基于变电站的入侵防御网络安全评估模型

网络攻击是最重要的变电站安全问题之一,为了更好地识别易受攻击的变电站,首先需要对侦察活动进行建模。在此基础上研究相应的网络攻击和防御策略。利用马尔可夫决策过程建立了变电站控制权竞争中的入侵防御模型。在模型中考虑了目标变电站、入侵者和防御者的关键特征。因此,通过求解模型,可以得到入侵者和防御者的最优策略。通过这些策略可以对变电站的网络安全状态进行评估。仿真实验结果验证了所提出的模型以及相应策略的可行性。

Network security evaluation model of intrusion prevention based on substation

Cyber attacks are one of the most important substation security issues.In order to better identify vulnerable substations,it is first necessary to model reconnaissance activities.On this basis,the corresponding network attack and defense strategy are researched.Here,a successful attack is a probability event related to reconnaissance activities.The Markov decision process is used to establish an attack defense model in the competition for substation control rights.The key characteristics of the target substation,attacker and defender are considered in the model.Therefore,by solving the model,the optimal strategy of the attacker and the defender can be obtained.Through these strategies,the network security status of the substation can be evaluated.The simulation experiment results verify the feasibility of the proposed model and corresponding strategies.