工控运维中基于语义分析的智能电网控制攻击防御

doi:10.11930/j.issn.1004-9649.201904065

中国电力 ›› 2020, Vol. 53 ›› Issue (9): 214-220.DOI: 10.11930/j.issn.1004-9649.201904065

工控运维中基于语义分析的智能电网控制攻击防御

麻建中, 胡凯波, 於立峰

浙江浙能兰溪发电有限责任公司，浙江金华 321000

收稿日期:2019-04-14 修回日期:2019-08-02 发布日期:2020-09-09
作者简介:麻建中(1972—)，男，高级工程师，从事可移动式工控运维设备在电厂安全接入的应用研究，E-mail: mjzdada@163.com;胡凯波(1983—)，男，工程师，从事可移动式工控运维设备在电厂安全接入的应用研究;於立峰(1983—)，男，助理工程师，从事可移动式工控运维设备在电厂安全接入的应用研究
基金资助:
电子信息产业发展基金项目(2013ZJFDA1930)

Smart Grid Control Attack Defense Based on Semantic Analysis in Industrial Control Operation and Maintenance

MA Jianzhong, HU Kaibo, YU Lifeng

Zhejiang Zhenenglanxi Power Generation Co., Ltd., Jinhua 321000, China

Received:2019-04-14 Revised:2019-08-02 Published:2020-09-09
Supported by:
This work is supported by Electronic Information Industry Development Fund Project (No.2013ZJFDA1930).

摘要/Abstract

摘要： 为了降低控制相关攻击对智能电网的威胁，在数据采集与监视控制（supervisory control and data acquisition，SCADA）系统中，提出一种语义分析框架，利用智能电网的信息和物理工控设备，检测控制相关攻击。首先，对控制网络进行监控，识别控制命令，并从网络提取出与控制命令相关的语义和更新的测量值，并评估命令的物理后果；然后，采用自适应通用潮流分析算法，从控制命令提取出语义信息，并调整参数。在IEEE24节点、28节点和38节点系统以及一个2 730节点系统上进行实验，结果表明：与交流潮流相比，所提算法将24节点和38节点系统的检测延迟均降低了约50%，将2 730节点系统检测延迟降低了66%，平均漏警率为0.01%，最差情况下误警率为0.78%。

关键词: 智能电网, 数据采集与监视控制, 语义分析框架, 工控设备, 潮流分析

Abstract: To reduce the threat of control-related attacks on the smart grid, a semantic analysis framework is proposed in supervisory control and data acquisition (SCADA) system, in which the smart grid information and physical industrial control equipment are used to detect and defend against such attacks. Firstly, the control network is monitored to identify the control commands. Also the semantics and updated measurements related to the control commands are extracted from the network so as to evaluate the physical consequences of the commands. Then through the application of the general self-adaptive power flow analysis algorithm, the semantics information is extracted from the control commands to adjust the parameters. Case studies are carried out on the IEEE 24-node, 28-node and 38-node system and a 2 730-node system respectively. The results show that, compared with AC algorithm, the proposed algorithm reduces the detection delay of 24-node and 38-node systems by about 50% and that of 2 730-node systems by 66%. The average fault alarm rate is 0.01%, and the fault dismissal rate is 0.78% at the worst case.

Key words: smart grid, SCADA, semantic analysis framework, industrial control equipment, power flow analysis

麻建中, 胡凯波, 於立峰. 工控运维中基于语义分析的智能电网控制攻击防御[J]. 中国电力, 2020, 53(9): 214-220.

MA Jianzhong, HU Kaibo, YU Lifeng. Smart Grid Control Attack Defense Based on Semantic Analysis in Industrial Control Operation and Maintenance[J]. Electric Power, 2020, 53(9): 214-220.

