电力信息物理系统入侵容忍能力评估方法

doi:10.11930/j.issn.1004-9649.202111141

中国电力 ›› 2022, Vol. 55 ›› Issue (4): 13-22.DOI: 10.11930/j.issn.1004-9649.202111141

• 新型电力系统信息安全：理论、技术与应用 • 上一篇下一篇

电力信息物理系统入侵容忍能力评估方法

姚鹏超, 颜秉晶, 郝唯杰, 杨强

浙江大学电气工程学院，浙江杭州 310027

收稿日期:2021-11-30 修回日期:2022-03-04 出版日期:2022-04-28 发布日期:2022-04-24
作者简介:姚鹏超（1997—），男，硕士研究生，从事电力信息物理系统攻防博弈研究，E-mail：pcyao@zju.edu.cn;颜秉晶（1996—），男，博士研究生，从事电力信息物理系统攻防博弈研究，E-mail：yanbj@zju.edu.cn;郝唯杰（1995—），男，博士研究生，从事工业信息物理系统安全及网络流量分析研究。E-mail：wjhao@zju.edu.cn;杨强（1979—），男，通信作者，教授，博士生导师，从事电力信息物理系统智能与安全、能源电力系统数据智能与决策研究，E-mail：qyang@zju.edu.cn
基金资助:
国家自然科学基金资助项目（配电信息物理系统网络协同攻击安全风险评价和优化防御研究，51777183）；中央高校基本科研业务费专项（浙江大学NGICS大平台课题）。

An Intrusion Tolerance Assessment Method for Cyber-Physical Power System

YAO Pengchao, YAN Bingjing, Hao Weijie, YANG Qiang

College of Electrical Engineering, Zhejiang University, Hangzhou 310027, China

Received:2021-11-30 Revised:2022-03-04 Online:2022-04-28 Published:2022-04-24
Supported by:
This work is supported by National Natural Science Foundation of China (Security Risk Evaluation and Optimal Defense of Network Cooperative Attack in Distribution Cyber-Physical Systems, No.51777183), Fundamental Research Funds for the Central Universities (Zhejiang University NGICS Platform).

摘要/Abstract

摘要： 随着控制系统与新信息技术的集成程度不断提高，电力信息物理系统（cyber-physical power system, CPPS）不仅面临着来自物理世界的不确定性，还面临着来自网络空间的攻击威胁，亟须能够评估CPPS遭受网络攻击时防御能力的方法。提出一种以平均失效时间与可靠度为评估指标的入侵容忍能力与最优资源配置的评估方法。首先，采用半马尔可夫链模型对高级可持续威胁（advanced persistent threat，APT）进行建模，具体分析来自网络层面的攻击对CPPS的破坏渗透过程，利用随机博弈模型动态描述CPPS中攻防双方的交互过程，预测纳什均衡下攻击者的理性进攻策略，确定应对恶意攻击的最佳防御策略。最后，以CPPS安全试验场为案例仿真验证了入侵容忍能力评估方法的有效性，结果说明：入侵容忍能力对CPPS安全运行具有不可忽视的作用。

关键词: 电力信息物理系统, 网络攻击, 入侵容忍能力, 防御资源配置, 半马尔科夫链, 随机博弈

Abstract: With the increasing integration of information and communication technology, the cyber-physical power system (CPPS) is facing not only uncertainties from the physical world but also threat from cyberspace. It is urgently needed for a method to assess the defensive capability of CPPS against cyber attacks. An assessment method is proposed for intrusion tolerance and optimal defense resource allocation of CPPS based on mean failure time and reliability. Firstly, a semi-Markov chain attack model is established for the advanced persistent threat (APT) to analyze the penetration process of attacks from cyber level to CPPS. Besides, a stochastic game model is adopted to dynamically describe the interaction process between attackers and defenders in CPPS, subsequently predicting the optimal strategy of attackers under Nash equilibrium, and determining the optimal defense strategy against malicious attacks. Finally, the effectiveness of the intrusion tolerance assessment method is verified through a CPPS security testbed, which shows that the intrusion tolerance capability has a significant role in the secure operation of the CPPS.

Key words: cyber-physical power system, cyber attack, intrusion tolerance, defense resource allocation, semi-Markov chain, stochastic game

姚鹏超, 颜秉晶, 郝唯杰, 杨强. 电力信息物理系统入侵容忍能力评估方法[J]. 中国电力, 2022, 55(4): 13-22.

YAO Pengchao, YAN Bingjing, Hao Weijie, YANG Qiang. An Intrusion Tolerance Assessment Method for Cyber-Physical Power System[J]. Electric Power, 2022, 55(4): 13-22.

