基于大数据分析的电力监控网络安全主动防护策略研究  

Active protection strategy of power monitoring network security based on big data analysis

作　　者：朱海鹏[1] 赵磊[1] 秦昆[1] 王耀斐[1] Zhu Haipeng;Zhao Lei;Qin Kun;Wang Yaofei(State Grid Jining Power Supply Company,Jining 272000,Shandong,China)

机构地区：[1]国网济宁供电公司,山东济宁272000

出　　处：《电测与仪表》2020年第21期133-139,共7页Electrical Measurement & Instrumentation

基　　金：国网山东省电力公司科技项目(2018A-111)。

摘　　要：作为电力工业的关键基础设施之一,电力监控系统的网络安全对电网稳定运行有着非常重要的意义。目前电力监控网络安全防护技术无法保证所有的网络攻击都能够有效防护。基于此,针对电力监控网络无法有效检测多类型网络攻击形成的复合攻击问题,提出了一种新的主动检测防护策略。该策略基于D-S证据理论,计算安全事件的偏离度,根据偏离度大小,采用局部线性加权确定安全事件的权重,形成基于局部线性加权的安全事件证据组合。在此基础上,针对多类型网络攻击,构建了基于证据分类的复合攻击检测防护策略。实验结果表明,该方案不仅对单一攻击源具有非常良好的判别精确度,还能够有效甄别多类型网络攻击行为,对电网安全运行具有参考意义。As one of the key infrastructure of power industry,the network security of power monitoring system is of great significance to the stable operation of power grid.At present,the security protection technology of power monitoring network cannot guarantee that all network attacks can be effectively protected.On this basis,a novel active detection and protection strategy is proposed to solve the problem that the power monitoring network cannot effectively detect the multiple types of network attacks.Based on D-S evidence theory,the deviation degree of security incidents is calculated.According to the deviation degree,the local linear weighting is adopted to determine the weight of safety incidents,and the evidence combination of safety incidents based on local linear weighting is formed.On this basis,for multiple types of network attacks,a compound attack detection and protection strategy based on evidence classification is constructed.The experimental results show that the proposed scheme not only has good discrimination accuracy for a single attack source,but also can effectively identify multiple types of network attacks,which has reference significance for the safe operation of power grid.

关 键 词：电力监控网络 D-S证据理论 聚类理论 复合攻击 

分 类 号：TM93[电气工程—电力电子与电力传动]