电网工业控制系统安全威胁监测系统设计及应用  

Design and Application of the Security Threat Monitoring Technologies for Power Grid Industry Control System

作　　者：俞海国[1] 马先[1] 徐有蕊 苏生平[1] 李楠芳[1] 尚西元[1] 马学智[1] 

机构地区：[1]国网青海省电力公司,青海西宁810000

出　　处：《电力信息与通信技术》2016年第7期76-80,共5页Electric Power Information and Communication Technology

摘　　要：通过研究电网工业控制系统的发展现状和存在的安全问题,针对新能源电站调度监控系统分析典型的安全威胁,利用电网工控系统网络数据采集和协议分析技术进行安全威胁监测,并基于大数据分析技术设计电网工控安全威胁监测系统和现网部署方案,系统通过采集电网的安全事件进行大数据分析,可有效监测针对电网工控系统的攻击,同时结合电网工业控制系统资产识别和管理,能够发现针对关键设备的异常攻击行为。Based on the analysis of development status and existing security problems in power grid industry control system, aiming at the typical security threats of the dispatching monitoring system for new energy power station, this paper utilizes network data acquisition and protocol analysis technology of power network industry control system to perform the security threat monitoring. The security threat monitoring system and network deployment scheme based on big data analysis are designed. The system collects the security event data from the power grid industry control system and gives the analysis based on big data technology to deal with attacks. With asset identification and management, the attack aiming at the key power grid device also can be identified.

关 键 词：电网工业控制系统 安全威胁分析 安全监测 

分 类 号：TP309[自动化与计算机技术—计算机系统结构]