面向稳控系统E1通道的网络靶场实验台的设计与实现

doi:10.11930/j.issn.1004-9649.202312098

中国电力 ›› 2024, Vol. 57 ›› Issue (9): 71-79.DOI: 10.11930/j.issn.1004-9649.202312098

• 面向电力基础设施的跨域攻击威胁与防御 • 上一篇下一篇

面向稳控系统E1通道的网络靶场实验台的设计与实现

童和钦(), 许剑冰(), 梁师哲(), 麦成(), 徐海波()

国电南瑞科技股份有限公司，江苏南京　211106

收稿日期:2023-12-28 接受日期:2024-04-28 出版日期:2024-09-28 发布日期:2024-09-23
作者简介:童和钦（1975—），男，硕士，正高级工程师，从事电力系统通信、电网信息物理系统、网络安全等研究，E-mail：tongheqin@sgepri.sgcc.com.cn
许剑冰（1971—），男，博士，正高级工程师，从事电力系统安全稳定分析及控制研究，E-mail：xujianbing@sgepri.sgcc.com.cn
梁师哲（1993—），男，硕士，工程师，从事电网安全稳定控制系统网络安全等研究，E-mail：liangshizhe@sgepri.sgcc.com.cn
麦成（1999—），男，学士，助理工程师，从事稳控系统网络安全检测工作，E-mail：maicheng@sgepri.sgcc.com.cn
徐海波（1981—），男，博士，正高级工程师，从事电力系统安全稳定控制、新能源并网紧急控制技术的研究，E-mail：xuhaibo@sgepri.sgcc.com.cn
基金资助:
国电南瑞科技股份有限公司科技项目（电网安全稳定控制系统数字建模与仿真技术研究）。

Design and Implementation of Cyber Range Testbed for E1 Channel of Power Stability Control System

Heqin TONG(), Jianbing XU(), Shizhe LIANG(), Cheng MAI(), Haibo XU()

NARI Technology Co., Ltd., Nanjing 211106, China

Received:2023-12-28 Accepted:2024-04-28 Online:2024-09-28 Published:2024-09-23
Supported by:
This work is supported by the Science and Technology Project of NARI Technology Co., Ltd. (Research on Digital Modeling and Simulation Technology for Power Grid Security and Stability Control System).

摘要/Abstract

摘要：

随着智能电网和跨区稳定控制技术的发展，信息通信与电力系统的耦合更加紧密，网络攻击带来的安全风险也越来越高。稳控系统E1通道作为重要的测控通道，其安全性对稳控系统起到重要的作用，因此，开展面向稳控系统E1通道的半实物仿真和攻防演练，对发现E1通道的安全漏洞有重要意义。首先，基于半实物仿真技术设计了面向稳控系统E1通道的网络靶场实验台，介绍基于该实验台的攻防演练方案；然后，通过该实验台对一个典型的在运稳控系统E1通道开展仿真和攻击模拟实验，测试了稳控系统的安全隐患，并验证了实验台的有效性；最后，提出几种提升E1通道安全性的方法，并展望了实验台的应用前景。

关键词: 稳控系统, 网络安全, 半实物仿真实验台, 网络靶场, E1通道

Abstract:

With the development of smart grid and trans-region stability control technology, the information communication and the power system is being coupled more closely, and the security risk caused by cyber-attack is becoming higher and higher. As a key measurement and control channel, the E1 channel of the stability control system plays an important role for the security of stability control system. Thus, it is of significance to conduct the attack and defense drills on a hardware-in-the-loop simulation platform to find the security risk of E1 channel of the stability control system. Firstly, a cyber range testbed was designed for the E1 channel of the stability control system based on the hardware-in-the-loop simulation technology, and the scheme of attack and defense drills on the designed testbed was briefly introduced. Then, through the testbed, we simulated a case of a cyber-attack on the E1 channel of an operating power stability control system to test its security risk and validate effectiveness of the designed testbed. Finally, we proposed several solutions to improve the security of the E1 channel, and made a perspective of the future application of the designed testbed.

Key words: power stability control system, cyber security, hardware-in-the-loop simulation testbed, cyber range, E1 channel

童和钦, 许剑冰, 梁师哲, 麦成, 徐海波. 面向稳控系统E1通道的网络靶场实验台的设计与实现[J]. 中国电力, 2024, 57(9): 71-79.

Heqin TONG, Jianbing XU, Shizhe LIANG, Cheng MAI, Haibo XU. Design and Implementation of Cyber Range Testbed for E1 Channel of Power Stability Control System[J]. Electric Power, 2024, 57(9): 71-79.

