电力网络空间测绘与渗透技术研究

Research on Power Cyberspace Surveying and Penetration

针对现有网络资产探测与网络安全渗透存在盲区、噪声及最新通用漏洞风险感知不及时的电力信息安全问题,文章面向电力信息的网络空间,架构了一套基于漏洞风险匹配识别的网络空间测绘与渗透测试系统。详细阐述了网络资产指纹识别的测绘过程,应用漏洞风险匹配识别和自动化渗透测试队列生成基于漏洞风险匹配识别的网络资产安全态势指引,达到提升安全感知精准度的目标。利用素数域原根分片处理并行优化,解决了电力信息资产全网段扫描的时效性与噪声问题。

In view of the power information security problems such as the blind area,noise and the delay of the latest general vulnerability risk perception in the existing network asset detection and network security penetration,this paper constructs a set of cyberspace surveying and penetration test system based on vulnerability risk matching identification.The surveying process of fingerprint identification of network assets is described in detail,and the timeliness and noise problems of the whole network segment scanning of power information assets are solved by using the parallel optimization of prime number domain original root processing.Vulnerability risk matching identification and automated penetration test queue are used to generate security situation guidance of network assets based on vulnerability risk matching identification to improve the accuracy of security perception.