DTU与主站通信系统的DoS攻击研究

Research on DoS attack to the communication system between DTU and master station

配电自动化系统主要由配电主站、配电子站以及配电终端设备组成。终端设备与主站的工作状态关系到配电自动化系统能否正常运行。为了研究配电自动化系统的通信安全,搭建了基于传输控制协议(TCP)进行数据传输的站所终端单元(DTU)与主站的通信系统,运用拒绝服务(DoS)攻击手段对该系统进行攻击,验证了系统存在的安全威胁,为增强该通信系统的防DoS攻击能力,提出了基于白名单的防护策略。

A distribution automation system is mainly composed of a distribution master station,distribution substations and distribution terminals.The working status of the terminals and the master station will influence the stable operation of the whole system.In order to keep the communication security of the system,a communication system was built between the DTU(Data Transfer Unit)and the master station based on TCP protocol.DoS attacks were made to the system to verifies the existence of security threats.In order to enhance the anti-DoS attack capability of the communication system,a whitelistbased protection strategy is proposed.