基于证据推理的风电场SCADA系统安全脆弱性定量评估方法

罗新宇; 段斌; 吴俊锋; 赖俊

doi:10.7500/AEPS20190715010

您当前的位置：

首页 >

文章列表页 >

基于证据推理的风电场SCADA系统安全脆弱性定量评估方法

学术研究 | 更新时间：2025-06-16

- 基于证据推理的风电场SCADA系统安全脆弱性定量评估方法
- Evidence Reasoning Based Quantitative Evaluation Method for Vulnerability of SCADA System Security in Wind Farms
- 电力系统自动化-方正平台 2020年44卷第11期页码：25-31
- 作者机构：
  
  1.湘潭大学自动化与电子信息学院，湖南省湘潭市 411105
  2.北京神州绿盟信息安全科技股份有限公司，北京市 100000
- 作者简介：
  
  罗新宇(1996—)，女，硕士研究生，主要研究方向：认知智能。E-mail：1129660065@qq.com
  段斌(1966—)，男，通信作者，博士，教授，博士生导师，主要研究方向：信息技术在电力系统中的应用、工程教育认证。E-mail：db61850@163.com
  吴俊锋(1996—)，男，硕士研究生，主要研究方向：认知智能。E-mail：850034178@qq.com
- 基金信息：
  
  国家自然科学基金资助项目(61379063)
- DOI：10.7500/AEPS20190715010
  中图分类号：
- 收稿日期：2019-07-15，
  
  修回日期：2020-02-10，
  
  网络出版日期：2020-04-13，
  
  纸质出版日期：2020-06-10
- 稿件说明：
移动端阅览
罗新宇,段斌,吴俊锋等.基于证据推理的风电场SCADA系统安全脆弱性定量评估方法[J].电力系统自动化,2020,44(11):25-31.

LUO Xinyu,DUAN Bin,WU Junfeng,et al.Evidence Reasoning Based Quantitative Evaluation Method for Vulnerability of SCADA System Security in Wind Farms[J].Automation of Electric Power Systems,2020,44(11):25-31.
罗新宇,段斌,吴俊锋等.基于证据推理的风电场SCADA系统安全脆弱性定量评估方法[J].电力系统自动化,2020,44(11):25-31. DOI： 10.7500/AEPS20190715010.

LUO Xinyu,DUAN Bin,WU Junfeng,et al.Evidence Reasoning Based Quantitative Evaluation Method for Vulnerability of SCADA System Security in Wind Farms[J].Automation of Electric Power Systems,2020,44(11):25-31. DOI： 10.7500/AEPS20190715010.

摘要

针对风电场数据采集与监控（SCADA）系统的信息安全脆弱性，文中提出了一种基于证据推理的定量评估方法。该方法以系统发现的某个异常作为根节点，将可能导致异常发生的若干假设事件或因假设事件引发的事件作为假设点，构建系统安全脆弱性的可解释性假设链，推理出所有的攻击路径；然后对每条攻击路径进行计算，寻找系统脆弱性的关键路径，将与假设相关的证据作为证据点，采用链接函数连接证据点和假设点，并搭建每条路径的脆弱性贝叶斯网络，进而应用等级反应模型计算贝叶斯网络节点间的条件概率；接着将关键路径作为依据对系统脆弱性进行测评，以假设发生的概率作为安全脆弱性的评判标准，量化证据点的可信度，经贝叶斯网络推理出SCADA系统脆弱性。最后，通过一个实例说明所提方法的具体应用，应用结果表明该方法能够对风电场SCADA系统安全脆弱性进行有效分析

并可找出系统信息安全的薄弱环节，以及可量化信息安全脆弱性评估值，具有较高的测评准确性。

Abstract

In accordance with the information security of supervisory control and data acquisition (SCADA) system

a quantitative evaluation method based on evidence reasoning is proposed. In this method

a certain abnormality found by the system is taken as a root node

and a certain number of hypothesis events that result in abnormality or events caused by hypothesis events are used as hypothesis points to construct an interpretable hypothesis chain of system security vulnerability and to reason all attack paths. Then

each attack path is calculated to find the critical path of the system vulnerability. The evidence related to the hypothesis is regarded as evidence point and the link function is used to connect the evidence and hypothesis point to build the vulnerability Bayesian network of each path. The conditional probability of nodes in Bayesian network is calculated by applying the graded response model. The critical path is utilized as a basis for measuring the system vulnerability

and the probability of hypothesis is utilized as the criterion of security vulnerability evaluation

so the credibility of each evidence point is quantified

and the vulnerability of SCADA system is deduced through Bayesian network. Finally

an example is given to illustrate the specific application. It is proven that the method can effectively analyze the security vulnerability of SCADA systems in wind farms

and can find the weak components of system information security. The method can also quantify the evaluation value of information security vulnerability

and has high evaluation accuracy.

