基于未知威胁感知的电网内外网边界信息安全监测

Information Security Monitoring of Internal and External Network Boundaries Based on Unknown Threat Perception

传统电网信息安全监测方法在传递数据时无法准确计算阈值区间,存在检测率较低,信息安全性差等问题。为提高电网系统的信息安全性,提出一种基于未知威胁感知技术设计电网内外网边界信息安全监测方法。通过确定电网内外网边界信息差异损失,估计电网内外网数据状态,获得相对独立状态的假设性检验函数;基于未知威胁感知计算电网数据传递阈值,获取各节点中阈值的安全性分析与开关范围;构建内外网信息安全监测算法,获取数据的对角矩阵,以此得到可以面向多种攻击模式的电网信息安全监测方法。实验结果表明,在四种不同的攻击模式下,该信息安全监测方法的最大检测率均高于0.98,其他三种信息安全监测方法的最大检测率均小于该方法,因此可知基于未知威胁感知技术的电网信息安全监测方法优于其他算法。

Traditional power grid information security monitoring methods can not accurately calculate the threshold interval when transmitting data,which has some problems,such as low detection rate and poor information security.In order to improve the information security of power grid system,an information security monitoring method based on unknown threat perception technology is proposed.By determining the information difference loss between the internal and external network boundaries,to estimate the data state of the internal and external network,and obtain the hypothesis test function of the relatively independent state;to caculate the power grid data transmission threshold based on unknown threat perception,and obtain the security analysis and switching range of the threshold in each node;the internal and external network information security monitoring algorithm is constructed to obtain the diagonal matrix of data,so as to obtain the power grid information security monitoring method which can face multiple attack modes.The experimental results show that under four different attack modes,the maximum detection rate of the information security monitoring method is higher than 0.98,and the maximum detection rate of the other three information security monitoring methods is lower than this method.Therefore,it can be seen that the power grid information security monitoring method based on unknown threat perception technology is better than other algorithms.