导出引用管理器 EndNote|Ris|BibTeX

链接本文: https://www.electricpower.com.cn/CN/10.11930/j.issn.1004-9649.202111141

https://www.electricpower.com.cn/CN/Y2022/V55/I4/13

参考文献

[1] SRIDHAR S, HAHN A, GOVINDARASU M. Cyber–physical system security for the electric power grid[J]. Proceedings of the IEEE, 2012, 100(1): 210–224.
[2] 赵静波, 张思聪, 廖诗武. 美国加州2020年8月中旬停电事故分析及思考[J]. 电力工程技术, 2020, 39(6): 52–57
ZHAO Jingbo, ZHANG Sicong, LIAO Shiwu. Analysis and reflection for the rotating outages in mid-August 2020 in California[J]. Electric Power Engineering Technology, 2020, 39(6): 52–57
[3] 龚郗安. 关于委内瑞拉大停电事故的情况分析和关键基础设施的安全防护建议[J]. 信息技术与网络安全, 2019, 38(4): 1–2,14
GONG Xian. Analysis of Venezuela's blackouts and suggestions on network security of critical infrastructure[J]. Information Technology and Network Security, 2019, 38(4): 1–2,14
[4] 郭庆来, 辛蜀骏, 王剑辉, 等. 由乌克兰停电事件看信息能源系统综合安全评估[J]. 电力系统自动化, 2016, 40(5): 145–147
GUO Qinglai, XIN Shujun, WANG Jianhui, et al. Comprehensive security assessment for a cyber physical energy system: a lesson from Ukraine's blackout[J]. Automation of Electric Power Systems, 2016, 40(5): 145–147
[5] 胡源, 薛松, 张寒, 等. 近30年全球大停电事故发生的深层次原因分析及启示[J]. 中国电力, 2021, 54(10): 204–210
HU Yuan, XUE Song, ZHANG Han, et al. Cause analysis and enlightenment of global blackouts in the past 30 years[J]. Electric Power, 2021, 54(10): 204–210
[6] SHI L B, DAI Q S, NI Y X. Cyber-physical interactions in power systems: a review of models, methods, and applications[J]. Electric Power Systems Research, 2018, 163: 396–412.
[7] YOHANANDHAN R V, ELAVARASAN R M, MANOHARAN P, et al. Cyber-physical power system (CPPS): a review on modeling, simulation, and analysis with cyber security applications[J]. IEEE Access, 2020, 8: 151019–151064.
[8] 丁茂生, 王洪儒, 王超, 等. 信息物理视角下能源互联网可靠性评估方法综述[J]. 电网技术, 2021, 45(2): 425–436
DING Maosheng, WANG Hongru, WANG Chao, et al. Review of reliability assessments for energy Internet based on cyber physical integration[J]. Power System Technology, 2021, 45(2): 425–436
[9] 袁汉杰, 李更丰, 别朝红. 考虑信息物理融合的配电系统可靠性评估[J]. 智慧电力, 2017, 45(7): 51–57,82
YUAN Hanjie, LI Gengfeng, BIE Zhaohong. Distribution system reliability assessment considering cyber-physical integration[J]. Smart Power, 2017, 45(7): 51–57,82
[10] 朱炳铨, 郭逸豪, 郭创新, 等. 信息失效威胁下的电力信息物理系统安全评估与防御研究综述[J]. 电力系统保护与控制, 2021, 49(1): 178–187
ZHU Bingquan, GUO Yihao, GUO Chuangxin, et al. A survey of the security assessment and security defense of a cyber physical power system under cyber failure threat[J]. Power System Protection and Control, 2021, 49(1): 178–187
[11] HE R W, XIE H J, DENG J H, et al. Reliability modeling and assessment of cyber space in cyber-physical power systems[J]. IEEE Transactions on Smart Grid, 2020, 11(5): 3763–3773.
[12] LAU P, WEI W, WANG L F, et al. A cyber security insurance model for power system reliability considering optimal defense resource allocation[J]. IEEE Transactions on Smart Grid, 2020, 11(5): 4403–4414.
[13] LIU W X, GONG Q, HAN H, et al. Reliability modeling and evaluation of active cyber physical distribution system[J]. IEEE Transactions on Power Systems, 2018, 33(6): 7096–7108.
[14] MARASHI K, SARVESTANI S S, HURSON A R. Consideration of cyber-physical interdependencies in reliability modeling of smart grids[J]. IEEE Transactions on Sustainable Computing, 2018, 3(2): 73–83.
[15] 杨文丽. 计及可靠性评估的中压配电网规划方案比选[J]. 电力工程技术, 2018, 37(2): 13–19,43
YANG Wenli. Comparison and selection of MV distribution network planning schemes considering reliability assessment[J]. Electric Power Engineering Technology, 2018, 37(2): 13–19,43
[16] 田涛, 张兆君, 朱超, 等. 高压断路器储能弹簧的可靠性及寿命分析[J]. 电力工程技术, 2017, 36(5): 103–108
TIAN Tao, ZHANG Zhaojun, ZHU Chao, et al. Reliability and life analysis of energy-storing spring for high voltage circuit breaker[J]. Electric Power Engineering Technology, 2017, 36(5): 103–108
[17] 段军, 谢晔源, 姜田贵, 等. 模块化多电平换流阀可靠性研究与设计优化[J]. 电力工程技术, 2018, 37(2): 38–43
DUAN Jun, XIE Yeyuan, JIANG Tiangui, et al. Reliability research and design optimization of modular multilevel converter[J]. Electric Power Engineering Technology, 2018, 37(2): 38–43
[18] 袁汉杰, 李更丰, 龙涛, 等. 计及状态估计与可观性的电力系统可靠性评估[J]. 电网技术, 2019, 43(12): 4274–4283
YUAN Hanjie, LI Gengfeng, LONG Tao, et al. Power system reliability assessment considering state estimation and observability[J]. Power System Technology, 2019, 43(12): 4274–4283
[19] HUANG S, ZHOU C J, YANG S H, et al. Cyber-physical system security for networked industrial processes[J]. International Journal of Automation and Computing, 2015, 12(6): 567–578.
[20] ZIMBA A, CHEN H S, WANG Z S. Bayesian network based weighted APT attack paths modeling in cloud computing[J]. Future Generation Computer Systems, 2019, 96: 525–537.
[21] SHEN S G, HAN R S, GUO L Z, et al. Survivability evaluation towards attacked WSNs based on stochastic game and continuous-time Markov chain[J]. Applied Soft Computing, 2012, 12(5): 1467–1476.
[22] SHAPLEY L S. Stochastic games[J]. PNAS, 1953, 39(10): 1095–1100.
[23] LIAO W X, SALINAS S, LI M, et al. Cascading failure attacks in the power system: a stochastic game perspective[J]. IEEE Internet of Things Journal, 2017, 4(6): 2247–2259.
[24] HUANG K X, ZHOU C J, QIN Y Q, et al. A game-theoretic approach to cross-layer security decision-making in industrial cyber-physical systems[J]. IEEE Transactions on Industrial Electronics, 2020, 67(3): 2371–2379.
[25] ZHU Y H, ZHAO D B. Online minimax Q network learning for two-player zero-sum Markov games[J]. IEEE Transactions on Neural Networks and Learning Systems, 2020(99): 1–14.
[26] PAUL S, NI Z, MU C X. A learning-based solution for an adversarial repeated game in cyber-physical power systems[J]. IEEE Transactions on Neural Networks and Learning Systems, 2020, 31(11): 4512–4523.