导出引用管理器 EndNote|Ris|BibTeX

链接本文: https://www.electricpower.com.cn/CN/10.11930/j.issn.1004-9649.202312098

https://www.electricpower.com.cn/CN/Y2024/V57/I9/71

图/表 11

图 1 电网安全稳定控制系统架构示意

Fig.1 The architecture of the power safety stability control system

图 2 面向稳控系统 E1 通道的攻击示意

Fig.2 The cyber-attack diagram on the E1 channel of the power

图 3 面向稳控系统E1通道的网络靶场环境

Fig.3 The cyber range environment for the E1 channel of the power stability control system

图 4 面向稳控系统E1通道的网络靶场实验台架构示意

Fig.4 The architecture of the cyber range testbed for the E1 channel of the power stability control system

图 5 面向稳定控制E1通道的攻防演练示意

Fig.5 The attack and defense drills for the E1 channel of the power stability control system

图 6 仿真场景示意

Fig.6 The simulation scenario

图 7 原始数据包与篡改数据包比较

Fig.7 Comparison of the original and tampered data

图 8 网络攻击后稳控装置事件记录显示

Fig.8 The event display of the power stability control system after cyber-attack

图 9 网络攻击后开关量输出波形显示

Fig.9 The digital signal output of the switch after cyber- attack

图 10 原始数据包与重放数据包比较

Fig.10 Comparison of the original data and the replay data

图 11 重放攻击造成拒动的仿真结果

Fig.11 The simulation result of operation failure caused by replay-attack

参考文献 20

1	汤广福, 庞辉, 贺之渊. 先进交直流输电技术在中国的发展与应用[J]. 中国电机工程学报, 2016, 36 (7): 1760- 1771.
	TANG Guangfu, PANG Hui, HE Zhiyuan. R&D and application of advanced power transmission technology in China[J]. Proceedings of the CSEE Electric Power, 2016, 36 (7): 1760- 1771.
2	周霞, 杨洲, 倪明, 等. 考虑信息-物理组合预想故障筛选的配电网CPS安全性评估[J]. 中国电力, 2020, 53 (1): 40- 48.
	ZHOU Xia, YANG Zhou, NI Ming, et al. Security evaluation of distribution network CPS considering cyber-physical combinations for anticipated fault screening[J]. Electric Power, 2020, 53 (1): 40- 48.
3	姚鹏超, 颜秉晶, 郝唯杰, 等. 电力信息物理系统入侵容忍能力评估方法[J]. 中国电力, 2022, 55 (4): 13- 22.
	YAO Pengchao, YAN Bingjing, HAO Weijie, et al. An intrusion tolerance assessment method for cyber-physical power system[J]. Electric Power, 2022, 55 (4): 13- 22.
4	周劼英, 张晓, 邵立嵩, 等. 新型电力系统网络安全防护挑战与展望[J]. 电力系统自动化, 2023, 47 (8): 15- 24. DOI
	ZHOU Jieying, ZHANG Xiao, SHAO Lisong, et al. Challenges and prospects of cyber security protection for new power system[J]. Automation of Electric Power Systems, 2023, 47 (8): 15- 24. DOI
5	刘依晗, 王宇飞. 新型电力系统中跨域连锁故障的演化机理与主动防御探索[J]. 中国电力, 2022, 55 (2): 62- 72.
	LIU Yihan, WANG Yufei. Exploring the evolution mechanism and active defense of cross-domain cascading failures in new type power system[J]. Electric Power, 2022, 55 (2): 62- 72.
6	HUANG Bonan, LI Yushuai, ZHAN Fengnan, et al. A distributed robust economic dispatch strategy for integrated energy system considering cyber-attacks[J]. IEEE Transactions on Industrial Informatics, 2022, 18 (2): 880- 890. DOI
7	LIU Ren, VELLAITHURAI C, BISWAS S S, et al. Analyzing the cyber-physical impact of cyber events on the power grid[J]. IEEE Transactions on Smart Grid, 2017, 6 (5): 2444- 2453.
8	YOHANANDHAN R V, ELAVARASAN R M, PUGAZHENDHI R, et al. A holistic review on cyber-physical power system (CPPS) testbeds for secure and sustainable electric power grid – Part – Ⅱ: classification, overview and assessment of CPPS testbeds[J]. International Journal of Electrical Power and Energy Systems, 2021, 136, 819- 829.
9	国家互联网应急中心态势报告[EB/OL]. (2022-06-27) [2023-12-10].https://www.cert.org.cn/publish/main/46/index.html.
10	张晓刚, 林飞, 姚松, 等. 基于网络靶场技术的安全检测方法设计[J]. 自动化仪表, 2023, 44 (6): 100- 104.
	ZHANG Xiaogang, LIN Fei, YAO Song, et al. Design of security detection method based on cyber range technology[J]. Process Automation Instrumentation, 2023, 44 (6): 100- 104.
11	韩丽芳, 张晓, 应欢, 等. 电力关键信息基础设施网络安全攻防演练研究[J]. 电力信息与通信技术, 2022, 20 (7): 26- 32.
	HAN Lifang, ZHANG Xiao, YING Huan, et al. Research on cyber security attack and defense drills for power critical information infrastructure[J]. Electric Power Information and Communication Technology, 2022, 20 (7): 26- 32.
12	盛威. 国外网络靶场现状与趋势分析[J]. 网信军民融合, 2017, 4 (5): 68- 72.
13	孙健, 翟健宏. 工控网络仿真靶场虚拟化场景的构建[J]. 智能计算机与应用, 2021, 11 (9): 191- 195. DOI
	SUN Jian, ZHAI Jianhong. A virtual scene construction of industrial control network simulated range[J]. Intelligent Computer and Applications, 2021, 11 (9): 191- 195. DOI
14	长扬科技(北京)股份有限公司. 基于虚实结合的电力工控网络安全靶场平台建设项目[J]. 自动化博览, 2023, 10 (1): 106- 109. DOI
15	王琦, 邰伟, 汤奕, 等. 面向电力信息物理系统的虚假数据注入攻击研究综述[J]. 自动化学报, 2019, 45 (1): 72- 83.
	WANG Qi, TAI Wei, TANG Yi, et al. A review on false data injection attack toward cyber-physical power system[J]. Acta Automatica Sinica, 2019, 45 (1): 72- 83.
16	童和钦, 倪明, 李满礼, 等. 基于RTDS与QualNet的电网和通信网半实物联合仿真系统[J]. 电力系统自动化, 2018, 42 (8): 149- 155. DOI
	TONG Heqin, NI Ming, LI Manli, et al. Hardware-in-the-loop co-simulation system for power grid and communication network based on RTDS and Qualnet[J]. Automation of Electric Power System, 2018, 42 (8): 149- 155. DOI
17	TONG Heqin, NI Ming, GONG Peng. A hardware-in-the-loop co-simulation for the energy internet based on SDH network[C]// Energy Internet & Energy System Integration. IEEE, 2018.
18	任祖怡, 邱建, 徐光虎, 等. 交直流混联电网稳定控制系统通信可靠性研究[J]. 南方电网技术, 2023, 17 (6): 11- 17.
	REN Zuyi, QIU Jian, XU Guanghu, et al. Research on communication reliability of stability control system in AC-DC hybrid power grid[J]. Southern Power System Technology, 2023, 17 (6): 11- 17.
19	TONG Heqin, NI Ming, ZHAO Lili, et al. Flexible hardware-in-the-loop testbed for cyber physical power system simulation[J]. IET Cyber-Physical Systems: Theory & Applications, 2019, 4(4): 374–381.
20	ZHANG Chenfeng, VIJAPURAPU V K., SRIVASTAVA A K, et al. Hardware-in-the-loop simulation of distance relay using RTDS[C]//Summer Computer Simulation Conference. Society for Computer Simulation International, San Diego, USA, 2007: 149–154.

