CN111107097A - Intelligent substation equipment network node linkage failure risk analysis method based on CML - Google Patents
Intelligent substation equipment network node linkage failure risk analysis method based on CML Download PDFInfo
- Publication number
- CN111107097A CN111107097A CN201911382037.4A CN201911382037A CN111107097A CN 111107097 A CN111107097 A CN 111107097A CN 201911382037 A CN201911382037 A CN 201911382037A CN 111107097 A CN111107097 A CN 111107097A
- Authority
- CN
- China
- Prior art keywords
- network
- intelligent substation
- equipment
- node
- nodes
- Prior art date
- Legal status (The legal status is an assumption and is not a legal conclusion. Google has not performed a legal analysis and makes no representation as to the accuracy of the status listed.)
- Pending
Links
Images
Classifications
-
- H—ELECTRICITY
- H04—ELECTRIC COMMUNICATION TECHNIQUE
- H04L—TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION
- H04L63/00—Network architectures or network communication protocols for network security
- H04L63/20—Network architectures or network communication protocols for network security for managing network security; network security policies in general
-
- H—ELECTRICITY
- H04—ELECTRIC COMMUNICATION TECHNIQUE
- H04L—TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION
- H04L41/00—Arrangements for maintenance, administration or management of data switching networks, e.g. of packet switching networks
- H04L41/06—Management of faults, events, alarms or notifications
- H04L41/0631—Management of faults, events, alarms or notifications using root cause analysis; using analysis of correlation between notifications, alarms or events based on decision criteria, e.g. hierarchy, tree or time analysis
-
- H—ELECTRICITY
- H04—ELECTRIC COMMUNICATION TECHNIQUE
- H04L—TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION
- H04L41/00—Arrangements for maintenance, administration or management of data switching networks, e.g. of packet switching networks
- H04L41/14—Network analysis or design
-
- H—ELECTRICITY
- H04—ELECTRIC COMMUNICATION TECHNIQUE
- H04L—TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION
- H04L63/00—Network architectures or network communication protocols for network security
- H04L63/14—Network architectures or network communication protocols for network security for detecting or protecting against malicious traffic
- H04L63/1433—Vulnerability analysis
Landscapes
- Engineering & Computer Science (AREA)
- Computer Networks & Wireless Communication (AREA)
- Signal Processing (AREA)
- Computer Security & Cryptography (AREA)
- Computer Hardware Design (AREA)
- Computing Systems (AREA)
- General Engineering & Computer Science (AREA)
- Management, Administration, Business Operations System, And Electronic Commerce (AREA)
Abstract
The invention relates to a CML-based intelligent substation equipment network node linkage failure risk analysis method, and belongs to the field of information safety. The influence of different equipment nodes on the whole equipment network of the intelligent substation when a fault occurs is evaluated by establishing a network for the equipment nodes of the intelligent substation and equipment connection among the nodes, so that the information safety risk of the intelligent substation is effectively analyzed. The intelligent substation information security risk analysis management subsystem based on the model can assist a manager in managing information security risk data of the intelligent substation and realize data visualization, and provides accurate basic data support for network security evaluation of the intelligent substation system.
Description
Technical Field
The invention belongs to the field of information security, and relates to a CML-based intelligent substation equipment network node linkage failure risk analysis method.
Background
The safety of the intelligent substation, which is a core node of the intelligent power grid, is naturally of great importance, and once a problem occurs, the consequences can be catastrophic. Some lawbreakers may also use hacker techniques to steal the information related to the intelligent substation, causing the national assets to suffer loss. Therefore, analyzing the possible risks of the substation and ensuring the information security of the smart grid are important targets.
The study on the security of the power information system has become one of the research hotspots in the academic world. The JWG-DZ/B3/CZ-01 working group of the international large power grid organization (CIGRE) consists of three special committees including DZ (power information and communication system), B3 (substation), and CZ (system operation and control), which conducted a "power system information and communication system safety" study and formed a technical manual, and in the research report of this working group, it was pointed out that: "information security risk assessment is an indispensable part in power security defense, but in power system applications, a complete method for analyzing and controlling process information security risks is still lacking". The JWG-DZ/B3/CZ-01 working group 'Security for Information System and transactions in Electric Power System' of CIGRE is researched aiming at the Information Security problem and the solution of the Electric Power System, and the framework of the Electric Power Information network Security System and the strategy of Security management are discussed.
