Evidence Reasoning Based Quantitative Evaluation Method for Vulnerability of SCADA System Security in Wind Farms

Xinyu LUO; Bin DUAN; Junfeng WU; Jun LAI

doi:10.7500/AEPS20190715010

您当前的位置：

首页 >

文章列表页 >

Evidence Reasoning Based Quantitative Evaluation Method for Vulnerability of SCADA System Security in Wind Farms

Basic Research | 更新时间：2025-06-16

- Evidence Reasoning Based Quantitative Evaluation Method for Vulnerability of SCADA System Security in Wind Farms
- Automation of Electric Power Systems Vol. 44, Issue 11, Pages: 25-31(2020)
- 作者机构：
  
  1.湘潭大学自动化与电子信息学院，湖南省湘潭市 411105
  2.北京神州绿盟信息安全科技股份有限公司，北京市 100000
- 作者简介：
- 基金信息：
  
  National Natural Science Foundation of China
- DOI：10.7500/AEPS20190715010
  CLC：
- Received：15 July 2019，
  
  Revised：2020-02-10，
  
  Published Online：13 April 2020，
  
  Published：10 June 2020
- 稿件说明：
移动端阅览
罗新宇,段斌,吴俊锋等.基于证据推理的风电场SCADA系统安全脆弱性定量评估方法[J].电力系统自动化,2020,44(11):25-31.

LUO Xinyu,DUAN Bin,WU Junfeng,et al.Evidence Reasoning Based Quantitative Evaluation Method for Vulnerability of SCADA System Security in Wind Farms[J].Automation of Electric Power Systems,2020,44(11):25-31.
罗新宇,段斌,吴俊锋等.基于证据推理的风电场SCADA系统安全脆弱性定量评估方法[J].电力系统自动化,2020,44(11):25-31. DOI： 10.7500/AEPS20190715010.

LUO Xinyu,DUAN Bin,WU Junfeng,et al.Evidence Reasoning Based Quantitative Evaluation Method for Vulnerability of SCADA System Security in Wind Farms[J].Automation of Electric Power Systems,2020,44(11):25-31. DOI： 10.7500/AEPS20190715010.

摘要

针对风电场数据采集与监控（SCADA）系统的信息安全脆弱性，文中提出了一种基于证据推理的定量评估方法。该方法以系统发现的某个异常作为根节点，将可能导致异常发生的若干假设事件或因假设事件引发的事件作为假设点，构建系统安全脆弱性的可解释性假设链，推理出所有的攻击路径；然后对每条攻击路径进行计算，寻找系统脆弱性的关键路径，将与假设相关的证据作为证据点，采用链接函数连接证据点和假设点，并搭建每条路径的脆弱性贝叶斯网络，进而应用等级反应模型计算贝叶斯网络节点间的条件概率；接着将关键路径作为依据对系统脆弱性进行测评，以假设发生的概率作为安全脆弱性的评判标准，量化证据点的可信度，经贝叶斯网络推理出SCADA系统脆弱性。最后，通过一个实例说明所提方法的具体应用，应用结果表明该方法能够对风电场SCADA系统安全脆弱性进行有效分析

并可找出系统信息安全的薄弱环节，以及可量化信息安全脆弱性评估值，具有较高的测评准确性。

Abstract

In accordance with the information security of supervisory control and data acquisition (SCADA) system

a quantitative evaluation method based on evidence reasoning is proposed. In this method

a certain abnormality found by the system is taken as a root node

and a certain number of hypothesis events that result in abnormality or events caused by hypothesis events are used as hypothesis points to construct an interpretable hypothesis chain of system security vulnerability and to reason all attack paths. Then

each attack path is calculated to find the critical path of the system vulnerability. The evidence related to the hypothesis is regarded as evidence point and the link function is used to connect the evidence and hypothesis point to build the vulnerability Bayesian network of each path. The conditional probability of nodes in Bayesian network is calculated by applying the graded response model. The critical path is utilized as a basis for measuring the system vulnerability

and the probability of hypothesis is utilized as the criterion of security vulnerability evaluation

so the credibility of each evidence point is quantified

and the vulnerability of SCADA system is deduced through Bayesian network. Finally

an example is given to illustrate the specific application. It is proven that the method can effectively analyze the security vulnerability of SCADA systems in wind farms

and can find the weak components of system information security. The method can also quantify the evaluation value of information security vulnerability

and has high evaluation accuracy.

关键词

Keywords

references

冯波 . 变电站SCADA系统数据库的设计与开发 [D]. 济南：山东大学 , 2013 .