[1]	余江, 高宏慧, 史泽兵, 蒋纬纬, 武芳瑛, 詹庆才, 张蕊. 继电保护远程运维系统报文合规检测及入侵阻断技术应用[J]. 中国电力, 2024, 57(3): 135-143, 151.
[2]	李碧君, 董希建, 颜云松, 夏海峰, 刘天翼. 基于控制功效受损模式的大型稳控系统可靠性评估[J]. 中国电力, 2020, 53(5): 32-38.
[3]	郄朝辉, 李威, 崔晓丹, 刘福锁. 基于分层马尔可夫的可修复稳定控制系统可靠性分析[J]. 中国电力, 2020, 53(3): 101-109.
[4]	王铁强,孙广辉,曹欣,杨晓东,匡洪辉,郭少青. 考虑交流潮流校正的日内滚动发电计划模型与方法[J]. 中国电力, 2016, 49(4): 83-87.

面向稳控系统E1通道的网络靶场实验台的设计与实现

Design and Implementation of Cyber Range Testbed for E1 Channel of Power Stability Control System

RichHTML

PDF (PC)

可视化

摘要/Abstract

引用本文

使用本文

图/表 11

参考文献 20

相关文章 4

编辑推荐

Metrics

模态框（Modal）标题

面向稳控系统E1通道的网络靶场实验台的设计与实现

Design and Implementation of Cyber Range Testbed for E1 Channel of Power Stability Control System

RichHTML

PDF (PC)

可视化

摘要/Abstract

引用本文

使用本文

图/表 11

参考文献 20

相关文章 4

编辑推荐

Metrics