关键词

Keywords

references

冯波 . 变电站SCADA系统数据库的设计与开发 [D]. 济南：山东大学 , 2013 .

FENG Bo . Design and development of database for substation SCADA system [D]. Jinan ： Shandong University , 2013 .

李田 , 苏盛 , 杨洪明 , 等 . 电力信息物理系统的攻击行为与安全防护 [J]. 电力系统自动化 , 2017 , 41 ( 22 ): 162 - 167 .

LI Tian , SU Sheng , YANG Hongming , et al . Bottom line in cyber security defense of cyber physical power system [J]. Automation of Electric Power Systems , 2017 , 41 ( 22 ): 162 - 167 .

石立宝 , 简洲 . 基于动态攻防博弈的电力信息物理融合系统脆弱性评估 [J]. 电力系统自动化 , 2016 , 40 ( 17 ): 99 - 105 .

SHI Libao , JIAN Zhou . Vulnerability assessment of cyber physical power system based on dynamic attack-defense game model [J]. Automation of Electric Power Systems , 2016 , 40 ( 17 ): 99 - 105 .

张宇航 , 倪明 , 孙永辉 , 等 . 针对网络攻击的配电网信息物理系统风险量化评估 [J]. 电力系统自动化 , 2019 , 43 ( 21 ): 12 - 22 .

ZHANG Yuhang , NI Ming , SUN Yonghui , et al . Quantitative risk assessment of cyber-physical system for cyber-attacks in distribution network [J]. Automation of Electric Power Systems , 2019 , 43 ( 21 ): 12 - 22 .

江建举 , 葛运建 . 多种智能技术的集成与应用 [J]. 计算机工程与应用 , 2005 , 41 ( 11 ): 50 - 52 .

JIANG Jianju , GE Yunjian . The integration of multi intelligent techniques and application [J]. Computer Engineering and Applications , 2005 , 41 ( 11 ): 50 - 52 .

赵洪山 , 刘辉海 , 刘宏杨 , 等 . 基于堆叠自编码网络的风电机组发电机状态监测与故障诊断 [J]. 电力系统自动化 , 2018 , 42 ( 11 ): 108 - 114 .

ZHAO Hongshan , LIU Huihai , LIU Hongyang , et al . Condition monitoring and fault diagnosis of wind turbine generator based on stacked autoencoder network [J]. Automation of Electric Power Systems , 2018 , 42 ( 11 ): 108 - 114 .

邓力 . 风电场SCADA系统信息安全防护技术研究 [D]. 成都：电子科技大学 , 2017 .

DENG Li . Research on information security protection technology of wind farm SCADA system [D]. Chengdu ： University of Electronic Science and Technology of China , 2017 .

姜莹莹 , 曹谢东 , 白琳 . 基于层次分析法的SCADA系统安全评价 [J]. 物联网技术 , 2013 , 32 ( 12 ): 71 - 75 .

JIANG Yingying , CAO Xiedong , BAI Lin . Safety evaluation of SCADA system based on AHP [J]. Internet of Things Technologies , 2013 , 32 ( 12 ): 71 - 75 .

王丙东 . 电网调度操作安全风险量化评估方法研究与工程实践 [D]. 天津 : 天津大学 , 2014 .

WANG Bingdong . Risk assessment study on power system dispatching and its application [D]. Tianjin : Tianjin University , 2014 .

黄慧萍 , 肖世德 , 梁红琴 . 基于AHP和攻防树的SCADA系统安全脆弱性评估 [J]. 控制工程 , 2018 , 25 ( 6 ): 1091 - 1097 .

HUANG Huiping , XIAO Shide , LIANG Hongqin . Vulnerability assessment of cyber security for SCADA systems based on AHP and attack defense tree [J]. Control Engineering of China , 2018 , 25 ( 6 ): 1091 - 1097 .

蒋健雷 . 某泵站放江SCADA系统及其安全性研究 [D]. 上海：华东理工大学 , 2012 .

JIANG Jianlei . A SCADA system for pollution control of a pumping station and the cyber security issues [D]. Shanghai ： East China University of Science and Technology , 2012 .

王旭蕊 . 基于贝叶斯网络的SCADA通信链路安全性评估方法研究 [D]. 北京：华北电力大学 , 2014 .