导出引用管理器 EndNote|Ris|BibTeX

链接本文: https://www.electricpower.com.cn/CN/10.11930/j.issn.1004-9649.201904065

https://www.electricpower.com.cn/CN/Y2020/V53/I9/214

参考文献

[1] 胡月. 数据采集与监视控制系统在衡水电网的应用研究[D]. 北京: 华北电力大学, 2014.
HU Yue. Research on the application of Hengshui power grid dispatching automation SCADA system[D]. Beijing: North China Electric Power University, 2014.
[2] DOLK V S, TESI P, DE PERSIS C, et al. Event-triggered control systems under denial-of-service attacks[J]. IEEE Transactions on Control of Network Systems, 2017, 4(1): 93–105.
[3] 王轶楠, 林彦君, 李焕, 等. DoS攻击下电力网络控制系统脆弱性分析及防御[J]. 控制与决策, 2017, 32(3): 411–418
WANG Yinan, LIN Yanjun, LI Huan, et al. Vulnerability analysis and countermeasures of electrical network control systems under DoS attacks[J]. Control and Decision, 2017, 32(3): 411–418
[4] SAFA H H, SOURAN D M, GHASEMPOUR M, et al. Cyber security of smart grid and SCADA systems, threats and risks[C]//CIRED Workshop 2016, Helsinki, Finland. Institution of Engineering and Technology, 2016.
[5] 王小山, 石志强, 任建军, 等. 智能电网中实时电价的抗时延攻击策略[J]. 北京邮电大学学报, 2015, 38(B06): 116–120
WANG Xiaoshan, SHI Zhiqiang, REN Jianjun, et al. A defensive strategy against delay attacks on real-time pricing in smart grids[J]. Journal of Beijing University of Posts and Telecommunications, 2015, 38(B06): 116–120
[6] 陈峰. 智能电网中用户信息保护的相关密码理论研究[D]. 南京: 南京邮电大学, 2016.
CHEN Feng. Research on cryptographic theory of user information protection in smart grid[D]. Nanjing: Nanjing University of Posts and Telecommunications, 2016.
[7] LIN H, SLAGELL A, KALBARCZYK Z, et al. Semantic security analysis of SCADA networks to detect malicious control commands in power grids[C]//Proceedings of the first ACM workshop on Smart energy grid security - SEGS '13. Berlin, Germany. New York, USA: ACM Press, 2013: 139-145.
[8] 辛耀中, 石俊杰, 周京阳, 等. 智能电网调度控制系统现状与技术展望[J]. 电力系统自动化, 2015, 39(1): 2–8
XIN Yaozhong, SHI Junjie, ZHOU Jingyang, et al. Technology development trends of smart grid dispatching and control systems[J]. Automation of Electric Power Systems, 2015, 39(1): 2–8
[9] 张伟, 周峰, 黄河, 等. 管网SCADA系统通信协议一致性测试方法研究[J]. 计算机技术与发展, 2014, 24(1): 224–227
ZHANG Wei, ZHOU Feng, HUANG He, et al. Research on conformance testing method of communication protocol in oil /gas pipeline SCADA system[J]. Computer Technology and Development, 2014, 24(1): 224–227
[10] 陈建华, 李雨, 张昊, 等. 高压并联输电线路无功环流问题的影响机理分析[J]. 中国电力, 2016, 49(6): 83–89
CHEN Jianhua, LI Yu, ZHANG Hao, et al. Study on reactive power circulation mechanism for high voltage common-tower AC transmission lines[J]. Electric Power, 2016, 49(6): 83–89
[11] J. 邓肯·格洛佛, 穆卢库特拉 S. 电力系统分析与设计[M]. 北京: 机械工业出版社, 2016.
[12] 刘扬, 方圆, 孙鸿, 等. 基于物理-信息模糊推理的智能电网攻击检测方法[J]. 中国科技论文, 2016, 11(14): 1619–1625
LIU Yang, FANG Yuan, SUN Hong, et al. Cyber-physical fuzzy inference based attack detection method in smart grid[J]. China Science Paper, 2016, 11(14): 1619–1625
[13] 李建金. 基于图论分析的智能电网信息攻击入侵检测研究[D]. 秦皇岛: 燕山大学, 2017.
LI Jianjin. Cyber attack intrusion detection research for smart grids based on graph theory analysis[D]. Qinhuangdao: Yanshan University, 2017.
[14] ZOU Chunming, ZHENG Zhiqian, LIU Zhiyong, et al. Application of cyber security in industrial control systems based on security protection technology for electrical secondary system[J]. Power System Technology, 2013, 34(2): 102–110.
[15] LU Y, FENG T. Research on trusted DNP3-BAE protocol based on hash chain[J]. EURASIP Journal on Wireless Communications and Networking, 2018, 38(1): 1–10.
[16] 李保杰, 刘岩, 李洪杰, 等. 从乌克兰停电事故看电力信息系统安全问题[J]. 中国电力, 2017, 50(5): 71–77
LI Baojie, LIU Yan, LI Hongjie, et al. Enlightenment on the security of cyber information system under smart grid from Ukraine blackout[J]. Electric Power, 2017, 50(5): 71–77
[17] 薛振宇, 房大中. 大型交直流互联电力系统双向迭代连续潮流算法[J]. 电网技术, 2012, 36(10): 141–146
XUE Zhenyu, FANG Dazhong. Continuation power flow method based on bi-directional iteration in bulk AC/DC interconnected power system[J]. Power System Technology, 2012, 36(10): 141–146
[18] POLYMENEAS E, SAKIS MELIOPOULOS A P. Margin-based framework for online contingency selection in unbalanced networks[J]. IEEE Transactions on Power Systems, 2017, 32(1): 30–38.
[19] CHATURVEDI K T, PANDIT M, SRIVASTAVA L, et al. Hybrid fuzzy-neural network-based composite contingency ranking employing fuzzy curves for feature selection[J]. Neurocomputing, 2009, 73(1/2/3): 506–516.
[20] LIZUNOV I N, MISBAKHOV R S, BAGAUTDINOV I Z. The centralized system of relay protection and automation for substations of medium voltage[C]//2016 2nd International Conference on Industrial Engineering, Applications and Manufacturing (ICIEAM). 19-20 May 2016, Chelyabinsk, Russia. IEEE, 2016: 1-6.

