检索规则说明:AND代表“并且”;OR代表“或者”;NOT代表“不包含”;(注意必须大写,运算符两边需空一格)
检 索 范 例 :范例一: (K=图书馆学 OR K=情报学) AND A=范并思 范例二:J=计算机应用与软件 AND (U=C++ OR U=Basic) NOT M=Visual
机构地区:[1]北京南瑞智芯微电子科技有限公司,北京100192
出 处:《信息安全与通信保密》2013年第5期62-65,71,共5页Information Security and Communications Privacy
摘 要:随着电网的信息化、数字化、自动化和互动化的发展,要求智能电网能够通过电子终端将用户之间、用户和电网公司之间形成网络互动和即时连接,实现数据实时、高速的采集和读取。网络的互联和信息的采集因受到越来越多的安全攻击而面临着信息安全问题。毛刺电压攻击是最常见的一种故障注入攻击方式,它是通过突然改变供电电压的方式对安全设备进行恶意攻击,使其进入错误运行状态进而获得其所包含的机密信息。该方案提出了一种针对毛刺电压攻击的防御电路,该电路首先将毛刺电压采集进来;其次对该毛刺电压进行运算处理,将处理之后的毛刺电压和基准电压进行比较来判断该攻击是否构成攻击;最后将构成攻击的报警信号锁存以供系统进行处理。通过数学运算和实际电路仿真得出,本电路具有不受被攻击电压直流值的影响、功耗小、检测毛刺电压信号的频率范围宽的特点。因此,可以广泛应用于智能卡、智能终端和电力采集终端中,避免了在信息采集的过程中由于受到毛刺电压攻击而造成信息泄露。With the development of informatization, digitization, automation and interaction, smart grid is required, through electronic terminals of between the users and power grid corporation, to realize interaction and immediate connection and implement real-time and high-speed data collection and reading. Network interconnection and information collection, due to the growing security attacks, are encountered with serious infosec problem. Power glitch attack, that is, the sudden change of power-supply voltage, is the most common attack mode, this mode, through injecting faults into the electronic device, makes the security device in a wrong operation state and thus obtains the confidential information. This paper proposes a novel detector for capturing these malicious attacks. The detector first samples the power glitch signal, then through comparing the sampled signal with the reference voltage after operation process, determines whether the glitch signal could constitute an attack or not, and finally, if the glitch signal constitutes an attack, the detector would generate and latch the alarm signal for system processing. Mathematical derivation and simulation results indicate that this detector is low in power consumption, not affected by the attacked DC voltage, and could detect wide glitch frequency range. Therefore, the detector could be widely applied in the smart card, smart terminal and power acquisition terminal, thus avoiding the information disclosure the power glitch attack.
分 类 号:TM761.1[电气工程—电力系统及自动化] TP309[自动化与计算机技术—计算机系统结构]
正在载入数据...
正在载入数据...
正在载入数据...
正在载入数据...
正在载入数据...
正在载入数据...
正在载入数据...
正在链接到云南高校图书馆文献保障联盟下载...
云南高校图书馆联盟文献共享服务平台 版权所有©
您的IP:216.73.216.195