Network Security Risk Assessment Index System and Calculation for Virtual Power Plant

doi:10.11930/j.issn.1004-9649.202311036

Abstract

Abstract:

In this paper, we propose a multidimensional dynamic risk assessment index system for the new system of virtual power plants. Firstly, based on the characteristics of the virtual power plant, a static risk assessment index system is built; a dynamic risk assessment index system is constructed, based on the evolution mechanism of attack paths, and collects data from information, physical and the information physical sides. Then, we propose a quantitative assessment method. Finally, the simulation experiment is carried out to validate the multi-dimensional dynamic risk assessment index system proposed in this paper, which can assess the network risk of the virtual power plant, identify potential risks, and propose valid enhancement measures.

Key words: virtual power plant, interaction between public network and private network, risk assessment, index system

Ke YANG, Dong WANG, Da LI, Wangjun ZHANG, Ga XIANG, Jun LI. Network Security Risk Assessment Index System and Calculation for Virtual Power Plant[J]. Electric Power, 2024, 57(8): 130-137.

Add to citation manager EndNote|Ris|BibTeX

URL: https://www.electricpower.com.cn/EN/10.11930/j.issn.1004-9649.202311036

https://www.electricpower.com.cn/EN/Y2024/V57/I8/130

Figures/Tables 8

References 25

1	杨国泰, 王宇飞, 罗剑波, 等. 电力CPS信息网络脆弱性及其评估方法[J]. 中国电力, 2018, 51 (1): 83- 89.
	YANG Guotai, WANG Yufei, LUO Jianbo, et al. Electric CPS information network vulnerability and assessment method[J]. Electric Power, 2018, 51 (1): 83- 89.
2	汤奕, 王琦, 倪明, 等. 电力信息物理融合系统中的网络攻击分析[J]. 电力系统自动化, 2016, 40 (6): 148- 151.
	TANG Yi, WANG Qi, NI Ming, et al. Analysis of cyber attacks in cyber physical power system[J]. Automation of Electric Power Systems, 2016, 40 (6): 148- 151.
3	韩丽芳, 胡博文, 杨军, 等. 基于攻击预测的电力CPS安全风险评估[J]. 中国电力, 2019, 52 (1): 48- 56.
	HAN Lifang, HU Bowen, YANG Jun, et al. A new security risk assessment method for cyber physical power system based on attack prediction[J]. Electric Power, 2019, 52 (1): 48- 56.
4	张宇航, 倪明, 孙永辉, 等. 针对网络攻击的配电网信息物理系统风险量化评估[J]. 电力系统自动化, 2019, 43 (21): 12- 22,33.
	ZHANG Yuhang, NI Ming, SUN Yonghui, et al. Quantitative risk assessment of cyber-physical system for cyber-attacks in distribution network[J]. Automation of Electric Power Systems, 2019, 43 (21): 12- 22,33.
5	黄蔚亮, 苏志鹏, 梁欣怡, 等. 考虑可调市场和外部需求响应的虚拟电厂优化运行策略[J]. 中国电力, 2023, 56 (12): 156- 163.
	HUANG Weiliang, SU Zhipeng, LIANG Xinyi, et al. Optimal operation strategy for virtual power plant considering regulation market and external demand response[J]. Electric Power, 2023, 56 (12): 156- 163.
6	苏志鹏, 王莉, 梁欣怡, 等. 考虑阶梯式碳交易及综合需求响应的虚拟电厂优化调度[J]. 中国电力, 2023, 56 (12): 174- 182.
	SU Zhipeng, WANG Li, LIANG Xinyi, et al. Optimal dispatch of virtual power plant considering stepped carbon trading and comprehensive demand response[J]. Electric Power, 2023, 56 (12): 174- 182.
7	刘向向, 张森林, 朱思乔, 等. 基于灰靶理论和谱聚类的虚拟电厂多形态柔性资源聚合模型[J]. 中国电力, 2023, 56 (11): 104- 112.
	LIU Xiangxiang, ZHANG Senlin, ZHU Siqiao, et al. Multi-form flexible resource aggregation model for virtual power plant based on grey target theory and spectral clustering[J]. Electric Power, 2023, 56 (11): 104- 112.
8	许星原, 陈皓勇, 黄宇翔, 等. 虚拟电厂市场化交易中的挑战、策略与关键技术[J]. 发电技术, 2023, 44 (6): 745- 757.
	XU Xingyuan, CHEN Haoyong, HUANG Yuxiang, et al. Challenges, strategies and key technologies for virtual power plants in market trading[J]. Power Generation Technology, 2023, 44 (6): 745- 757.
9	程雪婷, 王金浩, 金玉龙, 等. 计及配电网运行约束的多虚拟电厂合作博弈策略[J]. 南方电网技术, 2023, 17 (4): 119- 131.
	CHENG Xueting, WANG Jinhao, JIN Yulong, et al. Cooperative game strategy of multiple virtual power plants considering the operational constraints of distribution network[J]. Southern Power System Technology, 2023, 17 (4): 119- 131.
10	马莉, 陈应雨, 田钉荣, 等. 基于改进层次分析法的多级电压暂降严重程度评估[J]. 电力系统保护与控制, 2023, 51 (17): 49- 57.
	MA Li, CHEN Yingyu, TIAN Dingrong, et al. Severity evaluation of multistage voltage sag based on an improved analytic hierarchy process[J]. Power System Protection and Control, 2023, 51 (17): 49- 57.
11	朱辉, 闫腾飞, 丁一, 等. 基于改进的AHP-CRITIC综合权重计算法的多元用户用能行为特性刻画及评价方法[J]. 东北电力大学学报, 2023, 43 (5): 70- 77.