工控运维中基于语义分析的智能电网控制攻击防御

Smart Grid Control Attack Defense Based on Semantic Analysis in Industrial Control Operation and Maintenance

RichHTML

PDF (PC)

可视化

摘要/Abstract

引用本文

使用本文

参考文献

相关文章 15

编辑推荐

Metrics

[1]	孔志恒, 谭冲, 唐培耀, 胡成博, 郑敏. 基于Light-Resnet卷积神经网络的电力设备监测数值识别算法[J]. 中国电力, 2024, 57(8): 206-213.
[2]	王硕, 霍慧娟, 徐丹, 郄鑫, 辛诚, 李薇薇, 段婧. 计及特高压交流工程建设的区域碳减排测算及分摊[J]. 中国电力, 2024, 57(7): 163-172.
[3]	于宗超, 文明, 李湘华, 谢欣涛, 杨洪明. 融合群体智慧的分布式智能电网高效发展管理策略[J]. 中国电力, 2024, 57(10): 57-68.
[4]	吴岩, 王光政. 基于CiteSpace的配电网韧性评估与提升研究综述与展望[J]. 中国电力, 2023, 56(12): 100-112, 137.
[5]	徐杰, 汪石农. 面向智能电网电压崩溃路径的优化粒子群算法[J]. 中国电力, 2023, 56(1): 142-149.
[6]	李峰, 彭慧敏, 袁虎玲, 万芳茹, 黄天罡, 李威. UPFC在线运行优化辅助决策应用功能设计[J]. 中国电力, 2021, 54(7): 76-82.
[7]	佘蕊, 张宁池, 王艳茹, 郭丹丹, 马文洁, 刘卉, 张洁. 面向电力物联网的5G通信认知无线电NOMA系统研究[J]. 中国电力, 2021, 54(5): 35-45.
[8]	曾永浩, 范心明, 彭元泉, 李新, 张子麒, 宋关羽. 三端柔性多状态开关运行控制与示范应用[J]. 中国电力, 2021, 54(11): 97-103.
[9]	柴彬, 刘飞, 江平开, 江秀臣, 黄兴溢. 面向电力设备检测与诊断的压电材料及器件[J]. 中国电力, 2021, 54(10): 105-116.
[10]	李博, 方彤. 北斗卫星导航系统（BDS）在智能电网的应用与展望[J]. 中国电力, 2020, 53(8): 107-116.
[11]	贾惠彬, 盖永贺, 李保罡, 郑宏达. 基于强化学习的电力通信网故障恢复方法[J]. 中国电力, 2020, 53(6): 34-40.
[12]	曾懿辉, 何通, 郭圣, 熊勇良, 崔颖铷, 左剑, 罗昊. 基于差分定位的输电线路多旋翼无人机智能巡检[J]. 中国电力, 2019, 52(7): 24-30.
[13]	钱斌, 蔡梓文, 肖勇, 杨劲锋, 董歆滢, 谷科. 基于边缘计算的电表计量系统数据协同检测方案[J]. 中国电力, 2019, 52(11): 145-152.
[14]	周静, 孙媛媛, 胡紫巍, 卢利锋, 刘国军. 智能电网信息通信架构演进探讨[J]. 中国电力, 2018, 51(3): 131-135.
[15]	王凯军, 郑伟民, 孙可, 靳康萌, 张沛. 智能电网增值业务的调研分析及个性化服务制定[J]. 中国电力, 2018, 51(2): 67-74.

模态框（Modal）标题

工控运维中基于语义分析的智能电网控制攻击防御

Smart Grid Control Attack Defense Based on Semantic Analysis in Industrial Control Operation and Maintenance

RichHTML

PDF (PC)

可视化

摘要/Abstract

引用本文

使用本文

参考文献

相关文章 15

编辑推荐

Metrics