Related work of information security risk assessment technology is just entering the development period in recent years in China, and at present, the research of information system security assessment theory is lacked in China, and research aiming at specific fields such as power information systems and the like is relatively few. The importance, threat level and vulnerability level of assets are used as quantitative indexes, the influence and possibility values of security events are obtained through the three indexes, and then the risk value of an object is calculated on the basis of the influence and possibility values.
Disclosure of Invention
In view of this, the present invention provides a method for analyzing a risk of cascading failure of network nodes of intelligent substation equipment based on CML.
In order to achieve the purpose, the invention provides the following technical scheme:
a CML-based intelligent substation equipment network node linkage failure risk analysis method comprises the following steps:
the influence of different equipment nodes on the whole equipment network of the intelligent substation when a fault occurs is evaluated by establishing a network for the equipment nodes of the intelligent substation and equipment connection among the nodes, so that the information safety risk of the intelligent substation is effectively analyzed.
Optionally, the state detection step of the intelligent substation device is as follows:
step 1: for an intelligent substation system, according to the safety characteristics of the intelligent substation system, equipment nodes in the intelligent substation are mapped into nodes in a network, data interaction between the equipment nodes is mapped into edges in the network, and an equipment node network is constructed;
step 2: calculating the average path length of the network, the aggregation coefficient of the whole network and the degree distribution of equipment nodes in the network according to the intelligent substation equipment node network constructed in the step 1, comparing to obtain the distribution characteristics of the intelligent substation equipment node network, and selecting a subsequent information safety risk analysis method on the premise of having small world scale-free characteristics;
and step 3: according to the distribution characteristics of the intelligent substation equipment node network in the step 2, node linkage failure evolution model establishment is carried out on the intelligent substation equipment node network by selecting a coupling mapping grid CML;
and 4, step 4: performing node linkage failure result simulation on the intelligent substation network by combining a vulnerability scoring list of the nodes according to the model established by the CML linkage failure risk analysis method used in the step 3; performing node core degree analysis on the intelligent substation equipment node network through the virtual security level;
and 5: and 4, evaluating the network information security risk of the node of the intelligent substation equipment according to the method building model in the step 4, combining specific vulnerability data of the intelligent substation equipment, increasing a network topological graph of the node of the intelligent substation equipment to realize a visual effect, clicking a specific failure node on the topological graph, and simulating failure conditions of other nodes in the whole network after chain propagation in the network by a CML method to obtain an evaluation result.
Optionally, the step of analyzing the structure of the network is:
(1) calculating the average path length of the network;
(2) calculating the aggregation coefficient of the network;
(3) calculating the degree distribution of nodes in the network;
(4) and judging whether the network has shorter average path length, higher clustering coefficient and degree distribution conforming to power law distribution or not compared with a random network, and determining whether the network conforms to a small world and scale-free rule or not and whether a CML model can be applied or not.
Optionally, the method is characterized in that: the information security risk analysis implementation step comprises:
(1) performing node linkage failure result simulation on the intelligent substation network by combining a vulnerability scoring list of nodes according to a model established by the CML linkage failure risk analysis method;
(2) and performing node core degree analysis on the intelligent substation equipment node network through the virtual security level according to a model established by the CML cascading failure risk analysis method.
The invention has the beneficial effects that:
(1) the method makes up the defects of the traditional intelligent substation information security risk assessment method, and can analyze the whole equipment node network by combining vulnerability scoring data of corresponding nodes on line;
(2) the evaluation range is wide, and the method can adapt to different types of intelligent substation equipment node networks;
(3) the method solves the problems of subjective parameter setting and poor real-time performance of the traditional intelligent substation information security risk analysis method.
(4) The invention can also realize the visualization process of dynamic equipment node network linkage failure through data and program interface calling, and provide treatment opinions of relevant nodes and bugs.
Additional advantages, objects, and features of the invention will be set forth in part in the description which follows and in part will become apparent to those having ordinary skill in the art upon examination of the following or may be learned from practice of the invention. The objectives and other advantages of the invention may be realized and attained by the means of the instrumentalities and combinations particularly pointed out hereinafter.
