一种面向攻击的配电网区域业务恢复方法
|
摘要
随着开放通信协议和智能电子设备在配电网中不断推广,配电网信息安全现状日益严峻。为保证电力工控系统攻击下业务正常运行,在分析配电网结构及其特点的基础上,提出了一种面向攻击的配电网区域业务恢复方法。结合配电网信息物理融合的特点,从信息网和电力网两个层面分别部署恢复措施,包括基于软件定义网络(Software Defined Network,SDN)的信息网攻击隔离及业务恢复,以及基于电力网重构的电力网攻击隔离及业务恢复。最后,以IEEE标准算例中的33节点系统为例,通过MATLAB建立仿真场景,验证了该方法的有效性。
With the widening application of open communication protocols and intelligent electronic devices in power distribution networks,there also comes up the growing concern on information security. To maintain the normal operation during cyber-attacks,this paper proposes an approach for regional business recovery through deeply analyzing the structure and features of power distribution networks. Considering the cyber-physical system of power distribution network,the proposed approach basically involves two aspects: the information network and the power network. On the one hand,the software defined network( SDN) is adopted to isolate cyber-attacks and recover network communications. On the other hand,a reconstruction technique is designed to isolate the power anomalies and restore the power business.Finally,a scenario on MATLAB simulation is constructed to verify the effectiveness of the proposed approach by taking as an example the 33-bus system in IEEE standard.
With the widening application of open communication protocols and intelligent electronic devices in power distribution networks,there also comes up the growing concern on information security. To maintain the normal operation during cyber-attacks,this paper proposes an approach for regional business recovery through deeply analyzing the structure and features of power distribution networks. Considering the cyber-physical system of power distribution network,the proposed approach basically involves two aspects: the information network and the power network. On the one hand,the software defined network( SDN) is adopted to isolate cyber-attacks and recover network communications. On the other hand,a reconstruction technique is designed to isolate the power anomalies and restore the power business.Finally,a scenario on MATLAB simulation is constructed to verify the effectiveness of the proposed approach by taking as an example the 33-bus system in IEEE standard.
引文
[1]屠永伟.智能配电网通信技术研究与应用[D].北京:华北电力大学,2014.
[2]Electricity Information Scaring and Analysis Center(E-ISAC),Analysis of the Cyber Attack on the Ukrainian Power Grid,Defense Use Case,Washington,DC(ics.sans.org/media/EISAC_SANS_Ukraine_DUC_5.pdf),2016.
[3]舒隽,郭志锋,韩冰.电网虚假数据注入攻击的非线性分析模型[J].华北电力大学学报(自然科学版),2018,45(2):75-81.SHU Jun,GUO Zhifeng,HAN Bing.Nonlinear analysis model of false data injection attack for power grid[J].Journal of North China Electric Power University(Natural Science Edition),2018,45(2):75-81.
[4]ASHOK A,GOVINDARASU M,WANG J.Cyberphysical attack-resilient wide-area monitoring,protection,and control for the power grid[J].Proceedings of the IEEE,2017,105(7):1389-1407.
[5]RAVI V.Detection of cyber attacks in power distribution energy management systems[M].Arizona State University,2014.
[6]YE X,ZHAO J,ZHANG Y,et al.Quantitative vulnerability assessment of cyber security for distribution automation systems[J].Energies,2015,8(6):5266-5286.
[7]PARVANIA M,KOUTSANDRIA G,MUTHUKUMARYV,et al.Hybrid control network intrusion detection systems for automated power distribution systems[C]//Ieee/ifip International Conference on Dependable Systems and Networks.IEEE Computer Society,2014:774-779.
[8]高文鹏,殷庆铎.主动配电网环境下的信息安全风险与需求研究[J].华北电力技术,2015,(3):38-42.GAO Wenpeng,YIN Qingduo.Rerearch on cyber security rsiks and requirements for active distribution networks[J].North China Electric Power,2015,(3):38-42.
[9]BIE Z,LIN Y,LI G,et al.Battling the extreme:a study on the power system resilience[J].Proceedings of the IEEE,2017,105(7):1253-1266.
[10]徐玉琴,李雪冬,张丽.基于多智能体免疫算法的配电网供电恢复[J].华北电力大学学报(自然科学版),2010,37(2):15-19.XU Yuqin,LI Xuedong,ZHANG Li.Application of multi-agent immune algorithm for distribution service restoration[J].Journal of North China Electric Power University(Natural Science Edition),2010,37(2):15-19.
[11]张京娜,刘柱.基于SDN的可编程配网通信系统关键技术研究[J].电力信息与通信技术,2015,13(5):51-56.ZHANG Jingna,LIU Zhu.Research on key techniques of the programmable distribution network communication system based on SDN[J].Electric Power Information Technology,2015,13(5):51-56.
