用电信息采集系统中集中器脆弱性分析  

Vulnerability analysis of concentrator in electricity information acquisition system

作　　者：董重重 夏水斌 孙秉宇 何欢 余鹤 张龙 Dong Chongchong;Xia Shuibin;Sun Bingyu;He Huan;Yu He;Zhang Long(Measurement Center of State Grid Hubei Electric Power Co.,Ltd.,Wuhan 430080,China;School of Electronic Information,Wuhan University,Wuhan 430072,China)

机构地区：[1]国网湖北省电力有限公司计量中心,武汉430080 [2]武汉大学电子信息学院,武汉430072

出　　处：《电测与仪表》2020年第8期128-134,共7页Electrical Measurement & Instrumentation

基　　金：国家自然科学基金资助项目(51707135);国网湖北省电力有限公司电力科学研究院外委研究项目(HB18420315)。

摘　　要：用电信息采集系统中集中器起着至关重要的作用,然而其系统本身面临诸如硬件攻击、软件漏洞、网络攻击的安全性威胁。文中讨论了集中器的的构成、特点、功能及其安全问题,分析了集中器的脆弱性问题的来源、易受到的攻击方式及相对应的预防措施。以通过对集中器的控制实现对主站的攻击为例,采用MD5withRSA数字签名算法从集中器安全防护入手解决非法入侵主站的问题,结合其通信的特点以及存在的脆弱点进行保护,与以往的方法对比提高了其运行的安全性。The concentrator plays a vital role in electricity information acquisition system,but the system itself faces security threats such as hardware attacks,software vulnerabilities,and network attacks.This paper firstly discusses the composition,characteristics,functions and security of the concentrator,and then,analyzes the source of the vulnerability in concentrator,the vulnerable attack methods and the corresponding preventive measures.Finally,taking the attack on the primary station by controlling the concentrator as an example,the problem of illegally invading the primary station is solved from the aspects of intrusion detection and protection,and the characteristics of the communication and the existing vulnerable points are protected.Compared with the previous method,the security of its operation is improved.

关 键 词：采集终端 脆弱性 非法入侵 安全防御 

分 类 号：TM933[电气工程—电力电子与电力传动]