基于自动化渗透测试的电力监控系统网络安全脆弱性检测  

Network security vulnerability detection of power monitoring system based on automated penetration test

作　　者：王晓翼 WANG Xiaoyi(China Southern Power Grid Peak and Frequency Modulation Power Generation Co.,Ltd.,Guangzhou 511400,China)

机构地区：[1]南方电网调峰调频发电有限公司,广东广州511400

出　　处：《电子设计工程》2023年第5期75-79,共5页Electronic Design Engineering

摘　　要：现有的电力监控系统网络安全脆弱性检测方法在检测过程中易出现延时,导致误检率过高。针对上述问题,研究了基于自动化渗透测试的电力监控系统网络安全脆弱性检测方法。获取电力监控系统网络中的流表项,建立针对网络安全脆弱性检测的网络信息流表权值,分析电力监控网络中网络信息与电力信息交互的流表项信息。采用神经网络建立网络安全脆弱性模型,并利用其计算电力监控系统中电力信息节点与网络节点特征值,实现电力监控系统网络安全脆弱性检测。实验结果表明,基于自动化渗透测试的电力监控系统网络安全脆弱性检测方法能够有效地缩短检测时延,降低误检率。The existing network security vulnerability detection methods of power monitoring system are prone to delay in the detection process,resulting in high false detection rate. Aiming at the above problems,the network security vulnerability detection method of power monitoring system based on automated penetration test is studied. Obtain the flow table items in the power monitoring system network,establish the network information flow table weights for network security vulnerability detection,and analyze the flow table item information of network information and power information interaction in the power monitoring network. The network security vulnerability model is established by using neural network,and the eigenvalues of power information nodes and network nodes in power monitoring system are calculated to realize the network security vulnerability detection of power monitoring system. The experimental results show that the network security vulnerability detection method of power monitoring system based on automatic penetration test can effectively shorten the detection delay and reduce the false detection rate.

关 键 词：自动化渗透 渗透测试 电力监控 网络安全 脆弱性检测 

分 类 号：TN393[电子电信—物理电子学]