Drawings
For the purposes of promoting a better understanding of the objects, aspects and advantages of the invention, reference will now be made to the following detailed description taken in conjunction with the accompanying drawings in which:
FIG. 1 is a schematic diagram of an intelligent substation node;
FIG. 2 is a schematic diagram of intelligent substation node connections;
FIG. 3 is a schematic diagram of a complex network distribution;
fig. 4 is an illustrative diagram of one embodiment of the invention.
Detailed Description
The embodiments of the present invention are described below with reference to specific embodiments, and other advantages and effects of the present invention will be easily understood by those skilled in the art from the disclosure of the present specification. The invention is capable of other and different embodiments and of being practiced or of being carried out in various ways, and its several details are capable of modification in various respects, all without departing from the spirit and scope of the present invention. It should be noted that the drawings provided in the following embodiments are only for illustrating the basic idea of the present invention in a schematic way, and the features in the following embodiments and examples may be combined with each other without conflict.
Wherein the showings are for the purpose of illustrating the invention only and not for the purpose of limiting the same, and in which there is shown by way of illustration only and not in the drawings in which there is no intention to limit the invention thereto; to better illustrate the embodiments of the present invention, some parts of the drawings may be omitted, enlarged or reduced, and do not represent the size of an actual product; it will be understood by those skilled in the art that certain well-known structures in the drawings and descriptions thereof may be omitted.
The same or similar reference numerals in the drawings of the embodiments of the present invention correspond to the same or similar components; in the description of the present invention, it should be understood that if there is an orientation or positional relationship indicated by terms such as "upper", "lower", "left", "right", "front", "rear", etc., based on the orientation or positional relationship shown in the drawings, it is only for convenience of description and simplification of description, but it is not an indication or suggestion that the referred device or element must have a specific orientation, be constructed in a specific orientation, and be operated, and therefore, the terms describing the positional relationship in the drawings are only used for illustrative purposes, and are not to be construed as limiting the present invention, and the specific meaning of the terms may be understood by those skilled in the art according to specific situations.
As shown in fig. 1-4. The method is a CML equipment node linkage failure risk analysis method in the embodiment. The method comprises the following steps:
step 1, for an intelligent substation system, according to the safety characteristics of the intelligent substation system, mapping equipment nodes in the intelligent substation as nodes in a network, and mapping data interaction between the equipment nodes as edges in the network to construct an equipment node network;
according to the step 1, connection relations between nodes of the intelligent substation equipment are topologically configured into an intelligent substation equipment node network according to the structural characteristics, and the complex network can be abstractly represented by a graph G (V, E) formed by a point set V and an edge set E. The nodes in the graph are the mapping of the entities in the complex network system, the edges are the mapping of the relationship between the entities in the complex network system, and the edges can have weights and directions, wherein the weights represent the closeness degree of the relationship between the nodes, and the directions represent the one-way or multi-way of the relationship between the nodes. The intelligent substation equipment nodes can establish a network according to the relationship.
Step 2, calculating the average path length of the network, the aggregation coefficient of the whole network and the degree distribution of equipment nodes in the network according to the intelligent substation equipment node network constructed in the step 1, comparing to obtain the distribution characteristics of the intelligent substation equipment node network, and selecting a subsequent information security risk analysis method on the premise that the intelligent substation equipment node network has small-world scale-free characteristics;
the following parameters of the established network are calculated in turn:
1) degree distribution: the average of the degrees k of all nodes v in the network is called the average of the network:
2) average path length: the average path length L of the network is defined as the average of the distances between any two nodes:
3) clustering coefficient: node viK of (a)iNumber of edges E actually existing between neighboring nodesiAnd total number of possible edgesThe ratio is defined as node viCluster coefficient of (C)i:
The clustering coefficient C of the whole network is CiAverage value of (a).
4) Degree correlation: the degree correlation is used for describing the connection relation between nodes in the network, and if the nodes with larger degree tend to the nodes with larger degree of connection, the network is called to be positively correlated; otherwise called negative correlation. The degree correlation of the network can be described only by calculating the Pearson correlation coefficient r of the vertex degree.
