基于非扫描漏洞探测的输电信息安全防御研究  

Research on Transmission Information Security Defense Based on Non Scanning Vulnerability Detection

作　　者：靳晓琪 JIN Xiaoqi(EHV Power Transmission Company of China Southern Power Grid,Guangzhou 510670)

机构地区：[1]中国南方电网有限责任公司超高压输电公司,广州510670

出　　处：《电气工程学报》2021年第3期192-198,共7页Journal of Electrical Engineering

摘　　要：传统方法在进行输电信息安全防御时,未进行输电信息特征量训练学习,导致信息安全防御效果不理想。为此,引入非扫描漏洞探测技术,对输电信息安全防御进行优化。在特定时间里,执行程序获取程序执行事件序列,完成基于信息聚合的输电信息的动态特征提取;采用TF-IDF算法实现动态样本特征集的特征向量化,将特征量输入机器学习模型,通过Text-CNN、Logistic和随机森林等算法对提取的动态特征进行训练学习,获取漏洞探测结果;针对探测出的安全漏洞产生的安全问题,采用线路检测终端的安全防御、安全存储和安全隔离三个方面实现输电信息安全防御。试验验证该方法准确探测电网漏洞,且对输电信息安全防御效果较好。The traditional method does not conduct the training and learning of the characteristics of the transmission information when conducting the transmission information security defense,which leads to the unsatisfactory effect of the information security defense.To this end,non-scanning vulnerability detection technology is introduced to optimize transmission information security defense.In a specific time,the execution program obtains the program execution event sequence,completes the dynamic feature extraction of the transmission information based on information aggregation;uses the TF-IDF algorithm to realize the feature vectorization of the dynamic sample feature set,and the feature quantity is input into the machine learning model through Text-CNN,Logistic,and random forest algorithms train and learn the extracted dynamic features to obtain the vulnerability detection results;for the security problems caused by the detected security vulnerabilities,the security defense,secure storage and security isolation of the line detection terminal are implemented transmission information security defense.Experiments verify that this method accurately detects power grid loopholes and has a good effect on transmission information security defense.

关 键 词：非扫描漏洞探测 输电信息 安全漏洞 TF-IDF算法 

分 类 号：TP309[自动化与计算机技术—计算机系统结构]