IEC 61850协议DoS攻击的ECC-AES防御算法

IEC 61850是基于网络通信平台的变电通信系统国际标准,由于IEC 61850缺乏加密和认证安全机制,导致其易受到网络攻击。为了验证IEC 61850协议通信存在的问题,在变电站通信仿真系统下,分析了IEC 61850通信协议,模拟了IEC 61850 的拒绝服务(DoS)攻击,提出了ECCi-AES防御算法。该算法通过抓取IEC 61850报文,获取、应用协议数据单元(APDU)并加密。实验结果表明,通过改进的高级加密标准(AES)和椭圆曲线密码编码(ECC)加密算法,可以有效地加密通信数据,增强防御DoS攻击的能力。

Research on ECC-AES Defense Algorithm for DoS Attack of IEC 61850 Protocoal

IEC 61850 is the international guarantee for substation communication system based on network communication platform.However,due to the lack of encryption and authentication security mechanism,IEC 61850 is vulnerable to cyber attacks.To test the problems in the communication,IEC 61850 agreement based on the substation communication simulation system under the IEC 61850 communication protocol is analyzed,the IEC 61850 DoS attacks simulated,and ECC defense-AES algorithm is proposed.This algorithm through the scraping of the IEC 61850 message,obtains application protocol data unit (APDU) and encryption.The experimental results show that by improving the AES and ECC encryption algorithm,communication data can be effectively ecrypted to enhance the ability of defense against the DoS attack.