FENG Bo . Design and development of database for substation SCADA system [D]. Jinan ： Shandong University , 2013 .

李田 , 苏盛 , 杨洪明 , 等 . 电力信息物理系统的攻击行为与安全防护 [J]. 电力系统自动化 , 2017 , 41 ( 22 ): 162 - 167 .

LI Tian , SU Sheng , YANG Hongming , et al . Bottom line in cyber security defense of cyber physical power system [J]. Automation of Electric Power Systems , 2017 , 41 ( 22 ): 162 - 167 .

石立宝 , 简洲 . 基于动态攻防博弈的电力信息物理融合系统脆弱性评估 [J]. 电力系统自动化 , 2016 , 40 ( 17 ): 99 - 105 .

SHI Libao , JIAN Zhou . Vulnerability assessment of cyber physical power system based on dynamic attack-defense game model [J]. Automation of Electric Power Systems , 2016 , 40 ( 17 ): 99 - 105 .

张宇航 , 倪明 , 孙永辉 , 等 . 针对网络攻击的配电网信息物理系统风险量化评估 [J]. 电力系统自动化 , 2019 , 43 ( 21 ): 12 - 22 .

ZHANG Yuhang , NI Ming , SUN Yonghui , et al . Quantitative risk assessment of cyber-physical system for cyber-attacks in distribution network [J]. Automation of Electric Power Systems , 2019 , 43 ( 21 ): 12 - 22 .

江建举 , 葛运建 . 多种智能技术的集成与应用 [J]. 计算机工程与应用 , 2005 , 41 ( 11 ): 50 - 52 .

JIANG Jianju , GE Yunjian . The integration of multi intelligent techniques and application [J]. Computer Engineering and Applications , 2005 , 41 ( 11 ): 50 - 52 .

赵洪山 , 刘辉海 , 刘宏杨 , 等 . 基于堆叠自编码网络的风电机组发电机状态监测与故障诊断 [J]. 电力系统自动化 , 2018 , 42 ( 11 ): 108 - 114 .

ZHAO Hongshan , LIU Huihai , LIU Hongyang , et al . Condition monitoring and fault diagnosis of wind turbine generator based on stacked autoencoder network [J]. Automation of Electric Power Systems , 2018 , 42 ( 11 ): 108 - 114 .

邓力 . 风电场SCADA系统信息安全防护技术研究 [D]. 成都：电子科技大学 , 2017 .

DENG Li . Research on information security protection technology of wind farm SCADA system [D]. Chengdu ： University of Electronic Science and Technology of China , 2017 .

姜莹莹 , 曹谢东 , 白琳 . 基于层次分析法的SCADA系统安全评价 [J]. 物联网技术 , 2013 , 32 ( 12 ): 71 - 75 .

JIANG Yingying , CAO Xiedong , BAI Lin . Safety evaluation of SCADA system based on AHP [J]. Internet of Things Technologies , 2013 , 32 ( 12 ): 71 - 75 .

王丙东 . 电网调度操作安全风险量化评估方法研究与工程实践 [D]. 天津 : 天津大学 , 2014 .

WANG Bingdong . Risk assessment study on power system dispatching and its application [D]. Tianjin : Tianjin University , 2014 .

黄慧萍 , 肖世德 , 梁红琴 . 基于AHP和攻防树的SCADA系统安全脆弱性评估 [J]. 控制工程 , 2018 , 25 ( 6 ): 1091 - 1097 .

HUANG Huiping , XIAO Shide , LIANG Hongqin . Vulnerability assessment of cyber security for SCADA systems based on AHP and attack defense tree [J]. Control Engineering of China , 2018 , 25 ( 6 ): 1091 - 1097 .

蒋健雷 . 某泵站放江SCADA系统及其安全性研究 [D]. 上海：华东理工大学 , 2012 .

JIANG Jianlei . A SCADA system for pollution control of a pumping station and the cyber security issues [D]. Shanghai ： East China University of Science and Technology , 2012 .

王旭蕊 . 基于贝叶斯网络的SCADA通信链路安全性评估方法研究 [D]. 北京：华北电力大学 , 2014 .

WANG Xurui . Research on the security evaluation method of SCADA communication links based on Bayesian network [J]. Beijing : North China Electric Power University , 2014 .

丁明 , 李晓静 , 张晶晶 . 面向SCADA的网络攻击对电力系统可靠性的影响 [J]. 电力系统保护与控制 , 2018 , 46 ( 11 ): 37 - 45 .

DING Ming , LI Xiaojing , ZHANG Jingjing . Influence of SCADA-oriented network attack on power system reliability [J]. Power System Protection and Control ， 2018 , 46 ( 11 ): 37 - 45 .

