
浏览全部资源
扫码关注微信
1.湖南大学电气与信息学院,湖南省长沙市 410000
2.国网湖南省电力有限公司经济技术研究院,湖南省长沙市 410004
3.广西电网电力调度控制中心,广西壮族自治区南宁市 530000
严康(1993—),男,通信作者,博士研究生,主要研究方向:电力系统信息物理安全。E-mail:yankang124@163.com
陆艺丹(1993—),女,博士研究生,主要研究方向:新型电力系统规划与运行。E-mail:lyd1120@hnu.edu.cn
于宗超(1996—),男,博士,工程师,主要研究方向:能源电力发展、供需平衡、新能源消纳、电网优化运行。
收稿:2022-09-30,
修回:2023-01-26,
网络出版:2023-03-21,
纸质出版:2023-04-25
移动端阅览
严康,陆艺丹,于宗超等.配电网用户侧异构电力物联设备运行安全管控分析[J].电力系统自动化,2023,47(8):53-61.
YAN Kang,LU Yidan,YU Zongchao,et al.Analysis on Operation Security Management and Control for User-side Heterogeneous Power Internet-of-Things Devices in Distribution Network[J].Automation of Electric Power Systems,2023,47(8):53-61.
严康,陆艺丹,于宗超等.配电网用户侧异构电力物联设备运行安全管控分析[J].电力系统自动化,2023,47(8):53-61. DOI: 10.7500/AEPS20220930004.
YAN Kang,LU Yidan,YU Zongchao,et al.Analysis on Operation Security Management and Control for User-side Heterogeneous Power Internet-of-Things Devices in Distribution Network[J].Automation of Electric Power Systems,2023,47(8):53-61. DOI: 10.7500/AEPS20220930004.
随着配电网用户侧异构电力物联设备(UPID)接入电力系统的规模进一步扩大,给电力系统带来了一种新型的安全威胁——需求侧操控攻击。在此背景下,电力系统有必要对配电网UPID进行运行安全管控。为此,将软件定义网络(SDN)融入电力信息物理系统,提出一种针对配电网UPID控制指令的动态路由策略。首先,针对海量的设备数据,在各变电站部署边缘计算服务器;其次,考虑控制指令关联运行功率、动态信用以及电力系统网架结构等因素,构建一种三阶段的动态路由策略;最后,利用SDN控制器对控制指令实现就地控制。仿真结果表明,所提基于SDN的动态路由策略通过拒绝转发低信用的控制指令可有效避免大规模配电网UPID异常动作给电力系统带来的恶意影响,为电力系统抵御需求侧操控攻击提供一种解决思路和实施方案。
With the further expansion of the scale of the user-side heterogeneous power Internet-of-Things device (UPID) in the distribution network integrating into the power system
it has brought a new cyber threat to the power system
namely the manipulation of demand (MAD) attack. In this context
it is necessary for the power system to manage and control the operation security of UPID in the distribution network. To this end
the software defined network (SDN) is integrated into the power cyber-physical system
and a dynamic routing strategy for the control instructions of UPID in the distribution network is proposed. First
the edge computing server is deployed in each substation for massive device data. Secondly
a three-stage dynamic routing strategy is constructed by considering the associated operating power and dynamic credit of control instructions
as well as the power system network structure. Finally
the SDN controller is used to realize the local control for control instructions. Simulation results show that the proposed SDN-based dynamic routing strategy can effectively avoid the malicious impact on the power system caused by large-scale abnormal actions of the UPID in the distribution network by refusing to forward low-credit control instructions
and provide a solution and implementation scheme for the power system to resist the MAD attacks.
中国智能家居由单品智能向全屋智能演进 [EB/OL].[ 2022-10-20 ]. https://baijiahao.baidu.com/s?id=163052029758023065 https://baijiahao.baidu.com/s?id=163052029758023065
6&wfr=spider&for=pc .
China’s smart home is evolving from single-item smart to whole-house smart [EB/OL]. [ 2022-10-20 ]. https://baijiahao.baidu.com/s?id=1630520297580230656&wfr=spider&for=pc https://baijiahao.baidu.com/s?id=1630520297580230656&wfr=spider&for=pc .
