基于主动诱骗的电力网络安全提升策略设计与实现

从主动防御的角度研究电力网络安全的提升策略，介绍了主动诱骗电力网络安全防御体系结构及安全体系设计中诱骗系统、连接控制、路由控制功能、入侵重定向、入侵记录、日志服务器、远程控制台等部件的关键实现技术，通过把主动诱骗网络安全防御体系与传统的防火墙和入侵检测系统联动，架构基于主动诱骗的电力网络安全防御体系，将入侵者的入侵行为引入一个可以控制的范围，研究其使用的方法和技术，动态采取相应的防范措施。实验表明，主动诱骗电力网络安全防御策略体系可以有效地抵御来自电力网络外部的攻击和内部的威胁，实现了电力网络安全的综合防御，极大地提升了电力网络安全。

DESIGN AND IMPLEMENTATION OF A SECURITY INCREASING STRATEGY BASED ON PROACTIVE DECEIVING STRATEGY FOR THE POWER NETWORK

The security increasing scheme is studied based on the proactive deceiving strategy for the power network. The structure of the power network security defensive system based on the proactive deceiving strategy and the key technologies of some components in the defensive system are discussed, such as the structure of the trapping system, the lure and deceiving strategy for the trapping system, the connection control, the router control, the redirection of an intrusion activity, the record of intrusion activity, the log server and the remote control platform. By the interaction between the proactive deceiving strategy based security defensive system and the traditional firewall and intrusion detecting system, the attacker's intrusion is led into a controllable scope, traced and dynamically defended by the corresponding measures based on a study of the way and tactics of the intrusion. The experiment shows that the security defensive system based on proactive deceiving strategy is capable of resisting intrusion from both outside and inside of the power network and implementing comprehensive security protection for the power network.