[12]HANNON C,YAN J,JIN D.DSSnet:A smart grid modeling platform combining electrical power distribution system simulation and software defined networking emulation[C]//Proceedings of the 2016 ACM SIG-SIM Conference on Principles of Advanced Discrete Simulation.ACM,2016:131-142.
[13]DONG X,LIN H,TAN R,et al.Software-defined networking for smart grid resilience:Opportunities and challenges[C]//Proceedings of the 1st ACM Workshop on Cyber-Physical System Security.ACM,2015:61-68.
[14]LIN H,CHEN C,WANG J,et al.Self-healing attackresilient PMU network for power system operation[J].IEEE Transactions on Smart Grid,2016,9(3):1-15.
[15]JIN D,LI Z,HANNON C,et al.Toward a cyber resilient and secure microgrid using software-defined networking[J].IEEE Transactions on Smart Grid,2017,8(5):2494-2504.
[16]KUMAR Y,DAS B,SHARMA J.Multiobjective,multiconstraint service restoration of electric power distribution system with priority customers[J].IEEE Transactions on Power Delivery,2008,23(1):261-270.
[2]Electricity Information Scaring and Analysis Center(E-ISAC),Analysis of the Cyber Attack on the Ukrainian Power Grid,Defense Use Case,Washington,DC(ics.sans.org/media/EISAC_SANS_Ukraine_DUC_5.pdf),2016.
[3]舒隽,郭志锋,韩冰.电网虚假数据注入攻击的非线性分析模型[J].华北电力大学学报(自然科学版),2018,45(2):75-81.SHU Jun,GUO Zhifeng,HAN Bing.Nonlinear analysis model of false data injection attack for power grid[J].Journal of North China Electric Power University(Natural Science Edition),2018,45(2):75-81.
[4]ASHOK A,GOVINDARASU M,WANG J.Cyberphysical attack-resilient wide-area monitoring,protection,and control for the power grid[J].Proceedings of the IEEE,2017,105(7):1389-1407.
[5]RAVI V.Detection of cyber attacks in power distribution energy management systems[M].Arizona State University,2014.
[6]YE X,ZHAO J,ZHANG Y,et al.Quantitative vulnerability assessment of cyber security for distribution automation systems[J].Energies,2015,8(6):5266-5286.
[7]PARVANIA M,KOUTSANDRIA G,MUTHUKUMARYV,et al.Hybrid control network intrusion detection systems for automated power distribution systems[C]//Ieee/ifip International Conference on Dependable Systems and Networks.IEEE Computer Society,2014:774-779.
[8]高文鹏,殷庆铎.主动配电网环境下的信息安全风险与需求研究[J].华北电力技术,2015,(3):38-42.GAO Wenpeng,YIN Qingduo.Rerearch on cyber security rsiks and requirements for active distribution networks[J].North China Electric Power,2015,(3):38-42.
[9]BIE Z,LIN Y,LI G,et al.Battling the extreme:a study on the power system resilience[J].Proceedings of the IEEE,2017,105(7):1253-1266.
[10]徐玉琴,李雪冬,张丽.基于多智能体免疫算法的配电网供电恢复[J].华北电力大学学报(自然科学版),2010,37(2):15-19.XU Yuqin,LI Xuedong,ZHANG Li.Application of multi-agent immune algorithm for distribution service restoration[J].Journal of North China Electric Power University(Natural Science Edition),2010,37(2):15-19.
[11]张京娜,刘柱.基于SDN的可编程配网通信系统关键技术研究[J].电力信息与通信技术,2015,13(5):51-56.ZHANG Jingna,LIU Zhu.Research on key techniques of the programmable distribution network communication system based on SDN[J].Electric Power Information Technology,2015,13(5):51-56.
[12]HANNON C,YAN J,JIN D.DSSnet:A smart grid modeling platform combining electrical power distribution system simulation and software defined networking emulation[C]//Proceedings of the 2016 ACM SIG-SIM Conference on Principles of Advanced Discrete Simulation.ACM,2016:131-142.
[13]DONG X,LIN H,TAN R,et al.Software-defined networking for smart grid resilience:Opportunities and challenges[C]//Proceedings of the 1st ACM Workshop on Cyber-Physical System Security.ACM,2015:61-68.
[14]LIN H,CHEN C,WANG J,et al.Self-healing attackresilient PMU network for power system operation[J].IEEE Transactions on Smart Grid,2016,9(3):1-15.
[15]JIN D,LI Z,HANNON C,et al.Toward a cyber resilient and secure microgrid using software-defined networking[J].IEEE Transactions on Smart Grid,2017,8(5):2494-2504.
[16]KUMAR Y,DAS B,SHARMA J.Multiobjective,multiconstraint service restoration of electric power distribution system with priority customers[J].IEEE Transactions on Power Delivery,2008,23(1):261-270.