摘要
工业控制网络已经进入了快速发展期,针对智能电网等工业控制网络的安全威胁不断升级。智能变电站作为智能电网的核心设施,正在成为恶意攻击行为的重要目标。因此以智能电网中的智能变电站网络为例,面向工业控制网络,结合信息域与物理域对变电站复杂网络中的攻击行为进行分析,对检测防御技术进行总结是必要的。文中对智能变电站通信标准IEC 61850及其三种主要通信协议的安全威胁与防御技术进行了研究,介绍了GOOSE、SMV和MMS三种协议的基本功能,从信息域和物理域交叉渗透的角度对协议的脆弱性进行分析。系统刻画了针对各个协议的典型攻击方法,给出了针对这些攻击行为的检测方法和防御技术,讨论了现有工作面临的挑战并对未来智能电网安全的技术发展趋势做了展望。
Industrial control networks have entered a period of rapid development,and the security threats against smart grid and other industrial control networks are continuously upgraded.As the core facility of smart grid,intelligent substation is becoming the main target of malicious attacks.Therefore,taking the intelligent substation network in the smart grid as an example,it is necessary to analyze the attack behavior in the complex substation network and summarize the detection and defense technology in combination with information domain and physical domain facing the industrial control network.In this paper,we study the security threats and defense technologies of the intelligent substation communication standard IEC 61850 and its three main protocols,i.e.GOOSE,SMV and MMS.From the view of interconnection between cyber-physical domains,the vulnerabilities of protocols are analyzed,and the typical attack methods are described systematically.For these attack methods,the detection and defense technologies are summarized and compared.The challenges of the existing works and the future developments are discussed in the end.
作者
董一帆
熊荫乔
王宝耀
DONG Yi-fan;XIONG Yin-qiao;WANG Bao-yao(School of Computer,National University of Defense Technology,Changsha 410073,China;School of Electronic Information and Electrical Engineering,Changsha University,Changsha 410022,China)
出处
《计算机技术与发展》
2019年第2期1-6,共6页
Computer Technology and Development
基金
国家自然科学基金(61572514)
长沙市科技计划项目(K1705007
ZD1601042)