	ZHU Hui, YAN Tengfei, DING Yi, et al. Characterization and evaluation method for multi-user energy consumption behavior based on the improved AHP-CRITIC composite weighting approach[J]. Journal of Northeast Electric Power University, 2023, 43 (5): 70- 77.
12	贾开华, 于云霞, 范秀波, 等. 基于AHP-EWM综合赋权和TOPSIS法的多能互补系统综合评价[J]. 中国电力, 2023, 56 (7): 228- 238.
	JIA Kaihua, YU Yunxia, FAN Xiubo, et al. Multi-criteria comprehensive evaluation of multi-energy complementary system based on AHP-EWM and topsis method[J]. Electric Power, 2023, 56 (7): 228- 238.
13	李翠萍, 朱文超, 李军徽, 等. 分布式电源接入中压配电网的运行方案研究[J]. 东北电力大学学报, 2023, 43 (4): 57- 64.
	LI Cuiping, ZHU Wenchao, LI Junhui, et al. Research on the operation scheme of distributed generation access to medium voltage distribution network[J]. Journal of Northeast Electric Power University, 2023, 43 (4): 57- 64.
14	谢蒙飞, 马高权, 刘斌, 等. 基于信息差距决策理论的虚拟电厂报价策略[J]. 中国电力, 2024, 57 (1): 40- 50.
	XIE Mengfei, MA Gaoquan, LIU Bin, et al. Virtual power plant quotation strategy based on information gap decision theory[J]. Electric Power, 2024, 57 (1): 40- 50.
15	张凯瑞, 明昊, 高赐威. 基于CPSS视角的需求响应能力评估综述[J]. 电力科学与技术学报, 2024, 39 (1): 28- 46.
	ZHANG Kairui, MING Hao, GAO Ciwei. A review of demand response capability assessment based on CPSS perspective[J]. Journal of Electric Power Science and Technology, 2024, 39 (1): 28- 46.
16	曾小青, 唐超雯. 分时电价环境下计及新能源消纳的虚拟电厂优化调度研究[J]. 电力科学与技术学报, 2023, 38 (3): 24- 34.
	ZENG Xiaoqing, TANG Chaowen. Research on optimization of virtual power plants dispatch by considering the consumption of new energy under time-of-use electricity price environment[J]. Journal of Electric Power Science and Technology, 2023, 38 (3): 24- 34.
17	杨秀, 杜楠楠, 孙改平, 等. 考虑需求响应的虚拟电厂双层优化调度[J]. 电力科学与技术学报, 2022, 37 (2): 137- 146.
	YANG Xiu, DU Nannan, SUN Gaiping, et al. Bi-level optimization dispatch of virtual power plants considering the demand response[J]. Journal of Electric Power Science and Technology, 2022, 37 (2): 137- 146.
18	魏震波, 孙舟倍, 梁政. 基于多目标两阶段规划的虚拟电厂优化调度[J]. 南方电网技术, 2023, 17 (4): 109- 118.
	WEI Zhenbo, SUN Zhoubei, LIANG Zheng. Virtual power plant optimal dispatching based on multi-objective and two-stage programming[J]. Southern Power System Technology, 2023, 17 (4): 109- 118.
19	袁典, 金旭, 钱涛, 等. 主动配电网优化调度场景下的变频空调负荷聚合外特性研究[J]. 东北电力大学学报, 2024, 44 (1): 109- 119.
	YUAN Dian, JIN Xu, QIAN Tao, et al. Application of inverter air conditioner aggregation external characterization study in active distribution grid optimization scheduling[J]. Journal of Northeast Electric Power University, 2024, 44 (1): 109- 119.
20	潘忠志, 孔宁, 王燕涛. 改进新能源消纳的配电网资源优化配置研究[J]. 东北电力大学学报, 2023, 43 (6): 71- 78.
	PAN Zhongzhi, KONG Ning, WANG Yantao. Joint optimal allocation method of energy-load-storage in power supply area to improve new energy consumption capacity[J]. Journal of Northeast Electric Power University, 2023, 43 (6): 71- 78.
21	毛田, 黄宁馨, 程韧俐, 等. 虚拟电厂效益评价指标体系构建及其范例分析[J]. 南方电网技术, 2022, 16 (6): 124- 131.
	MAO Tian, HUANG Ningxin, CHENG Renli, et al. Construction of the benefit evaluation index system of virtual power plant and its example analysis[J]. Southern Power System Technology, 2022, 16 (6): 124- 131.
22	张宁, 朱昊, 杨凌霄, 等. 考虑可再生能源消纳的多能互补虚拟电厂优化调度策略[J]. 发电技术, 2023, 44 (5): 625- 633.
	ZHANG Ning, ZHU Hao, YANG Lingxiao, et al. Optimal scheduling strategy of multi-energy complementary virtual power plant considering renewable energy consumption[J]. Power Generation Technology, 2023, 44 (5): 625- 633.
23	石梦舒, 许小峰, 张继广, 等. 考虑电-氢市场的虚拟电厂两阶段优化策略研究[J]. 发电技术, 2023, 44 (5): 645- 655.
	SHI Mengshu, XU Xiaofeng, ZHANG Jiguang, et al. A two-stage optimization strategy for virtual power plants considering the electricity-hydrogen market[J]. Power Generation Technology, 2023, 44 (5): 645- 655.
24	赵梓潼, 顾兵. 需求响应下基于电动汽车负荷聚合商的充放电电价与时段研究[J]. 东北电力大学学报, 2023, 43 (6): 79- 86.
	ZHAO Zitong, GU Bing. Research on charging and discharging price and time period basedon electric vehicle load aggregator under demand response[J]. Journal of Northeast Electric Power University, 2023, 43 (6): 79- 86.
25	宋天琦, 马韵婷, 张智慧. 光伏耦合电解水制氢系统作为虚拟电厂资源的运行模式与经济性分析[J]. 发电技术, 2023, 44 (4): 465- 472.
	SONG Tianqi, MA Yunting, ZHANG Zhihui. Operation mode and economy of photovoltaic coupled water electrolysis hydrogen production system as a kind of virtual power plant resource[J]. Power Generation Technology, 2023, 44 (4): 465- 472.

