中国电力 ›› 2020, Vol. 53 ›› Issue (1): 92-99.DOI: 10.11930/j.issn.1004-9649.201912082

• 信息物理电力系统(CPPS)专栏 • 上一篇    下一篇

考虑攻击损益的电网CPS场站级跨空间连锁故障早期预警方法

王宇飞1, 邱健2, 李俊娥1   

  1. 1. 空天信息安全与可信计算教育部重点实验室(武汉大学 国家网络安全学院), 湖北 武汉 430072;
    2. 电力规划设计总院, 北京 100120
  • 收稿日期:2019-12-14 发布日期:2020-01-15
  • 通讯作者: 李俊娥(1966-),女,通信作者,博士,教授,博士研究生导师,从事电网信息物理系统、信息安全、通信网络研究,E-mail:jeli@whu.edu.cn
  • 作者简介:王宇飞(1982-),男,博士研究生,高级工程师,从事电网信息物理系统、电力信息安全、电力人工智能研究,E-mail:wallyful@126.com;邱健(1981-),男,博士,高级工程师,从事电网信息物理系统、电力系统分析研究,E-mail:jqiu@eppei.com
  • 基金资助:
    国家自然科学基金资助项目(协同网络攻击下电网CPS跨空间级联故障演化机理及早期防御研究,51977155);国家电网公司科技项目(针对网络攻击的电网信息物理系统协同运行态势感知与主动防御方法研究)

A Station Level Early Warning Method of Cascading Failures Across Space Based on Attack Gain and Cost Principle in GCPS

WANG Yufei1, QIU Jian2, LI June1   

  1. 1. Key Laboratory of Aerospace Information Security and Trusted Computing, Ministry of Education, School of Cyber Science and Engineering, Wuhan University, Wuhan 430072, China;
    2. Electric Power Planning & Engineering Institute, Beijing 100120, China
  • Received:2019-12-14 Published:2020-01-15
  • Supported by:
    This work is supported by National Natural Science Foundation of China (Research on the Evolution Mechanism and Early Defense of GCPS Cascading Failures under Cooperative Cyber Attacks, No.51977155) and Science and Technology Program of State Grid Corporation of China (Research on the Cooperative Situation Awareness and Active Defense Method for Cyber Attack of Cyber Physical Power System)

摘要: 为了准确检测由网络攻击引发的各种跨空间连锁故障,提出了一种考虑攻击损益的场站级跨空间连锁故障早期预警方法。首先,根据跨空间连锁故障演化机理讨论了故障早期预警的工作原理,建立故障早期预警的数学模型;进而,提出误用检测与异常检测融合的场站级跨空间连锁故障检测方法;最后,在基于CEPRI-36节点的电网信息物理系统仿真环境中,模拟网络攻击引发的跨空间连锁故障并利用所提方法给予早期预警,验证了所提方法的有效性。

关键词: 电网信息物理系统, 网络攻击, 跨空间连锁故障, 攻击损益, 早期预警

Abstract: In order to accurately detect the cascading failures across space (CFAS) caused by cyber attacks in grid cyber-physical systems (GCPS), a station-level early warning method for CFAS is proposed based on attack gain and cost principle (AGCP). Firstly, the working principle of CFAS early warning is discussed according to the evolution mechanism of CFAS, and a mathematical model of CFAS early warning is established. And then, a station-level CFAS detection method is proposed based on the integration of misuse detection and anomaly detection. Finally, to verify the effectiveness of the proposed CFAS early warning method, a variety of CFAS are simulated in a CEPRI-36 bus GCPS simulation environment, and the early warning is given by using the proposed CFAS early warning method.

Key words: grid cyber-physical systems, cyber attacks, cascading failures across space, attack gain and cost, early warning