电力信息物理系统网络攻击与防御研究综述(二)检测与保护

从针对电力信息物理系统(电力CPS)网络攻击的检测和保护两个方面,对当前国内外研究进行了梳理和归纳,发掘相关研究问题的本质和目的。在检测方面,介绍了基于偏差和特征的防御检测实现思路及其在信息侧和物理侧的实践方法;在保护方面,介绍了以被动防御为主的信息侧保护方法和基于资源配置和校正控制的物理侧保护方法。在现有研究基础上,对电力CPS网络攻击的检测和保护领域关键技术进行了提炼,并对未来研究方向进行了展望。

A Review on Research of Cyber-attacks and Defense in Cyber Physical Power Systems: Part Two Detection and Protection

Following the previous paper in the series, this paper provides a review of existing research methods on the sub-topics of attack detection and defense strategy. The purposes and natures of research work of the sub-topics are concluded, and the deficiencies of existing researches are described considering the characteristics of cyber physical power system(CPPS). In terms of attack detection, some methods are proposed based on deviation and feature, which are implemented in cyber and physical sides in CPPS. In terms of protection, existing researches are concluded as the protection methods deployed on cyber side which are mainly reactive protection measures, and the protection methods deployed on physical sides which are mainly based on the ideas of redundant resources and corrective control. On the basis of existing research, the key techniques in CPPS cyber-attack detection and defense are drawn, and future research proposals in these fields are made in accordance with research perspective of modeling, in order to improve the real ability of CPPS to defend itself against cyber-attacks.