Wherein ji，kiRespectively representing the degrees of the two vertices j, k connecting the ith edge. M represents the total number of edges of the network.
Step 3, according to the distribution characteristics of the intelligent substation equipment node network in the step 2, node linkage failure evolution model establishment is carried out on the intelligent substation equipment node network by selecting a CML (coupler grid), namely a coupling mapping grid;
and mapping equipment nodes in the intelligent substation into nodes in the network, and mapping data interaction between the equipment nodes into edges in the network. Through investigation, the average path length in the intelligent substation equipment node network is smaller, the aggregation coefficient of the whole network is higher, and the characteristics of the small-world network are met. Meanwhile, the degree distribution of the equipment nodes in the network obeys power law distribution and also accords with the characteristics of a scale-free network.
The intelligent substation equipment node network has the characteristics of both small-world and scale-free networks, namely the small network in the network has high cohesion degree, a small number of nodes have high entrance and exit degrees, and a large number of nodes are gathered around a small number of HUB nodes. The analysis of the network properties of the intelligent substation equipment nodes establishes a basis for selecting an information security risk analysis model later.
In order to simulate the change condition of the smart grid under the condition that the equipment node is failed, such as an attack, the state of a node i is considered to apply a disturbance R to be more than or equal to 1 at a moment m, so that the node fails at the moment m, and the state change of the node i is described by the following formula:
step 4, according to the model established by the CML linkage failure risk analysis method used in the step 3, node linkage failure result simulation can be carried out on the intelligent substation network by combining a vulnerability scoring list of the nodes; the core degree of the nodes of the intelligent substation equipment node network can be analyzed through the virtual security level;
and 5, evaluating the network information security risk of the nodes of the intelligent substation equipment according to the model established in the step 4, combining specific vulnerability data of the intelligent substation equipment, increasing a network topological graph of the nodes of the intelligent substation equipment to realize a visual effect, and simulating the failure conditions of other nodes in the whole network after chain propagation in the network by clicking a specific failure node on the topological graph to obtain an evaluation result, which is shown in figure 4. Table 1 shows the risk model selection after the intelligent substation introduces machine learning.
Table 1: risk model selection after intelligent substation introduces machine learning
Finally, the above embodiments are only intended to illustrate the technical solutions of the present invention and not to limit the present invention, and although the present invention has been described in detail with reference to the preferred embodiments, it will be understood by those skilled in the art that modifications or equivalent substitutions may be made on the technical solutions of the present invention without departing from the spirit and scope of the technical solutions, and all of them should be covered by the claims of the present invention.
Claims (4)
1. A CML-based intelligent substation equipment network node linkage failure risk analysis method is characterized by comprising the following steps: the method comprises the following steps:
the influence of different equipment nodes on the whole equipment network of the intelligent substation when a fault occurs is evaluated by establishing a network for the equipment nodes of the intelligent substation and equipment connection among the nodes, so that the information safety risk of the intelligent substation is effectively analyzed.
2. The CML-based intelligent substation equipment network node linkage failure risk analysis method according to claim 1, characterized in that: the state detection steps of the intelligent substation equipment are as follows:
step 1: for an intelligent substation system, according to the safety characteristics of the intelligent substation system, equipment nodes in the intelligent substation are mapped into nodes in a network, data interaction between the equipment nodes is mapped into edges in the network, and an equipment node network is constructed;
step 2: calculating the average path length of the network, the aggregation coefficient of the whole network and the degree distribution of equipment nodes in the network according to the intelligent substation equipment node network constructed in the step 1, comparing to obtain the distribution characteristics of the intelligent substation equipment node network, and selecting a subsequent information safety risk analysis method on the premise of having small world scale-free characteristics;
and step 3: according to the distribution characteristics of the intelligent substation equipment node network in the step 2, node linkage failure evolution model establishment is carried out on the intelligent substation equipment node network by selecting a coupling mapping grid CML;
and 4, step 4: performing node linkage failure result simulation on the intelligent substation network by combining a vulnerability scoring list of the nodes according to the model established by the CML linkage failure risk analysis method used in the step 3; performing node core degree analysis on the intelligent substation equipment node network through the virtual security level;
and 5: and 4, evaluating the network information security risk of the node of the intelligent substation equipment according to the method building model in the step 4, combining specific vulnerability data of the intelligent substation equipment, increasing a network topological graph of the node of the intelligent substation equipment to realize a visual effect, clicking a specific failure node on the topological graph, and simulating failure conditions of other nodes in the whole network after chain propagation in the network by a CML method to obtain an evaluation result.
