多源大规模电网的多阶攻击风险感知量化和防御技术  

Multi-stage Attack Risk Quantification and Defense Techniques for Multi-source Large-scale Power Grids

作　　者：骆晨 冯玉 吴凯 周建军 吴少雷 郭小东 LUO Chen;FENG Yu;WU Kai;ZHOU Jian-jun;WU Shao-lei;GUO Xiao-dong(State Grid Anhui Electric Power Research Institute,Hefei 233011,China;Anhui Electric Power Corporation,Hefei 233001,China)

机构地区：[1]国网安徽省电力有限公司电力科学研究院,合肥233011 [2]国网安徽省电力有限公司,合肥233011

出　　处：《科学技术与工程》2023年第30期12976-12984,共9页Science Technology and Engineering

基　　金：安徽省电力公司科技项目(521205160021)。

摘　　要：随着电网的规模逐渐扩大,虽然配电网的数字化为电网运营带来了诸多好处,但也增加了严重的网络安全威胁所带来的风险;为了检测不断发展的电力网络中潜在的攻击和漏洞,满足对安全和隐私机制的额外研究需求,需要一个自动化过程来系统地处理大量跨域信息和关联各种网络情报,以正确评估情况;为此提出了基于深度学习和机器学习的电网多阶段攻击感知风险量化和防御技术,通过人工神经网络就检测电网中是否存在攻击,对系统建模攻击防御树进行多阶段上下文攻击风险量化,并且利用查杀链寻找最优路径进行防御,实现电网威胁全自动化感知和防御决策。With the gradual expansion of the power grid,the digitalization of the distribution network has brought numerous benefits to the operation of the power grid.However,it has also increased the risks posed by serious cyber security threats.To detect potential attacks and vulnerabilities,and to meet the additional research needs for security and privacy mechanisms,an automated process is required to systematically process a large amount of cross-domain information and correlate various network intelligence to accurately assess the situation.For this purpose,which proposed a power grid multi-stage attack perception risk quantification and defense technology.This technology employs an artificial neural network to detect attacks in the power grid and performs multi-stage context attack risk quantification on the system modeling attack defense tree.Furthermore,the proposed technology utilizes the killing chain to find the optimal path for defense,ultimately achieving a fully automated threat perception and defense decision system for the power grid.

关 键 词：智能电网 数据安全 跨域异构数据 风险评估 机器学习 多阶段上下文感知 

分 类 号：TM732[电气工程—电力系统及自动化]