考虑信息攻击的配电网信息物理运行风险分析
|
摘要
以典型配电网控制系统为研究对象,分析了配电网运行控制存在的信息威胁,阐述了信息攻击下配电网控制系统信息空间与物理空间之间的风险传递作用。在此基础之上,提出了一种融合信息决策处理和物理设备动态模型的信息物理风险传递模型,通过建立离散信息决策系统与连续物理控制系统间的信息流、控制流接口,实现对信息风险向物理网络传递过程的动态描述。最后,基于DIgSILENT软件建立了仿真模型,通过仿真直观描述了信息攻击场景下的配电网动态运行过程,分析对比了不同攻击持续时间对配电网造成的影响,验证了所提模型的可行性,并为配电网信息物理系统的风险评估和防御提供了模型依据。
Taking distribution network control system as research object, the cyber threats in distribution network operation control is analyzed, and the risk transfer mechanism between cyber and physical spaces is presented. A cyber-physical risk transfer model combining information process and dynamic control of distribution system is proposed. The input and output correspondences between cyber network and physical devices are modeled to describe the closed-loop dynamic risk transfer process. Finally, the dynamic evolution processes of distribution network operation control under different cyber attack durations were simulated based on DIgSILENT software, verifying feasibility of the proposed model and providing the future model bases for risk assessment and risk defense of cyber physical distribution system.
Taking distribution network control system as research object, the cyber threats in distribution network operation control is analyzed, and the risk transfer mechanism between cyber and physical spaces is presented. A cyber-physical risk transfer model combining information process and dynamic control of distribution system is proposed. The input and output correspondences between cyber network and physical devices are modeled to describe the closed-loop dynamic risk transfer process. Finally, the dynamic evolution processes of distribution network operation control under different cyber attack durations were simulated based on DIgSILENT software, verifying feasibility of the proposed model and providing the future model bases for risk assessment and risk defense of cyber physical distribution system.
引文
[1]刘东,盛万兴,王云,等.电网信息物理系统的关键技术及其进展[J].中国电机工程学报,2015,35(14):3522-3531.Liu Dong,Sheng Wanxing,Wang Yun,et al.Key technologies and trends of cyber-physical system for power grid[J].Proceedings of the CSEE,2015,35(14):3522-3531(in Chinese).
[2]郭庆来,辛蜀骏,孙宏斌,等.电力系统信息物理融合建模与综合安全评估:驱动力与研究构想[J].中国电机工程学报,2016,36(6):1481-1489.Guo Qinglai,Xin Shujun,Sun Hongbin,et al.Power system cyberphysical modelling and security assessment:motivation and ideas[J].Proceedings of the CSEE,2016,36(6):1481-1489(in Chinese).
[3]Xin S,Guo Q,Sun H,Zhang B,Wang J,Chen C.Cyber-physical modeling and cyber-contingency assessment of hierarchical control systems[J].IEEE Transactions on Smart Grid,2015,6(5):2375-85.
[4]Dán G,Sandberg H,Ekstedt M,et al.Challenges in power system information security[J].IEEE Security&Privacy,2012,10(4):62-70.
[5]Sridhar S,Hahn A,Govindarasu M.Cyber-physical system security for the electric power grid[J].Proceedings of the IEEE,2012,100(1):210-224.
[6]郭创新,陆海波,俞斌,等.电力二次系统安全风险评估研究综述[J].电网技术,2013,37(1):112-118.Guo Chuangxin,Lu Haibo,Yu Bin,et al.A survey of research on security risk assessment of secondary system[J].Power System Technology,2013,37(1):112-118(in Chinese).
[7]Pultarova T.News Briefing:Cyber security-Ukraine grid hack is wake-up call for network operators[J].Engineering&Technology,2016,11(1):12-13.
[8]NERC Cyber Security Standards:CIP-002 through CIP-009.NERCcritical infrastructure protection(CIP)standards[S].North American Electric Reliability Corporation,2009.
[9]Sridhar S,Hahn A,Govindarasu M.Cyber-physical system security for the electric power grid[J].Proceedings of the IEEE,2012,100(1):210-224.