WANG Xurui . Research on the security evaluation method of SCADA communication links based on Bayesian network [J]. Beijing : North China Electric Power University , 2014 .

丁明 , 李晓静 , 张晶晶 . 面向SCADA的网络攻击对电力系统可靠性的影响 [J]. 电力系统保护与控制 , 2018 , 46 ( 11 ): 37 - 45 .

DING Ming , LI Xiaojing , ZHANG Jingjing . Influence of SCADA-oriented network attack on power system reliability [J]. Power System Protection and Control ， 2018 , 46 ( 11 ): 37 - 45 .

靳留乾 , 徐扬 , 方新 . 基于证据推理的确定因子规则库推理方法 [J]. 计算机应用研究 , 2016 , 33 ( 2 ): 347 - 351 .

JIN Liuqian , XU Yang , FANG Xin . Determining factor rule base reasoning method based on evidence reasoning [J]. Application Research of Computers , 2016 , 33 ( 2 ): 347 - 351 .

李红良 . 火箭发射环境信息的推理技术应用研究 [D]. 重庆：重庆大学 , 2009 .

LI Hongliang . Application research on reasoning technology of rocket launching environmental information [D]. Chongqing ： Chongqing University , 2009 .

TECUCI G , MARCU D , BOICO M , et al . Knowledge engineering: building cognitive assistants for evidence-based reasoning [D]. New York， USA : Cambridge University Press , 2016 .

MISLEVY R J ， STEINBERG L S ， ALMOND R G . On the structure of educational assessments [R]. Washington DC, USA : Office of Educational Research and Improvement , 2003 .

ROUSSOS L A ， TEMPLIN J L , HENSON R A . Skills diagnosis using IRT-based latent class models [J]. Journal of Educational Measurement , 2007 ， 44 : 293 - 311 .

黎光明 , 张敏强 . 概化理论与项目反应理论的融合模型 [J]. 应用心理学 , 2018 , 24 ( 4 ): 279 - 288 .

LI Guangming , ZHANG Minqiang . Fusion model of generalization theory and project response theory [J]. Applied Psychology , 2018 , 24 ( 4 ): 279 - 288 .

吴俊锋 , 旷怡 , 李辉 , 等 . 电感材料与电流限制相关性认知诊断模型研究 [J]. 湘潭大学自然科学学报 , 2018 , 40 ( 6 ): 11 - 20 .

WU Junfeng , KUANG Yi , LI Hui , et al . Research on cognitive diagnosis model of correlation between inductor material and current limitation [J]. Natural Science Journal of Xiangtan University , 2018 , 40 ( 6 ): 11 - 20 .

LEVY R , MISLEVY R J . Specifying and refining a measurement model for a computer-based interactive assessment [J]. International Journal of Testing , 2004 , 4 ( 4 ): 333 - 369 .

MISLEVY R J . Socio-cognitive foundations of educational measurement [M]. Abingdon , UK: Taylor and Francis: 2018 .

MERALI R S , BARFOOT T D . Occupancy grid mapping with Markov Chain Monte Carlo Gibbs sampling [C]// 2013 IEEE International Conference on Robotics and Automation , May 6 - 10 , 2013 , Karlsruhe, Germany: 1 - 5 .

赖俊 . 风电场SCADA系统信息安全及其防护研究 [D]. 湘潭：湘潭大学 , 2018

LAI Jun . Research on cyber security and defence strategy of wind farm SCADA system [D]. Xiangtan : Xiangtan University , 2018 .

PILON C D . Bayesian method probabilistic programming and Bayesian inference [M]. Beijing : Posts and Telecommunications Press , 2016 .

刘乐平 , 袁卫 . 现代贝叶斯分析与WinBUGS软件的使用 [C]// 中国现场统计研究会第12届学术年会 , 2004 年 10月22—23日，北京 : 1 - 4 .

LIU Leping ， YUAN Wei . Modern Bayesian analysis and the use of WinBUGS software [C]// 12th Annual Academic Conference of China Field Statistics Research Association , October 22 - 23 , 2004 , Beijing: 1 - 4 .

浏览量

下载量

CSCD

文章被引用时，请邮件提醒。

提交

工具集

关联资源

风电经柔直送出系统送端交流故障低电压穿越策略

基于单机模型扩展的直驱风电场通用等值模型构建方法

基于虚拟调速控制的大型孤岛新能源基地LCC直流送出方案

基于改进深度Q网络的无预测风电场日前拓扑优化

基于多时空尺度特性的风电场物理-数据融合动态等值建模