基于OPNET的数字化变电站DoS攻击建模与仿真研究

针对智能变电站通信网络面临后果中最为严重的拒绝服务攻击(DoS)类型,首先对数字化变电站的周期性、随机性、突发性等不同特性的数据流进行了建模,随后给出了基于SYN-flood攻击原理的数字化变电站DoS攻击建模,并详细介绍了基于OPNET的仿真模块设计及实现方案;搭建了变电站星型网络站控层服务器遭受SYN-flood的攻击仿真场景,并针对变电站常见的10Base T、100Base T两种链路宽带场景进行了仿真。仿真结果展示了DoS攻击前后的站控层服务器主要性能特性以及后果,即导致服务器CPU持续处于高利用率状态;TCP连接延时增加;链路吞吐量增加以消耗链路带宽等,从而揭示DoS攻击企图达到服务器无法响应正常的业务请求即拒绝服务的目的。

OPNET based modeling and simulation of DoS attack of digital substation

Aimming at the problem that DoS (Denial of Service) as the most serious cyber attack for digital substation,a modeling of data flow with different properties as periodic,random,sudden response was firstly introduced,followed by a simulation modeling of DoS attack based on the SYN-Flood principle;the module design and simulation implementation scheme based on OPNET platform was proposed in detail.The simulation scenario was selected as the star network where the control bay server was under the SYN_flood attack,and the case studies were made for wide-band of 10BaseT and 100BaseT data link.The simulation results gives the performances of the bay server before and after SYN_flood attack,and the attack consequences are long stay at a high CPU utilization,time delay increasing of TCP connection,and the increasing of link throughput to exhaust the link band,etc.,in which the attempts of DoS are exposed to make the bay server disable to response the normal business request,i.e.,to deny the service.