电力信息物理系统跨域攻击协同防御架构及机制研究  

Research of Architecture and Mechanism of Coordinative Defense Methods for Cross-Domain Attacks of Cyber Physical System

作　　者：张涛 费稼轩 王琦[2] 邵志鹏 蔡星浦 ZHANG Tao;FEI Jia-xuan;WANG Qi;SHAO Zhi-peng;CAI Xing-pu(Grid Digital Technology Institute,State Grid Smart Grid Research Institute,Beijing 100190,China;School of Electrical Engineering,Southeast University,Nanjing,Jiangsu 210096,China)

机构地区：[1]国网智能电网研究院电网数字化技术研究所,北京100190 [2]东南大学电气工程学院,江苏南京210096

出　　处：《电子学报》2024年第4期1205-1218,共14页Acta Electronica Sinica

基　　金：国家自然科学基金(No.52261145704)。

摘　　要：我国电力基础设施已经发展成为具有高度信息化、自动化、智能化特征的信息物理融合系统.信息-物理交互在显著提升电力供给效率和性能的同时,也引入了新型网络安全威胁,通过发生于信息域并明确作用于物理域的跨域攻击,可造成电力基础设施系统性瘫痪,继而引发大面积停电事故,而当前孤立的信息侧或物理侧防御体系难以有效应对跨域攻击威胁.本文介绍了电力系统面临的信息物理跨域攻击威胁现状,分析了传统防御方法面对跨域攻击时存在的不足,提出了一种信息物理协同的跨域攻击防御架构,在针对跨域攻击传播的不同阶段,从感知、辨识、阻断三个角度设计了防御方法,通过算例验证了所提信息物理协同防御架构能够有效保障电力系统安全稳定运行.The electric power infrastructure of China has developed into a highly informationized,automated,and in⁃telligent cyber physical integration system.The interaction of cyber and physical not only significantly improves the effi⁃ciency and performance of power supply,but also introduces new network security threat.Cross-domain attacks that occur⁃ring in the cyber domain and acting on the physical domain can cause the systematic breakdown of power infrastructure and then lead to large-scale power outages.However,the current isolated cyber side or physical side defense system is difficult to effectively deal with these cross-domain attack threats.This paper introduces the current situation of information and physical cross domain attack threats faced by the power system,elaborates on the shortcomings of traditional defense meth⁃ods in facing cross domain attacks,proposes a cross domain attack defense architecture based on information and physical collaboration,and designs defense methods from the perspectives of perception,identification,and blocking on the attack time scale.Through example design,it is proven that the proposed information and physical collaboration defense architec⁃ture can ensure the safe and stable operation of the power system.

关 键 词：电力信息物理系统 信息物理协同 跨域攻击 协同防御 知识-数据驱动 电力系统安全 

分 类 号：TN915.08[电子电信—通信与信息系统]