3. The CML-based intelligent substation equipment network node linkage failure risk analysis method according to claim 1, characterized in that: the structural analysis steps of the network are as follows:
(1) calculating the average path length of the network;
(2) calculating the aggregation coefficient of the network;
(3) calculating the degree distribution of nodes in the network;
(4) and judging whether the network has shorter average path length, higher clustering coefficient and degree distribution conforming to power law distribution or not compared with a random network, and determining whether the network conforms to a small world and scale-free rule or not and whether a CML model can be applied or not.
4. The CML-based intelligent substation equipment network node linkage failure risk analysis method according to claim 2, characterized in that: the information security risk analysis implementation step comprises:
(1) performing node linkage failure result simulation on the intelligent substation network by combining a vulnerability scoring list of nodes according to a model established by the CML linkage failure risk analysis method;
(2) and performing node core degree analysis on the intelligent substation equipment node network through the virtual security level according to a model established by the CML cascading failure risk analysis method.
Priority Applications (1)
| Application Number | Priority Date | Filing Date | Title |
|---|---|---|---|
| CN201911382037.4A CN111107097A (en) | 2019-12-27 | 2019-12-27 | Intelligent substation equipment network node linkage failure risk analysis method based on CML |
Applications Claiming Priority (1)
| Application Number | Priority Date | Filing Date | Title |
|---|---|---|---|
| CN201911382037.4A CN111107097A (en) | 2019-12-27 | 2019-12-27 | Intelligent substation equipment network node linkage failure risk analysis method based on CML |
Publications (1)
| Publication Number | Publication Date |
|---|---|
| CN111107097A true CN111107097A (en) | 2020-05-05 |
Family
ID=70425305
Family Applications (1)
| Application Number | Title | Priority Date | Filing Date |
|---|---|---|---|
| CN201911382037.4A Pending CN111107097A (en) | 2019-12-27 | 2019-12-27 | Intelligent substation equipment network node linkage failure risk analysis method based on CML |
Country Status (1)
| Country | Link |
|---|---|
| CN (1) | CN111107097A (en) |
Citations (2)
| Publication number | Priority date | Publication date | Assignee | Title |
|---|---|---|---|---|
| CN102915337A (en) * | 2012-09-18 | 2013-02-06 | 中国电力科学研究院 | Variation quantity mode-based hierarchical management method for fine multistage power grid model |
| US20150346287A1 (en) * | 2014-05-27 | 2015-12-03 | North China Electric Power University | Method For Analyzing Operation State Of Substation By Combining Whole Grid Model With Local Grid Model |
-
2019
- 2019-12-27 CN CN201911382037.4A patent/CN111107097A/en active Pending
Patent Citations (2)
| Publication number | Priority date | Publication date | Assignee | Title |
|---|---|---|---|---|
| CN102915337A (en) * | 2012-09-18 | 2013-02-06 | 中国电力科学研究院 | Variation quantity mode-based hierarchical management method for fine multistage power grid model |
| US20150346287A1 (en) * | 2014-05-27 | 2015-12-03 | North China Electric Power University | Method For Analyzing Operation State Of Substation By Combining Whole Grid Model With Local Grid Model |
Non-Patent Citations (3)
| Title |
|---|
| 张其林: "变电站自动化系统可信性若干问题研究", 《中国优秀博硕士学位论文全文数据库(博士) 工程科技Ⅱ辑》 * |
| 张其林等: "基于IEC 61850的变电站自动化系统连锁故障分析", 《电力系统自动化》 * |
| 袁磊等: "基于CML的变电站自动化系统脆弱性分析", 《计算机工程与科学》 * |
Similar Documents
| Publication | Publication Date | Title |
|---|---|---|
| CN109191326B (en) | Attack party view angle-based network attack risk assessment method for CPS (control Performance Standard) mutual existence system of power distribution network | |
| Yuan et al. | Quantitative analysis of load redistribution attacks in power systems | |
| CN108009710A (en) | Node test importance appraisal procedure based on similarity and TrustRank algorithms | |
| CN112633649A (en) | Power grid multi-attribute important node evaluation and planning method | |
