面向电力网络的多属性SCADA入侵检测  

Multi-Attribute SCADA Intrusion Detection for Power Network

作　　者：蒋晨达[1] 李津[1] JIANG Chen-da;LI Jin(Fujian water power technical college,Yong＇an,366000,China)

机构地区：[1]福建水利电力职业技术学院,福建永安366000

出　　处：《电力学报》2018年第4期340-345,共6页Journal of Electric Power

摘　　要：电力系统网络中监控和数据采集系统(SCADA)的互联性和复杂性的增加使系统暴露在许多潜在的漏洞中。研究提出了一种基于SCADA的入侵检测系统(IDS)新方法。该系统分析多个属性,以减轻各种网络攻击威胁。多属性IDS包括一个异构的白名单和基于行为的概念,以使SCADA网络系统更加安全。研究还提出了一种基于IDS的多层网络安全框架,以保护智能电网中的SCADA网络安全,而不影响正常数据的可用性。此外,研究还提出了一种基于SCADA的网络安全试验台,对模拟攻击进行了研究,并对该方法进行了验证。The increased interconnectivity and complexity of Supervisory Control and Data Acquisition（SCADA）systems in power system networks has exposed the systems to a multitude of potential vulnerabilities.In this research we present a novel approach for a next generation SCADA-specific Intrusion Detection System（IDS）.The proposed system analyses multiple attributes in order to mitigate varied cyberattacks threats.The multi-attribute IDS comprises a heterogeneous whitelist and behavior-based concept in order to make SCADA cyber systems more secure.This research also proposes a multilayer cyber-security framework based on IDS for protecting SCADA cyber-security in Smart Grids without compromising the availability of normal data.In addition,this research presents a SCADA-specific cyber-security test-bed to investigate simulated attacks and which has been used in the paper to validate the proposed approach.

关 键 词：智能电网 SCADA 网络安全 入侵检测 

分 类 号：TP29[自动化与计算机技术—检测技术与自动化装置]