[10]汤奕,陈倩,李梦雅,等.电力信息物理融合系统环境中的网络攻击研究综述[J].电力系统自动化,2016,40(17):59-69.Tang Yi,Chen Qian,Li Mengya,et al.Overview on cyber-attacks against cyber physical power system[J].Automation of Electric Power System,2016,40(17):59-69(in Chinese).
[11]冀星沛,王波,董朝阳,等.电力信息-物理相互依存网络脆弱性评估及加边保护策略[J].电网技术,2016,40(6):1867-1873.Ji Xingpei,Wang Bo,Dong Zhaoyang,et al.Vulnerability evaluation and link addition protection strategy research of electrical cyberphysical interdependent networks[J].Power System Technology,2016,40(6):1867-1873(in Chinese).
[12]汪勋婷,王波.考虑信息物理融合的电网脆弱社团评估方法[J].电力自动化设备,2017,37(12):43-51.Wang Xunting,Wang Bo.Assessment method of vulnerable communities in power grid considering cyber-physical integration[J].Electric Power Automation Equipment,2017,37(12):43-51(in Chinese).
[13]Wang Q,Pipattanasomporn M,Kuzlu M,et al.Framework for vulnerability assessment of communication systems for electric power grids[J].IET Generation,Transmission&Distribution,2016,10(2):477-486.
[14]韩宇奇,郭嘉,郭创新,等.考虑软件失效的信息物理融合电力系统智能变电站安全风险评估[J].中国电机工程学报,2016,36(6):1500-1508.Han Yuqi,Guo Jia,Guo Chuangxin,et al.Intelligent substation security risk assessment of cyber physical power systems incorporating software failures[J].Proceedings of the CSEE,2016,36(6):1500-1508(in Chinese).
[15]Ashok A,Govindarasu M,Wang J.Cyber-physical attack-resilient wide-area monitoring,protection,and control for the power grid[J].Proceedings of the IEEE,2017,105(7):1389-1407.
[16]Buldyrev S V,Parshani R,Paul G,et al.Catastrophic cascade of failures in interdependent networks[J].Nature,2010,464(7291):1025-1028.
[17]王宇飞,高昆仑,赵婷,等.基于改进攻击图的电力信息物理系统跨空间连锁故障危害评估[J].中国电机工程学报,2016,36(6):1490-1499.Wang Yufei,Gao Kunlun,Zhao Ting,et al.Assessing the harmfulness of cascading failures across space in electric cyber-physical system based on improved attack graph[J].Proceedings of the CSEE,2016,36(6):1490-1499(in Chinese).
[18]叶夏明,文福拴,尚金成,等.电力系统中信息物理安全风险传播机制[J].电网技术,2015,39(11):3072-3079.Ye Xiaming,Wen Fushuan,Shang Jincheng,et al.Propagation mechanism of cyber physical security risks in power systems[J].Power System Technology,2015,39(11):3072-3079(in Chinese).
[19]刘东,陈云辉,黄玉辉,等.主动配电网的分层能量管理与协调控制[J].中国电机工程学报,2014,34(31):5500-5506.Liu Dong,Chen Yunhui,Huang Yuhui,et al.Hierarchical energy management and coordination control of active distribution network[J].Proceedings of the CSEE,2014,34(31):5500-5506(in Chinese).
[2]郭庆来,辛蜀骏,孙宏斌,等.电力系统信息物理融合建模与综合安全评估:驱动力与研究构想[J].中国电机工程学报,2016,36(6):1481-1489.Guo Qinglai,Xin Shujun,Sun Hongbin,et al.Power system cyberphysical modelling and security assessment:motivation and ideas[J].Proceedings of the CSEE,2016,36(6):1481-1489(in Chinese).
[3]Xin S,Guo Q,Sun H,Zhang B,Wang J,Chen C.Cyber-physical modeling and cyber-contingency assessment of hierarchical control systems[J].IEEE Transactions on Smart Grid,2015,6(5):2375-85.
[4]Dán G,Sandberg H,Ekstedt M,et al.Challenges in power system information security[J].IEEE Security&Privacy,2012,10(4):62-70.
[5]Sridhar S,Hahn A,Govindarasu M.Cyber-physical system security for the electric power grid[J].Proceedings of the IEEE,2012,100(1):210-224.
