网络环境下变电站自动化通信系统脆弱性评估  

Vulnerability Assessment for Communication System of Network-based Substation Automation System

作　　者：刘念[1] 张建华[1] 段斌[2] 刘文霞[1] 张昊[1] 

机构地区：[1]华北电力大学电力系统保护与动态安全监控教育部重点实验室,北京市102206 [2]湘潭大学信息工程学院,湖南省湘潭市411105

出　　处：《电力系统自动化》2008年第8期28-33,共6页Automation of Electric Power Systems

基　　金：国家自然科学基金资助项目(50677058);北京市教育委员会共建项目专项资助项目~~

摘　　要：结合变电站自动化通信系统的特点和分布式系统脆弱性理论,提出网络环境下变电站自动化通信系统脆弱性评估方法。通过对系统的形式化定义,构造表征攻击过程的脆弱性状态图;参考指数分布特性,以脆弱度因子和等效攻击代价为参量,定义了状态转换的脆弱度函数;并按照脆弱性状态图的连接方式,定义了4种类型的脆弱度计算模型。进一步考虑变电站自动化通信系统的信息安全特点,设计了基于层次分析法(AHP)和逼近理想解排序法(TOPSIS)的脆弱度因子量化方法。根据IEC61850标准构建了评估算例,通过不同安全方案下的脆弱度计算比较,表明该方法能有效量化系统脆弱度,对安全策略制定起指导作用。By taking into account the characteristics of network-based substation automation system （SAS） and distributed system vulnerability concept of computer science, a vulnerability assessment method for SAS to cyber attack is proposed. The substation communication system is classified into six basic models to construct vulnerability state graph （VSG）. The vulnerability of single action is defined based on the exponential distribution function including parameters called vulnerability factor and equivalent attacking cost, and then the vulnerability values of target systems are calculated by four connection models of VSG. Furthermore, in consideration of the characteristics of SAS information security, a vulnerability factor quantitative method based on analytic hierarchy process （AHP）and technique of order preference by similarity to ideal solution（TOPSIS）is designed. An evaluation example, which is constructed by IEC 61850 standard, shows that the proposed method is applicable to evaluating the vulnerability of network-based SAS.

关 键 词：变电站自动化 通信系统 信息安全 脆弱性状态图 层次分析法 

分 类 号：TM76[电气工程—电力系统及自动化]