| CN112580217A (en) | Communication system structure parameterization modeling method based on complex network | |
| CN109767352A (en) | A kind of power information physics emerging system safety situation evaluation method | |
| Anwar et al. | Anomaly detection in electric network database of smart grid: Graph matching approach | |
| CN107483487B (en) | TOPSIS-based multi-dimensional network security measurement method | |
| CN103996147A (en) | Comprehensive evaluation method for power distribution network | |
| Peng et al. | Reliability analysis in interdependent smart grid systems | |
| CN109902373A (en) | A kind of area under one's jurisdiction Fault Diagnosis for Substation, localization method and system | |
| CN109033507A (en) | A kind of Model in Reliability Evaluation of Power Systems method considering the failure of information system function for monitoring | |
| CN108183897A (en) | A kind of information physical emerging system safety risk estimating method | |
| CN107742883A (en) | A kind of power system topology island system for rapidly identifying and method based on Spark | |
| Beyza et al. | Characterising the security of power system topologies through a combined assessment of reliability, robustness, and resilience | |
| CN108510162B (en) | Safety efficiency evaluation method for active power distribution network | |
| CN102045186B (en) | Event analysis method and system | |
| CN111107097A (en) | Intelligent substation equipment network node linkage failure risk analysis method based on CML | |
| CN110021933B (en) | Power information system control function reliability assessment method considering component faults | |
| CN108322334B (en) | Reliability assessment method for electric power communication system | |
| CN111191867A (en) | Reliability evaluation method for complex network of power system | |
| Guan et al. | Power grids vulnerability analysis based on combination of degree and betweenness | |
| CN113902300A (en) | Smart power grid control system risk assessment method considering topological structure | |
| Cai et al. | Research on Risk Assessment and Strategy Dynamic Attack and Defense Game Based on Twin Model of Power Distribution Network | |
| CN110889614A (en) | Power grid system important user power supply risk analysis method based on SCADA big data |
Legal Events
| Date | Code | Title | Description |
|---|---|---|---|
| PB01 | Publication | ||
| PB01 | Publication | ||
| SE01 | Entry into force of request for substantive examination | ||
| SE01 | Entry into force of request for substantive examination | ||
| TA01 | Transfer of patent application right |
Effective date of registration: 20200902 Address after: 610000 No. 16 Jinhui west two street, Chengdu high tech Zone, Sichuan Applicant after: STATE GRID SICHUAN ELECTRIC POWER Research Institute Applicant after: STATE GRID CORPORATION OF CHINA Address before: 610000 No. 16 Jinhui west two street, Chengdu high tech Zone, Sichuan Applicant before: STATE GRID SICHUAN ELECTRIC POWER Research Institute Applicant before: STATE GRID CORPORATION OF CHINA Applicant before: Chongqing University |
|
| TA01 | Transfer of patent application right | ||
| CB03 | Change of inventor or designer information |
Inventor after: Wang Sheng Inventor after: Zheng Yongkang Inventor after: Chai Jiwen Inventor after: Tang Yong Inventor after: Liang Huihui Inventor after: Zhang Linghao Inventor after: Zhang Jia Inventor after: Tang Chao Inventor after: Wang Hai Inventor after: Liu Shanmei Inventor before: Wang Sheng Inventor before: Zheng Yongkang Inventor before: Xia Xiaofeng Inventor before: Hu Bing Inventor before: Zhang Jing Inventor before: Chai Jiwen Inventor before: Tang Yong Inventor before: Liang Huihui Inventor before: Zhang Linghao Inventor before: Zhang Jia Inventor before: Tang Chao Inventor before: Wang Hai Inventor before: Liu Shanmei |
|
| CB03 | Change of inventor or designer information | ||
| RJ01 | Rejection of invention patent application after publication |
Application publication date: 20200505 |
|
| RJ01 | Rejection of invention patent application after publication |