电网信息物理安全风险及安全认证算法研究

Research on cyber-physical security risks and security authentication algorithms for the power grid

随着电网中智能通信、计算与控制设施的广泛部署,电力系统引入了新的信息安全风险。为防止网络攻击对电网造成成体系的风险与破坏,文中提出了基于语义分析的安全防护算法。针对终端和终端之间的信息交互,提出了考虑时间有效性的随机子集哈希算法身份认证算法,能够分析电网信息网物理空间相互耦合、相互关联的特征,对监测信息和控制指令进行一致性和合理性检测。基于实际电网网络安全算例分析了该算法在抗暴力破解、字典攻击、拒绝服务等攻击形式的性能,验证了该算法在保障电网CPS网络安全中的有效性。

With the widespread deployment of intelligent communication,computing and control facilities in power grids,new cyber-security risks have been introduced in power systems.To prevent cyber-attacks from causing systematic risks and damages to the power grid,this paper proposes a security protection algorithm based on semantic analysis.For the information interaction between terminals,a random subset hash algorithm authentication algorithm considering temporal validity is proposed,which can analyze the characteristics of mutual coupling and interconnection in the physical space of grid information network,and detect the consistency and rationality of monitoring information and control instructions.The performance of the algorithm in resisting brute force cracking,dictionary attack,denial of service and other forms of attacks is analyzed based on actual grid network security calculations,and the effectiveness of the algorithm in securing the grid CPS network is verified.