智能变电站网络安全态势感知技术

doi:10.11959/j.issn.1000-0801.2015386

摘要/Abstract

摘要：

摘要：网络安全态势感知技术在智能变电站中的应用，有助于从更独特、更高层次的安全视角分析评估智能变电站的安全状况。在分析智能变电站安全威胁的基础上，综合物理安全、网络安全、系统安全、协议安全、数据安全等因素提出了一种安全态势感知框架，同时提供了一种变电站网络安全监控方案。即使用专门的智能变电站网络安全态势感知装置收集安全事件的发生情况并对其结果进行分析。此外，描述了设计方案中采用的几个关键技术。最后，提供了智能变电站网络安全态势感知装置的软硬件设计方案。该方案采用多层软件体系结构设计，并使用了英特尔Sandy Bridge处理器、总线结构和模块化设计技术等来满足系统的高性能需求。

关键词: 态势感知, 网络安全, 智能变电站

Abstract:

On the basis of analyzing the security threats in smart substation,a security situation awareness framework was proposed,combined with integrated physical security,network security,system security,protocol security,data security and so on.And a network security monitoring solution for substations was provided.It was a special intelligent substation network security situation awareness device which could collect the security events,analyze them and generate situation analysis results.Further more,everal key technologies used in our frameworks were focused on.Finally,a design scheme including hardware and software for the smart substation network security awareness system and its implementation architecture were described,in which a multi-layer software architecture was adopted by the system,and a combinatory of the Intel Sandy Bridge,the bus structure and a modular design technology,was adopted in order to meet the need of high performance.

Key words: situation awareness, network security, smart substation

郭静,黄伟,郭雅娟,周超,陈昊. 智能变电站网络安全态势感知技术[J]. 电信科学, 2015, 31(Z1): 202-208.

Jing GUO,Wei HUANG,Yajuan GUO,Chao ZHOU,Hao CHENG. Network security situation awareness technology in smart substation[J]. Telecommunications Science, 2015, 31(Z1): 202-208.

图/表 5

参考文献 8

[1]	MACKIEWICZ R E . Overview of IEC61850 and benefits[C]// IEEE Power Systems Conference and Exposition, October 29-November 1,2006, Atlanta,GA,USA. New Jersey: IEEE Press, 2016:623-630.
[2]	SLAY J , MILLER M . Lessons learned from the maroochy water breach[J]. IFIP Springer Boston, 2007(253): 73-82.
[3]	文继锋，盛海华，周强，等. 智能变电站继电保护在线监测系统设计与应用[J]. 江苏电机工程， 2015,34（1）:21-24. WEN J F , SHENG H H , ZHOU Q , et al. Design and application of relay protection on-line monitoring system in the intelligent substation[J]. Jiangsu Electrical Engineering, 2015,34（1）:21-24.
[4]	ENDSLEY M . .Toward a theory of situation awareness in dynamic systems[J]. Journal of the Human Factors, 2005(1): 32-64.
[5]	赖积保，王颖，王慧强，等. 基于多源异构传感器的网络安全态势感知系统结构研究[J]. 计算机科学， 2011,38（3）:144-149. LAI J B , WANG Y , WANG H Q , et al. Research on network security situation awareness system architecture based on multi-source heterogeneous sensors[J]. Computer Science, 2011,38（3）:144-149.
[6]	汤永利，李伟杰，于金霞，等. 基于改进D-S证据理论的网络安全态势评估方法[J]. 南京理工大学学报， 2015,39（4）:405-411. TANG Y L , LI W J , YU J X , et al. Network security situational assessment method based on improved D-S evidence theory[J]. ournal of Nanjing University of Science and Technology, 2015,39（4）:405-411.
[7]	沈富宝，王中秋 . 苏州首座220kV智能变电站分析[J]. 江苏电机工程， 2015（2）:45-48. SHEN F B , WANG Z Q . The insulating oil purifying technology applied in online monitoring[J]. Jiangsu Electrical Engineering, 2015（2）:45-48.
[8]	HJELMVIK E.The spid algorithm-statistical protocol identification[EB/OL].[ 2013-04-23]. .

[1]	周胜利, 蒋可怡, 徐博, 徐睿, 张熙康, 赵泉喆, 徐阳东. 面向电信网络诈骗治理的网络安全课程构建效能评估研究[J]. 电信科学, 2023, 39(6): 122-128.
[2]	张乐, 马洪源. 运营商网络边缘云安全实践[J]. 电信科学, 2023, 39(4): 165-172.
[3]	陈伟雄, 杨晓晨, 春增军, 李若兰, 张华. 电力企业网络安全威胁情报管理体系的研究与实践[J]. 电信科学, 2022, 38(7): 184-189.
[4]	刘亚天, 呼博文, 陈茂飞, 刘东鑫. 5GC安全态势感知系统研究[J]. 电信科学, 2022, 38(11): 73-85.
[5]	顾玥, 李丹, 高凯辉. 基于机器学习和深度学习的网络流量分类研究[J]. 电信科学, 2021, 37(3): 105-113.
[6]	高明,罗锦,周慧颖,焦海,应丽莉. 一种基于拟态防御的差异化反馈调度判决算法[J]. 电信科学, 2020, 36(5): 73-82.
[7]	李玉峰,陆肖元,曹晨红,李江涛,朱泓艺,孟楠. 智能网联汽车网络安全浅析[J]. 电信科学, 2020, 36(4): 36-45.
[8]	杨志强,粟栗,齐旻鹏,杨波. 5G安全技术与标准[J]. 电信科学, 2020, 36(12): 1-19.
[9]	何国锋. 零信任架构在5G云网中应用防护的研究[J]. 电信科学, 2020, 36(12): 123-132.
[10]	谢萍,刘孝颂. 基于区块链的SDN物联网部署安全[J]. 电信科学, 2020, 36(12): 139-146.
[11]	肖芫莹,游耀东,向黎希. 代码审计系统的误报率成因和优化[J]. 电信科学, 2020, 36(12): 155-162.
[12]	余航,王帅,金华敏. 基于RASP的Web安全检测方法[J]. 电信科学, 2020, 36(11): 113-120.
[13]	王俊文. 未来工业互联网发展的技术需求[J]. 电信科学, 2019, 35(8): 26-38.
[14]	李聪, 雷波, 解冲锋, 李云鹤. 基于区块链技术的可信网络[J]. 电信科学, 2019, 35(10): 60-68.
[15]	王健全,马彰超,李新中,孙雷,胡昌玮. 量子保密通信网络架构及移动化应用方案[J]. 电信科学, 2018, 34(9): 10-19.