[6]郭创新,陆海波,俞斌,等.电力二次系统安全风险评估研究综述[J].电网技术,2013,37(1):112-118.Guo Chuangxin,Lu Haibo,Yu Bin,et al.A survey of research on security risk assessment of secondary system[J].Power System Technology,2013,37(1):112-118(in Chinese).
[7]Pultarova T.News Briefing:Cyber security-Ukraine grid hack is wake-up call for network operators[J].Engineering&Technology,2016,11(1):12-13.
[8]NERC Cyber Security Standards:CIP-002 through CIP-009.NERCcritical infrastructure protection(CIP)standards[S].North American Electric Reliability Corporation,2009.
[9]Sridhar S,Hahn A,Govindarasu M.Cyber-physical system security for the electric power grid[J].Proceedings of the IEEE,2012,100(1):210-224.
[10]汤奕,陈倩,李梦雅,等.电力信息物理融合系统环境中的网络攻击研究综述[J].电力系统自动化,2016,40(17):59-69.Tang Yi,Chen Qian,Li Mengya,et al.Overview on cyber-attacks against cyber physical power system[J].Automation of Electric Power System,2016,40(17):59-69(in Chinese).
[11]冀星沛,王波,董朝阳,等.电力信息-物理相互依存网络脆弱性评估及加边保护策略[J].电网技术,2016,40(6):1867-1873.Ji Xingpei,Wang Bo,Dong Zhaoyang,et al.Vulnerability evaluation and link addition protection strategy research of electrical cyberphysical interdependent networks[J].Power System Technology,2016,40(6):1867-1873(in Chinese).
[12]汪勋婷,王波.考虑信息物理融合的电网脆弱社团评估方法[J].电力自动化设备,2017,37(12):43-51.Wang Xunting,Wang Bo.Assessment method of vulnerable communities in power grid considering cyber-physical integration[J].Electric Power Automation Equipment,2017,37(12):43-51(in Chinese).
[13]Wang Q,Pipattanasomporn M,Kuzlu M,et al.Framework for vulnerability assessment of communication systems for electric power grids[J].IET Generation,Transmission&Distribution,2016,10(2):477-486.
[14]韩宇奇,郭嘉,郭创新,等.考虑软件失效的信息物理融合电力系统智能变电站安全风险评估[J].中国电机工程学报,2016,36(6):1500-1508.Han Yuqi,Guo Jia,Guo Chuangxin,et al.Intelligent substation security risk assessment of cyber physical power systems incorporating software failures[J].Proceedings of the CSEE,2016,36(6):1500-1508(in Chinese).
[15]Ashok A,Govindarasu M,Wang J.Cyber-physical attack-resilient wide-area monitoring,protection,and control for the power grid[J].Proceedings of the IEEE,2017,105(7):1389-1407.
[16]Buldyrev S V,Parshani R,Paul G,et al.Catastrophic cascade of failures in interdependent networks[J].Nature,2010,464(7291):1025-1028.
[17]王宇飞,高昆仑,赵婷,等.基于改进攻击图的电力信息物理系统跨空间连锁故障危害评估[J].中国电机工程学报,2016,36(6):1490-1499.Wang Yufei,Gao Kunlun,Zhao Ting,et al.Assessing the harmfulness of cascading failures across space in electric cyber-physical system based on improved attack graph[J].Proceedings of the CSEE,2016,36(6):1490-1499(in Chinese).
[18]叶夏明,文福拴,尚金成,等.电力系统中信息物理安全风险传播机制[J].电网技术,2015,39(11):3072-3079.Ye Xiaming,Wen Fushuan,Shang Jincheng,et al.Propagation mechanism of cyber physical security risks in power systems[J].Power System Technology,2015,39(11):3072-3079(in Chinese).
[19]刘东,陈云辉,黄玉辉,等.主动配电网的分层能量管理与协调控制[J].中国电机工程学报,2014,34(31):5500-5506.Liu Dong,Chen Yunhui,Huang Yuhui,et al.Hierarchical energy management and coordination control of active distribution network[J].Proceedings of the CSEE,2014,34(31):5500-5506(in Chinese).