Method and device for intrusion detection of power information system based on multi-dimensional situation

By constructing a multi-dimensional intrusion detection method for power information systems, and utilizing Transformer and graph neural network encoders, the problem of insufficient multimodal data fusion in power grid information security is solved, achieving high-precision detection of complex attacks and identification of low-frequency attacks.

CN122419955APending Publication Date: 2026-07-17CENT CHINA BRANCH OF STATE GRID CORP OF CHINA +1
View PDF 0 Cites 0 Cited by

Patent Information

Application Number
CN202610754375.X
Authority / Receiving Office
CN · China
Patent Type
Applications(China)
Current Assignee / Owner
Filing Date
2026-05-28
Publication Date
2026-07-17

AI Technical Summary

Technical Problem

In existing technologies, power grid information security detection methods rely on a single data source, making it difficult to detect complex attack behaviors. Furthermore, the lack of feature interaction modeling during multimodal data fusion leads to a high false negative rate, making it difficult to cope with the complex and ever-changing security threat situation of the power grid.

Method used

A multi-dimensional situational intrusion detection method for power information systems is constructed. Through multi-source data preprocessing and feature extraction, a dedicated encoder is built using Transformer and graph neural network to encode network behavior, system operating status and security device context features, respectively. Feature recalibration and dimensionality reduction are performed through a fusion network, and the model is trained by combining weighted cross-entropy loss.

Benefits of technology

It achieves high-precision detection of complex attacks on the power grid, improves the ability to fuse multimodal information, reduces the risk of overfitting, increases the detection rate of low-frequency attacks, and supports online updates and integration into existing power grid monitoring platforms.

✦ Generated by Eureka AI based on patent content.

Smart Images

  • Figure CN122419955A_ABST
    Figure CN122419955A_ABST
Patent Text Reader

Abstract

本发明公开了一种基于多维态势的电力信息系统的入侵检测方法及装置,属于电网监测领域,包括:将采集的电网多源数据输入至电网入侵预测模型,进行入侵报警,获取报警结果,其中电网入侵预测模型通过下述方式获取:获取电网多源数据集;对多源数据集进行处理得到标准化后的样本集;基于样本集,提取空间拓扑特征、网络行为特征、系统运行状态特征和安全设备上下文特征,构成四维表示特征;将各特征拼接后获取融合特征,将融合特征输入至分类网络,得到各类别的预测概率;通过计算预测概率与真实标签之间的加权交叉熵损失,更新网络参数,迭代训练至模型收敛,获取训练好的电网入侵预测模型。本发明通过多特征交互建模,提升电网入侵检测效果。
Need to check novelty before this filing date? Find Prior Art