电力物联网终端安全防护研究综述

Review on Security of Power Internet of Things Terminals

随着传感器的微型化和网络化,物联网技术在电力系统的应用得到了飞速发展。分散分布的配用电物联网终端数量庞大而又广泛互联,跳脱了传统边界安全的保护范畴,使得物联网终端成为攻击电网的重要目标和跳板。围绕电力物联网终端的安全防护展开研究,首先结合电力物联网的架构,从软硬件、通信等方面归纳了终端面临的安全挑战,总结了终端威胁特征,分析了为应对终端威胁部署的防护机制并指出了其不足;然后根据现有防护漏洞具体分析终端安全问题,重点综述了电力物联网终端的加密认证问题、数据隐私安全、时间同步攻击、非法无线通信链路风险和230 MHz无线专网通信阻塞攻击及其相应防护研究;最后综述和展望了深度学习等新一代人工智能技术在物联网终端安防中的应用。

With the advancement of sensing technology and the miniaturization of sensors,the Internet of Things(IoT)technology has been rapidly developed in the power system.Due to the large number,extensive interconnection,and decentralized distribution of the power distribution IoT terminals,they have jumped out of the scope of border security protection,which has caused the terminals to become the main target and springboard for attacking the power grid.Firstly,combined with the power IoT architecture,the terminal security challenges are summarized from the aspects of software,hardware,communication,etc.,the terminal risk characteristics are further summarized,and the protection mechanism deployed to deal with the terminal risk is analyzed and its shortcomings are presented.Then,according to the existing protection vulnerabilities,the terminal security issues are analyzed,the encryption and authentication issues,data privacy security,time synchronization attack,malicious base station attack are focused on,and the communication block attack of 230 MHz power IoT terminal and their corresponding protection research are reviewed.Finally,the applications of new generation AI technologies such as deep learning in the security of IoT terminals are reviewed and prospected.