基于关联矩阵的面向对象网络攻击建模方法研究与实现

Research and Implementation of Correlation Matrix Based Object-oriented Modelling Method for the Cyber-attack

随着智能电网、能源互联网建设,通信和信息系统与电力系统的耦合将更加紧密,而对通信和信息系统的网络攻击行为将对电网造成严重威胁。文章设计了一种基于关联矩阵面向对象的攻击建模方法,可以描述并分析网络攻击的过程、路径及被攻击的通信和信息系统。首先基于面向对象方法对攻击行为的特征和过程进行建模,然后通过关联矩阵对整个通信信息系统的拓扑进行建模,再通过相似方法对攻击的步骤和路径进行建模,从而建立完整的网络攻击模型。最后应用该方法建立重放攻击方式攻击自动电压控制(Automation Voltage Control,AVC)系统的网络攻击模型,并基于该模型分析了攻击结果,攻击结果证明该建模方法的可行性较高且适用于工程应用。

With the development of the smart grid and Energy Internet,communication,information system and the infrastructure of power system combines together to become a coupled system.Thus,the cyberattack on the communication and information system may cause serious threat on the power system.So,in this paper,a correlation matrix based object-oriented method is proposed for modeling cyber-attack.By this method,the cyber-attack model can be built with attack procedure,attack path,and the communication and information system.First,the procedure and features of the cyber-attack is modeled with object-oriented method.Next,the topology of the whole communication information system is modeled by correlation matrix.Then the steps and paths of attack are modeled by similar method.By combining these models,the whole cyber-attack model is built.Finally,the network attack model of replay attack mode attack automatic voltage control(AVC)system is established,and the attack result is analyzed based on the model.The attack result proves that the modeling method is feasible and suitable for engineering application.