基于TLS的变电站通信网络安全攻防策略生成方法

Generation method of substation communication network security attack and defense strategy based on TLS

针对变电站通信网络受到攻击时,安全攻防策略生成时间较长、持续性较差的问题,为满足变电站通信网络安全需求,基于TLS研究变电站通信网络安全攻防策略生成方法。为了保障变电站通信网络中数据传输的安全性与完整性,设计符合变电站高实时性的安全传输层协议(TLS),以此为基础,分析变电站通信网络安全攻防竞争过程,构建攻防概率模型,以构建模型为依据模拟攻防双方的竞争过程,求解不同状态下攻防双方的最佳策略,从而实现了变电站通信网络安全攻防策略的生成。实验结果显示:在不同的攻击行为下,与对比方法相比较,提出方法的防御策略生成时间更短在1.545 7 s以下、有效时间更长最高达28.43 s,安全攻防行为判断准确性在93.8%以上,充分验证了提出方法具备可行性。

Aiming at the problem that the generation time of security attack and defense strategy is long and the persistence is poor when substation communication network is attacked, in order to meet the security requirements of substation communication network, the generation method of substation communication network security attack and defense strategy based on TLS is studied.In order to ensure the security and integrity of data transmission in substation communication network, a high real-time secure transport layer protocol(TLS) is designed.Based on this, the process of security attack and defense competition in substation communication network is analyzed, and construct the attack and defense probability model, Based on the model, the competition process of both sides is simulated, The optimal strategies of attack and defense parties in different states are solved, and the generation of security attack and defense strategies of substation communication network is realized.The experimental results show that: under different attack behaviors, compared with the comparison method, the generation time of the proposed method is shorter than that of the contrast method, and the effective time is longer, up to 28.43 s.The accuracy of the security attack and defense behavior judgment is more than 93.8%,which fully verifies the feasibility of the proposed method.