2020—2022年中国物联网设备数量及市场规模预测:预计2022年物联网连接规模将达到 70 亿[EB/OL].[ 2022-10-20 ]. https://www.chyxx.com/industry/202001/826121.html https://www.chyxx.com/industry/202001/826121.html .
Forecast of the number and market size of China’s Internet of Things devices from 2020 to 2022 : It is estimated that the scale of Internet of Things connections will reach 7 billion in 2022 [EB/OL]. [ 2022-10-20 ]. https://www.chyxx.com/industry/202001/826121.html https://www.chyxx.com/industry/202001/826121.html .
VRAKOPOULOU M , LI B W , MATHIEU J L . Chance constrained reserve scheduling using uncertain controllable loads part Ⅰ: formulation and scenario-based analysis [J]. IEEE Transactions on Smart Grid , 2019 , 10 ( 2 ): 1608 - 1617 .
严康 , 陆艺丹 , 于宗超 , 等 . 配电网用户侧异构电力物联设备安全研究综述及展望 [J/OL]. 电力自动化设备 : 1 - 17 [ 2022-08-11 ].http:10.16081/j.epae.202208014.
YAN Kang , LU Yidan , YU Zongchao , et al . Review and prospect of security research on heterogeneous power IOT equipment at user side of distribution network [J/OL]. Electric Power Automation Equipment : 1 - 17 [ 2022-08-11 ]. http: 10.16081/j.epae.202208014.
国家标准化管理委员会 . 信息安全技术 网络安全等级保护基本要求 : GB/T 22239—2019 [S]. 北京 : 中国标准出版社 , 2019 .
Standardization Administration of the People’s Republic of China . Information security technology—baseline for classified protection of cybersecurity : GB/T 22239—2019 [S]. Beijing : China Standards Press , 2019 .
真正的智能家居攻击来了 DDoS令公寓住户挨冻 [EB/OL].[ 2022-10-20 ]. https://www.aqniu.com/news-views/20872.html https://www.aqniu.com/news-views/20872.html .
The real smart home attack is coming: DDoS freezes apartment residents [EB/OL]. [ 2022-10-20 ]. https://www.aqniu.com/news-views/20872.html https://www.aqniu.com/news-views/20872.html .
小心你家的智能电表被黑!中国警方披露首起物联网黑客案件 [EB/OL].[ 2022-10-20 ]. https://www.sohu.com/a/194600300_828257 https://www.sohu.com/a/194600300_828257 .
Be careful that your smart meter is hacked! Chinese police disclosed the first Internet of Things hacking case [EB/OL]. [ 2022-10-20 ]. https://www.sohu.com/a/194600300_828257 https://www.sohu.com/a/194600300_828257 .
YIN L H , LUO X , ZHU C S , et al . ConnSpoiler: disrupting C&C communication of IoT-based Botnet through fast detection of anomalous domain queries [J]. IEEE Transactions on Industrial Informatics , 2020 , 16 ( 2 ): 1373 - 1384 .
AZAD M A , BAG S , HAO F , et al . Decentralized self-enforcing trust management system for social Internet of Things [J]. IEEE Internet of Things Journal , 2020 , 7 ( 4 ): 2690 - 2703 .
NGUYEN T G , PHAN T V , HOANG D T , et al . Federated deep reinforcement learning for traffic monitoring in SDN-based IoT networks [J]. IEEE Transactions on Cognitive Communications and Networking , 2021 , 7 ( 4 ): 1048 - 1065 .
HU B , BI Y G , ZHI M J , et al . A deep one-class intrusion detection scheme in software-defined industrial networks [J]. IEEE Transactions on Industrial Informatics , 2022 , 18 ( 6 ): 4286 - 4296 .
TANG D , YAN Y D , ZHANG S Q , et al . Performance and features: mitigating the low-rate TCP-targeted DoS attack via SDN [J]. IEEE Journal on Selected Areas in Communications , 2022 , 40 ( 1 ): 428 - 444 .
RAVI N , SHALINIE S M . Learning-driven detection and mitigation of DDoS attack in IoT via SDN-cloud architecture [J]. IEEE Internet of Things Journal , 2020 , 7 ( 4 ): 3559 - 3570 .
刘念 , 余星火 , 王剑辉 , 等 . 泛在物联的配用电优化运行:信息物理社会系统的视角 [J]. 电力系统自动化 , 2020 , 44 ( 1 ): 1 - 12 .
