基于攻击方视角的电力CPS网络攻击模式分析.pdfVIP

38 卷 11 期 电 网 技 术 Vol. 38 No. 11 20 14 年11 月 Power System Technology Nov. 2014 文章编号：1000-3673 （20 14）11-3115-06 中图分类号：TM 734 文献标志码：A 学科代码：470 4054 基于攻击方视角的电力CPS 网络攻击模式分析 苏盛，吴长江，马钧，曾祥君 （智能电网运行与控制湖南省重点实验室(长沙理工大学) ，湖南省 长沙市 4 10004 ） Attacker s Perspective Based Analysis on Cyber Attack Mode to Cyber-Physical System SU Sheng, WU Changji ang, MA Jun, ZENG Xiangjun (Hunan Province Key Laboratory of Smart Grids Operation and Control (Changsha University of Science and Technology), Changsha 4 10004, Hunan Province, China) ABSTRACT: In modern power grid the dispatching and 关大停电分析了无特定目的网络攻击和信息系统自身随机 control as well as the production management heavily rely on 失效与异常对电网的影响；然后综述了谋求经济利益的攻击 the electrical cyber-physical system (CPS). Consequently, the 中窃电行为检测方法；最后，假定以破坏电网稳定为目的的 electric CPS becomes a high value target of cyber attack. Since 恶意软件能借用震网病毒传播模式侵入实时控制区，结合我 there are obvious differences among attack obj ects due to the 国与北美电力企业在 SCADA 系统和广域保护等系统应用 different aims of the attack, the adopted attack patterns are 上存在的差异，分析了攻击方可能选择的攻击对象、攻击模式 different, herein the cyber attacks in electrical CPS are 和后果，讨论了智能电表和SCADA 中的针对性入侵检测方法。 classified into three categories, i.e., having no specific aim, 关键词：电力CPS ；信息安全；网络攻击；震网病毒 getting economic benefit and destroying power grid stability such as leading to catastrophic blackout, and discussed DOI 10.13335/j.1000-3673.pst.2014.11.026 respectively. Firstly, based on the collected data related to 0 引言 blackouts in North America from 2003 to 2007, the impacts of the cyber attack without special aim and the random failure and 作为现代社会的关键性基础设