智能变电站嵌入式终端安全测试方法研究  

Research on Security Testing Technologies for Embedded Terminals in Intelligent Substation

作　　者：李福阳 李俊娥[1] 刘林彬 刘威[1] 林海[1] 倪明 LI Fuyang;LI Jun′e;LIU Linbin;LIU Wei;LIN Hai;NI Ming(Key Laboratory of Aerospace Inform ation Security and Trusted Computing,Ministry of Education,School of Cyber Science and E ngineering,Wuhan University,Wuhan 430072,China;NARI Group Corporation(State Grid Electric Power Research Institute),Nanjing 211106,China;NARI Technology Co.,Ltd.,Nanjing 211106,China;State Key Laboratory of Smart Grid Protection and Control,Nanjing 211106,China)

机构地区：[1]空天信息安全与可信计算教育部重点实验室,武汉大学国家网络安全学院,武汉市430072 [2]南瑞集团有限公司(国网电力科学研究院有限公司),南京市211106 [3]国电南瑞科技股份有限公司,南京市211106 [4]智能电网保护和运行控制国家重点实验室,南京市211106

出　　处：《电力建设》2021年第2期126-136,共11页Electric Power Construction

基　　金：国家电网有限公司总部科技项目“针对网络攻击的电网信息物理系统协同运行态势感知与主动防御方法研究”(SGJSDK00KJJS1800315)。

摘　　要：智能变电站中,量测与控制业务用嵌入式终端的脆弱性是变电站受到网络安全威胁的重要原因。文章分析了智能变电站嵌入式终端的脆弱性和可能遭受的网络攻击,提出了智能变电站嵌入式终端安全测评指标及内容,同时针对各测评内容,研究了相应的安全测试技术。文章以国内某省电力公司智能变电站实验室为依托对五类嵌入式终端进行了安全测评,给出了测试过程、测评结果和整改建议,示范了所提测评指标及测试技术的应用方法。文章工作可用于智能变电站嵌入式终端的入网前或产品升级后的安全性测试,以充分发现和消除其脆弱性,提升终端安全水平,同时可为智能变电站二次系统在线安全防护提供参考。Vulnerability of embedded terminals used for measurement and control has been one crucial cyber-security threat for intelligent substation. According to fragility analysis, a security evaluation index system for embedded terminals in intelligent substation is proposed in this paper. Research on security testing technologies for embedded terminals in intelligent substation is also carried on to cover all indices. Supported by an intelligent substation laboratory, a security assessment for five types of embedded terminal is conducted, which gives the assessment process, results and rectification suggestions. The work in this paper can be used to evaluate the availability, to discover and patch the vulnerability, and finally to improve the level of security for intelligent substation. Meanwhile, this study provides a reference for online security protection for secondary system of intelligent substation.

关 键 词：智能变电站 嵌入式终端 网络安全 测评指标 测试技术 

分 类 号：TM769[电气工程—电力系统及自动化] TP309[自动化与计算机技术—计算机系统结构]