LIU Nian , YU Xinghuo , WANG Jianhui , et al . Optimal operation of power distribution and consumption system based on ubiquitous Internet of Things: a cyber-physical-social system perspective [J]. Automation of Electric Power Systems , 2020 , 44 ( 1 ): 1 - 12 .
吴亦贝 , 李俊娥 , 陈汹 , 等 . 大规模可控负荷被恶意控制场景下配电网风险分析 [J]. 电力系统自动化 , 2018 , 42 ( 10 ): 30 - 37 .
WU Yibei , LI June , CHEN Xiong , et al . Risk analysis of distribution network with large-scale controllable loads with attacks [J]. Automation of Electric Power Systems , 2018 , 42 ( 10 ): 30 - 37 .
SOLTAN S , MITTAL P , POOR H V . BlackIoT: IoT Botnet of high wattage devices can disrupt the power grid [C]// Proceedings of the 27th USENIX Conference on Security Symposium , August 15-17 , 2018 , Baltimore, USA : 15 - 32 .
曹袖 , 黄瀚 , 王雪平 , 等 . 软件定义电网:概念、结构与示例 [J]. 电力系统自动化 , 2016 , 40 ( 6 ): 1 - 9 .
CAO Xiu , HUANG Han , WANG Xueping , et al . Software defined grid: concept, architecture and samples [J]. Automation of Electric Power Systems , 2016 , 40 ( 6 ): 1 - 9 .
岑伯维 , 蔡泽祥 , 武志刚 , 等 . 电力物联网边缘计算终端的微服务建模与计算资源配置方法 [J]. 电力系统自动化 , 2022 , 46 ( 5 ): 78 - 91 .
CEN Bowei , CAI Zexiang , WU Zhigang , et al . Microservice modeling and computing resource configuration method for edge computing terminal in electric Internet of Things [J]. Automation of Electric Power Systems , 2022 , 46 ( 5 ): 78 - 91 .
亓伟敬 , 宋清洋 , 郭磊 . 面向软件定义多模态车联网的双时间尺度RAN切片资源分配 [J]. 通信学报 , 2022 , 43 ( 4 ): 60 - 70 .
QI Weijing , SONG Qingyang , GUO Lei . Dual time scale resource allocation for RAN slicing in software-defined oriented polymorphic IoV [J]. Journal on Communications , 2022 , 43 ( 4 ): 60 - 70 .
王继业 , 李洋 , 路兆铭 , 等 . 基于能源交换机和路由器的局域能源互联网研究 [J]. 中国电机工程学报 , 2016 , 36 ( 13 ): 3433 - 3439 .
WANG Jiye , LI Yang , LU Zhaoming , et al . Research on local-area energy Internet control technology based on energy switches and energy routers [J]. Proceedings of the CSEE , 2016 , 36 ( 13 ): 3433 - 3439 .
曹军威 , 王继业 , 明阳阳 , 等 . 软件定义的能源互联网信息通信技术研究 [J]. 中国电机工程学报 , 2015 , 35 ( 14 ): 3649 - 3655 .
CAO Junwei , WANG Jiye , MING Yangyang , et al . Software-defined information and communication technology for energy Internet [J]. Proceedings of the CSEE , 2015 , 35 ( 14 ): 3649 - 3655 .
吴姗姗 , 宁昕 , 郭屾 , 等 . 配电物联网在新产业形态中的应用探讨 [J]. 高电压技术 , 2019 , 45 ( 6 ): 1723 - 1728 .
WU Shanshan , NING Xin , GUO Shen , et al . Discussion on application of distribution Internet of Things in new industry form [J]. High Voltage Engineering , 2019 , 45 ( 6 ): 1723 - 1728 .
龚钢军 , 高爽 , 陆俊 , 等 . 地市级区域能源互联网安全可信防护体系研究 [J]. 中国电机工程学报 , 2018 , 38 ( 10 ): 2861 - 2873 .
GONG Gangjun , GAO Shuang , LU Jun , et al . Study on secure trusted protection architecture for prefecture-level regional energy Internet [J]. Proceedings of the CSEE , 2018 , 38 ( 10 ): 2861 - 2873 .
0
浏览量
0
下载量
5
CSCD
关联资源
相关文章
相关作者
相关机构
京公网安备11010802024621