智能变电站网络风暴的监测和过滤算法研究

为了消除智能变电站网络风暴对IED设备的影响，提出一种实时监测网络风暴并对风暴报文进行过滤的算法。分析了网络风暴监测和过滤算法的性能要求，通过对变电站网络通信报文的在线监视，利用报文的部分特征码作为第一重哈希对报文分类累积，再利用全部特征码作为第二重哈希判定并过滤风暴报文，同时计算风暴的强度、持续时间并告警。算例分析结果表明，该算法能够快速地检测出网络风暴，在网络风暴的情况下能保证正常报文100%通过，且过滤掉绝大多数风暴报文，证明了算法的正确性和有效性。

Research on the network storm monitoring and filtering algorithm in smart substation

In order to eliminate the impact of network storm on IED equipment, a real-time monitoring of network storm and filtering storm packet algorithm is proposed. The performance requirements of the network storm monitoring and filtering algorithms are analyzed. Through the online monitoring of the substation network communication packets, part of the packet signature is used to classify and cumulate packets as the first hash, and the whole signature is used to judge and filter storm packets as the second hash. Meanwhile, the storm intensity and duration are calculated and alarmed. Example analysis results show that the algorithm is able to detect network storm quickly, can guarantee 100% of packets pass through in the case of network storm, and filter out the vast majority of the storm packets. The correctness and validity of the algorithm is demonstrated.