert attacks.

Method used

A causal verification mechanism based on dual constraints of business rules and physical feasibility is adopted. By constructing an attack tracing knowledge graph that deeply integrates the semantics of the power field, the Do-Calculus algorithm is used for causal reasoning. Combining the constraints of power business rules and physical feasibility, attack causal chains that conform to power operation procedures and physical laws are selected.

Benefits of technology

It achieves high-precision attack attribution tracing, reduces false alarm rate, improves the ability to identify complex power-specific attacks, ensures the professional credibility and practicality of attribution results, provides clear attack propagation paths and causal logic, and guides effective defense measures.

✦ Generated by Eureka AI based on patent content.
Patent Text Reader

Abstract

The application provides a power system causal verification attack tracing method and system, and belongs to the technical field of power system network security. The method comprises the following steps: collecting power system multi-source data, standardizing the power system multi-source data, extracting entity-relation-attribute triples, performing data cleaning on the triples, and generating a triple data set; based on the triple data set, combining entities and business relationships between entities, constructing a power attack tracing knowledge graph; according to the device abnormal event, screening a candidate event set from the power attack tracing knowledge graph, constructing an attack causal graph based on the candidate event set, verifying the causal relationship between events, restoring the attack chain to locate the attack source. The application improves the physical credibility of the attack path, the recognition ability of the power scene special attack, the support value and practicality of the tracing result for the defense decision, reduces the misjudgment rate caused by accidental association, and improves the accuracy of attack chain and source location.
Need to check novelty before this filing date? Find Prior Art