面向电力信息物理系统的虚假数据注入攻击研究综述  

A Review on False Data Injection Attack Toward Cyber-physical Power System

作　　者：王琦[1] 邰伟[1] 汤奕[1] 倪明 WANG Qi;TAI Wei;TANG Yi;NI Ming(School of Electrical Engineering,Southeast University,Nan-jing 210096;NARI Group Corporation(State Grid Electric Power Research Institute),Nanjing 211000;NARI Technology Co.Ltd.,Nanjing 211000;State Key Laboratory of Smart Grid Protection and Control,Nanjing 211000)

机构地区：[1]东南大学电气工程学院,南京210096 [2]南瑞集团(国网电力科学研究院)有限公司,南京211000 [3]国电南瑞科技股份有限公司,南京211000 [4]智能电网保护和运行控制国家重点实验室,南京211000

出　　处：《自动化学报》2019年第1期72-83,共12页Acta Automatica Sinica

基　　金：国家重点研究发展计划(2017YFB0903000);国家自然科学基金(51577030;51707032);国家电网公司总部科技项目(针对网络攻击的电网信息物理系统协同运行态势感知与主动防御方法研究)资助~~

摘　　要：随着电力信息通信技术的发展与应用,电力流与信息流深度融合,共同实现对系统的全景状态感知与控制决策,电力系统转变成典型的信息物理系统(Cyber physical system, CPS).开放的通信环境与复杂的信息物理耦合交互过程,使得信息安全风险成为影响电力系统安全稳定运行的重要因素.其中,虚假数据注入攻击(False data injection attack, FDIA)通过破坏网络数据完整性以干扰控制决策,是一种典型的网络攻击方式.本文针对面向电力CPS的虚假数据注入的攻击过程和防御手段进行了分析与总结.从攻击者视角分析了FDIA的攻击目标、策略及后果;从防御者视角总结了保护与检测环节中的各类方法;最后基于联合仿真技术,提出了针对虚假数据攻防过程建模和评估的电力CPS联合攻防平台.With the development and application of information communication technology, the power flow and the information flow are becoming deeply integrated in order to achieve panoramic state awareness and control decision. Therefore the power system has been transformed into a typical cyber-physical system (CPS). Considering the open communication environment and complex cyber physical coupling mechanism, the information risk has become an important issue posing severe threats to the secure operation of power systems. False data injection attack (FDIA), as a typical attack mode destroying data integrity, can interfere with the control decision. In this paper, the attack process and defense method of false data injection are analyzed and summarized. Firstly, from the perspective of attackers, the goals, strategies and consequences of FDIA are comprehensively discussed. Then, from the perspective of defenders, the protection and detection countermeasures are discussed. Finally the co-simulation technology is utilized to construct associated attack-defense platform of cyber-physical power system (CPPS), which is aimed at modeling and assessment of the attack and defense processes of false data injection.

关 键 词：信息物理系统 虚假数据注入 安全监控 联合仿真 

分 类 号：TP309[自动化与计算机技术—计算机系统结构] TM76[自动化与计算机技术—计算机科学与技术]