靳留乾 , 徐扬 , 方新 . 基于证据推理的确定因子规则库推理方法 [J]. 计算机应用研究 , 2016 , 33 ( 2 ): 347 - 351 .

JIN Liuqian , XU Yang , FANG Xin . Determining factor rule base reasoning method based on evidence reasoning [J]. Application Research of Computers , 2016 , 33 ( 2 ): 347 - 351 .

李红良 . 火箭发射环境信息的推理技术应用研究 [D]. 重庆：重庆大学 , 2009 .

LI Hongliang . Application research on reasoning technology of rocket launching environmental information [D]. Chongqing ： Chongqing University , 2009 .

TECUCI G , MARCU D , BOICO M , et al . Knowledge engineering: building cognitive assistants for evidence-based reasoning [D]. New York， USA : Cambridge University Press , 2016 .

MISLEVY R J ， STEINBERG L S ， ALMOND R G . On the structure of educational assessments [R]. Washington DC, USA : Office of Educational Research and Improvement , 2003 .

ROUSSOS L A ， TEMPLIN J L , HENSON R A . Skills diagnosis using IRT-based latent class models [J]. Journal of Educational Measurement , 2007 ， 44 : 293 - 311 .

黎光明 , 张敏强 . 概化理论与项目反应理论的融合模型 [J]. 应用心理学 , 2018 , 24 ( 4 ): 279 - 288 .

LI Guangming , ZHANG Minqiang . Fusion model of generalization theory and project response theory [J]. Applied Psychology , 2018 , 24 ( 4 ): 279 - 288 .

吴俊锋 , 旷怡 , 李辉 , 等 . 电感材料与电流限制相关性认知诊断模型研究 [J]. 湘潭大学自然科学学报 , 2018 , 40 ( 6 ): 11 - 20 .

WU Junfeng , KUANG Yi , LI Hui , et al . Research on cognitive diagnosis model of correlation between inductor material and current limitation [J]. Natural Science Journal of Xiangtan University , 2018 , 40 ( 6 ): 11 - 20 .

LEVY R , MISLEVY R J . Specifying and refining a measurement model for a computer-based interactive assessment [J]. International Journal of Testing , 2004 , 4 ( 4 ): 333 - 369 .

MISLEVY R J . Socio-cognitive foundations of educational measurement [M]. Abingdon , UK: Taylor and Francis: 2018 .

MERALI R S , BARFOOT T D . Occupancy grid mapping with Markov Chain Monte Carlo Gibbs sampling [C]// 2013 IEEE International Conference on Robotics and Automation , May 6 - 10 , 2013 , Karlsruhe, Germany: 1 - 5 .

赖俊 . 风电场SCADA系统信息安全及其防护研究 [D]. 湘潭：湘潭大学 , 2018

LAI Jun . Research on cyber security and defence strategy of wind farm SCADA system [D]. Xiangtan : Xiangtan University , 2018 .

PILON C D . Bayesian method probabilistic programming and Bayesian inference [M]. Beijing : Posts and Telecommunications Press , 2016 .

刘乐平 , 袁卫 . 现代贝叶斯分析与WinBUGS软件的使用 [C]// 中国现场统计研究会第12届学术年会 , 2004 年 10月22—23日，北京 : 1 - 4 .

LIU Leping ， YUAN Wei . Modern Bayesian analysis and the use of WinBUGS software [C]// 12th Annual Academic Conference of China Field Statistics Research Association , October 22 - 23 , 2004 , Beijing: 1 - 4 .

Views

下载量

CSCD

Alert me when the article has been cited

提交

Tools

Publicity Resources

风电经柔直送出系统送端交流故障低电压穿越策略

基于单机模型扩展的直驱风电场通用等值模型构建方法

基于虚拟调速控制的大型孤岛新能源基地LCC直流送出方案

Day-ahead Topology Optimization for Wind Farm Without Forecasting Based on Improved Deep Q Network

Dynamic Equivalent Modeling with Physics-Data Fusion for Wind Farm Based on Characteristics of Multiple Spatio-Temporal Scales

Related Author

ZHONG Shuwei

CHE Yanbo

SU Jianbo

CHEN Yijing

LI Chunhua

LI Dongsheng

CAO Qianni

LAI Qiping

Related Institution

College of Electrical and Information Engineering, Hunan University

Guangzhou Power Supply Bureau of Guangdong Power Grid Co., Ltd.

School of Electrical Engineering and Automation, Wuhan University

School of Electric Power, South China University of Technology

⁰