电力信息物理系统入侵容忍能力评估方法

An Intrusion Tolerance Assessment Method for Cyber-Physical Power System

RichHTML

PDF (PC)

可视化

摘要/Abstract

引用本文

使用本文

参考文献

相关文章 11

编辑推荐

Metrics

[1]	席磊, 王艺晓, 何苗, 程琛, 田习龙. 基于反向鲸鱼-多隐层极限学习机的电网FDIA检测[J]. 中国电力, 2024, 57(9): 20-31.
[2]	翟峰, 冯云, 程凯, 蔡绍堂, 于丽莹, 杨挺. 基于信息熵的多源电力物联终端设备信任度评价方法[J]. 中国电力, 2022, 55(5): 158-165.
[3]	刘依晗, 王宇飞. 新型电力系统中跨域连锁故障的演化机理与主动防御探索[J]. 中国电力, 2022, 55(2): 62-72,81.
[4]	万克厅, 陆玲霞, 于淼, 齐冬莲. 基于多组件并行架构的电力CPS实时联合仿真平台[J]. 中国电力, 2022, 55(2): 51-61.
[5]	赵宏大, 陈琛, 王哲, 王海勇. 电力CPS环境下电力4G无线专网向5G演进策略[J]. 中国电力, 2021, 54(3): 68-79.
[6]	胡源, 薛松, 张寒, 张桦, 冯昕欣, 唐程辉, 林毅, 郑鹏. 近30年全球大停电事故发生的深层次原因分析及启示[J]. 中国电力, 2021, 54(10): 204-210.
[7]	王宇飞, 邱健, 李俊娥. 考虑攻击损益的电网CPS场站级跨空间连锁故障早期预警方法[J]. 中国电力, 2020, 53(1): 92-99.
[8]	何金栋, 王宇, 赵志超, 李俊娥, 谢新志, 张锐文, 柳玙卿, 裘德熙. 智能变电站嵌入式终端的网络攻击类型研究及验证[J]. 中国电力, 2020, 53(1): 81-91.
[9]	李保杰, 刘岩, 李洪杰, 何维晟, 曾祥峰, 陈硕. 从乌克兰停电事故看电力信息系统安全问题[J]. 中国电力, 2017, 50(5): 71-77.
[10]	何耀, 周聪, 郑凌月, 张维锡, 谢育轩. 基于扩展卡尔曼滤波的虚假数据攻击检测方法[J]. 中国电力, 2017, 50(10): 35-40.
[11]	李佳玮，郝悍勇，李宁辉. 工业控制系统信息安全防护[J]. 中国电力, 2015, 48(10): 139-143.

模态框（Modal）标题

电力信息物理系统入侵容忍能力评估方法

An Intrusion Tolerance Assessment Method for Cyber-Physical Power System

RichHTML

PDF (PC)

可视化

摘要/Abstract

引用本文

使用本文

参考文献

相关文章 11

编辑推荐

Metrics