O层目标	A层指标	P层指标
VPP网络安全风险评估	VPP系统网络防护$ {a}_{1} $	VPP终端与管理控制平台动态双向访问认证$ {p}_{1} $
		基于VPP业务类型的安全隔离防护$ {p}_{2} $
		管控非授权网络接入$ {p}_{3} $
		面向VPP的恶意软件检测防护$ {p}_{4} $
		VPP时敏业务通信时延$ {p}_{5} $
		VPP通信网络光纤/4 G/5 G设备配置安全$ {p}_{6} $
	VPP运营商服务器防护$ {a}_{2} $	面向VPP的漏洞检查及补丁及时更新$ {p}_{7} $
		VPP系统服务器的访问控制机制$ {p}_{8} $
		VPP新系统初始化及配置安全$ {p}_{9} $
		协议安全$ {p}_{10} $
		面向VPP服务器的恶意软件防护$ {p}_{11} $
		VPP聚合调控数据防篡改$ {p}_{12} $
	VPP运营商控制类终端防护$ {a}_{3} $	VPP控制类终端加密认证及访问控制$ {p}_{13} $
		VPP控制类终端的固件漏洞检查及定期升级机制$ {p}_{14} $
		终端接入软件通信身份认证机制$ {p}_{15} $
	VPP运营商采集类终端防护$ {a}_{4} $	VPP采集类终端加密认证管理$ {p}_{16} $
		VPP采集类终端的固件漏洞检查及定期升级机制$ {p}_{17} $
		VPP采集类终端数据防篡改机制$ {p}_{18} $
	VPP运营商应用系统防护$ {a}_{5} $	防面向VPP业务的DDoS攻击机制$ {p}_{19} $
		VPP 软件系统（协调、控制、聚合、交易等）的异常检测机制$ {p}_{20} $
		面向VPP系统的时间同步攻击防护$ {p}_{21} $
		VPP 软件系统（协调、控制、聚合、交易等）通信身份认证机制$ {p}_{22} $
		基于VPP业务流程的安全防护$ {p}_{23} $
		面向VPP应用系统的恶意软件防护$ {p}_{24} $
	重要数据安全防护$ {a}_{6} $	VPP用户数据完整性$ {p}_{25} $
		VPP多交易主体用户隐私数据非授权访问防护$ {p}_{26} $
		VPP隐私数据脱敏策略设置$ {p}_{27} $
		VPP用户数据访问控制策略$ {p}_{28} $

