基于虚拟化动态部署的电力监控系统威胁评估体系

电力监控系统利用主动防御技术进行感知与捕获,并准确分析出攻击行为特征,可以及时发现电力监控系统中存在的高级持续性威胁(Advanced Persistent Threat,APT)。基于虚拟化动态部署的电力监控系统,融合主动防御技术,针对电力监控系统中攻击对设备造成的危害和泄露数据的敏感性,构建了一套可度量的四级威胁评估指标体系和基于层次化模型的评估方法。通过对某电力公司智能变电站检测技术实验室的电力监控系统进行实例评估,从危害程度、发生时间、影响范围等角度说明了该体系针对复杂电力监控系统评估的有效性。

Threat Assessment System of Power Monitoring System based on Virtualized Dynamic Deployment

The power monitoring system uses the active defense technology to detect and capture,and accurately analyze the characteristics of attack behavior,and can timely discover APT(Advanced Persistent Threat)existing in the power monitoring system.Based on the virtualized dynamic deployment of power monitoring system and by integrating the active defense technology,a measurable four-level threat assessment system and an assessment method based on the hierarchical model are discussed,aiming at the damage of the attack on the equipment and the sensitivity of the leaked data in the power monitoring system.Through the case evaluation on the power monitoring system of an intelligent substation detection technology laboratory of a power company,the effectiveness of the system for the evaluation of complex power monitoring systems is explained from the perspectives of hazard degree,occurrence time and influence scope.