O层目标	A层指标	P层指标
VPP网络安全风险评估	VPP系统网络防护$ {a}_{1} $	VPP终端与管理控制平台动态双向访问认证$ {p}_{1} $
		基于VPP业务类型的安全隔离防护$ {p}_{2} $
		管控非授权网络接入$ {p}_{3} $
		面向VPP的恶意软件检测防护$ {p}_{4} $
		VPP时敏业务通信时延$ {p}_{5} $
		VPP通信网络光纤/4 G/5 G设备配置安全$ {p}_{6} $
	VPP运营商服务器防护$ {a}_{2} $	面向VPP的漏洞检查及补丁及时更新$ {p}_{7} $
		VPP系统服务器的访问控制机制$ {p}_{8} $
		VPP新系统初始化及配置安全$ {p}_{9} $
		协议安全$ {p}_{10} $
		面向VPP服务器的恶意软件防护$ {p}_{11} $
		VPP聚合调控数据防篡改$ {p}_{12} $
	VPP运营商控制类终端防护$ {a}_{3} $	VPP控制类终端加密认证及访问控制$ {p}_{13} $
		VPP控制类终端的固件漏洞检查及定期升级机制$ {p}_{14} $
		终端接入软件通信身份认证机制$ {p}_{15} $
	VPP运营商采集类终端防护$ {a}_{4} $	VPP采集类终端加密认证管理$ {p}_{16} $
		VPP采集类终端的固件漏洞检查及定期升级机制$ {p}_{17} $
		VPP采集类终端数据防篡改机制$ {p}_{18} $
	VPP运营商应用系统防护$ {a}_{5} $	防面向VPP业务的DDoS攻击机制$ {p}_{19} $
		VPP 软件系统（协调、控制、聚合、交易等）的异常检测机制$ {p}_{20} $
		面向VPP系统的时间同步攻击防护$ {p}_{21} $
		VPP 软件系统（协调、控制、聚合、交易等）通信身份认证机制$ {p}_{22} $
		基于VPP业务流程的安全防护$ {p}_{23} $
		面向VPP应用系统的恶意软件防护$ {p}_{24} $
	重要数据安全防护$ {a}_{6} $	VPP用户数据完整性$ {p}_{25} $
		VPP多交易主体用户隐私数据非授权访问防护$ {p}_{26} $
		VPP隐私数据脱敏策略设置$ {p}_{27} $
		VPP用户数据访问控制策略$ {p}_{28} $

O层目标	A层指标	P层指标
VPP信息物理协同安全防护	VPP专网防公网渗透防护机制	VPP正常运行监测指标
	VPP专网防公网渗透防护机制	VPP异常发现监测指标
	VPP信息系统异常检测防护机制	基于攻击路径的信息系统失效监测指标
	VPP信息物理协同攻击防护机制	基于攻击路径的协同攻击异常发现监测指标
	VPP物理后果指标	故障失负荷数
		故障失稳数
		故障失用户数
		故障失负荷小时数
		故障失稳小时数
		故障失用户小时数
		节点连接状态
		指令执行状态
		负荷波动状态

O层目标	A层指标	P层指标
VPP信息物理协同安全防护	VPP专网防公网渗透防护机制	VPP正常运行监测指标
	VPP专网防公网渗透防护机制	VPP异常发现监测指标
	VPP信息系统异常检测防护机制	基于攻击路径的信息系统失效监测指标
	VPP信息物理协同攻击防护机制	基于攻击路径的协同攻击异常发现监测指标
	VPP物理后果指标	故障失负荷数
		故障失稳数
		故障失用户数
		故障失负荷小时数
		故障失稳小时数
		故障失用户小时数
		节点连接状态
		指令执行状态
		负荷波动状态

编号	网元	安全加固策略
01	Web服务器	Web服务器恶意软件检测系统版本需要更新
02	网络安全防护系统	建议增加入侵检测系统
03	Web Server（Web服务器）、VPP MC Server（VPP管理控制平台服务器）	Web Server和、VPP M&C Server关闭不使用的端口
04	防火墙	防火墙应用控制策略应改进配置，阻断非法数据传输
05	Web服务器	修补LFI漏洞
06	VPP终端	终端漏洞需及时检测并更新、并增设软件通信双认证机制、固件升级
07	VPP M&C Server	VPP M&C Server增设隐私数据授权访问机制
08	VPP运营商服务器	设置新系统配置模板；检查已安装系统的配置
09	VPP数据存储设备	增设隐私数据授权访问机制及隐私数据保护脱敏处理机制