CN109066981A - Information safety monitoring method for medium voltage distribution network - Google Patents
Information safety monitoring method for medium voltage distribution network Download PDFInfo
- Publication number
- CN109066981A CN109066981A CN201810962229.1A CN201810962229A CN109066981A CN 109066981 A CN109066981 A CN 109066981A CN 201810962229 A CN201810962229 A CN 201810962229A CN 109066981 A CN109066981 A CN 109066981A
- Authority
- CN
- China
- Prior art keywords
- distribution network
- voltage distribution
- medium
- information
- medium voltage
- Prior art date
- Legal status (The legal status is an assumption and is not a legal conclusion. Google has not performed a legal analysis and makes no representation as to the accuracy of the status listed.)
- Granted
Links
- 238000012544 monitoring process Methods 0.000 title claims abstract description 46
- 238000000034 method Methods 0.000 title claims abstract description 20
- 238000004891 communication Methods 0.000 claims abstract description 18
- 238000004458 analytical method Methods 0.000 claims abstract description 10
- 238000005259 measurement Methods 0.000 claims description 13
- 230000002159 abnormal effect Effects 0.000 claims 1
- 238000010586 diagram Methods 0.000 description 4
- 230000005856 abnormality Effects 0.000 description 2
- 238000004519 manufacturing process Methods 0.000 description 2
- 238000011161 development Methods 0.000 description 1
- 238000005516 engineering process Methods 0.000 description 1
- 238000002955 isolation Methods 0.000 description 1
- 230000001681 protective effect Effects 0.000 description 1
- 230000002787 reinforcement Effects 0.000 description 1
Classifications
-
- H02J13/0006—
-
- H—ELECTRICITY
- H02—GENERATION; CONVERSION OR DISTRIBUTION OF ELECTRIC POWER
- H02J—CIRCUIT ARRANGEMENTS OR SYSTEMS FOR SUPPLYING OR DISTRIBUTING ELECTRIC POWER; SYSTEMS FOR STORING ELECTRIC ENERGY
- H02J2203/00—Indexing scheme relating to details of circuit arrangements for AC mains or AC distribution networks
- H02J2203/20—Simulating, e g planning, reliability check, modelling or computer assisted design [CAD]
Landscapes
- Remote Monitoring And Control Of Power-Distribution Networks (AREA)
- Data Exchanges In Wide-Area Networks (AREA)
Abstract
The invention discloses a kind of information safety monitoring methods for medium voltage distribution network, the communication data information including acquiring medium-voltage distribution network termination；The Situation Awareness analysis probabilistic model of building medium-voltage distribution network termination is simultaneously monitored the information security state of medium voltage distribution network；Monitoring information reports main website and completes the information security monitoring of medium voltage distribution network.This information safety monitoring method for medium voltage distribution network provided by the invention, by the data statistics and access frequency characteristic that actively obtain and fully consider distribution network terminal communication flows that distribution main website monitors, the data information of the monitoring distribution terminal of distribution main website is obtained by acquisition, the flow and access frequency Situation Awareness analysis model for constructing distribution network terminal, improve the validity of medium voltage distribution network end message safety monitoring.
Description
Technical field
Present invention relates particularly to a kind of information safety monitoring methods for medium voltage distribution network.
Background technique
With the development and the improvement of people's living standards of economic technology, electric energy has become in people's production and life
Essential secondary energy sources bring endless convenience to people's production and life.
Medium voltage distribution network communication message safety is one of the precondition that power distribution network operates normally.For medium voltage distribution network
Information security attack is increasingly frequent, relatively isolated between safety protection equipment, and safe island phenomenon is prominent.Hostile network is attacked
It is serious to hit the harm caused by power distribution network, may result in power distribution network terminal leaking data, or even will cause large-area power-cuts etc.
Social danger.
In existing medium voltage distribution network communication message safety strategy, majority is concentrated on setting physical isolation or is recognized using encryption
Card system etc..But it is directed to medium voltage distribution network communication message safety strategy at present, it is all passively, i.e., by maintaining secrecy to itself
Property and tolerance reinforcement so that the external attack invalidation for medium-voltage distribution Network Communication.It is clear that current
Security strategy is very passive, obviously insufficient for the protective capacities of unknown attack, so that the medium voltage distribution network communication information
Safety still subjects huge risk.
Summary of the invention
The purpose of the present invention is to provide one kind to be realized by actively perceive medium voltage distribution network communications information data amount
Centering is press-fitted the information safety monitoring method for medium voltage distribution network that communication system of power grids information security carries out actively monitoring.
This information safety monitoring method for medium voltage distribution network provided by the invention, includes the following steps:
S1. the communication data information of medium-voltage distribution network termination is acquired；
S2. the Situation Awareness of the communication data information acquired according to step S1, building medium-voltage distribution network termination analyzes probability
Model；
S3. the Situation Awareness analysis probabilistic model obtained using step S2 carries out the information security state of medium voltage distribution network
Monitoring；
S4. the obtained monitoring information of step S3 is reported into main website, to complete the information security monitoring of medium voltage distribution network.
The communication data information of medium-voltage distribution network termination, specially acquisition medium-voltage distribution network termination are acquired described in step S1
Flow and frequency data information.
The flow and frequency data information of the described acquisition medium-voltage distribution network termination, specially with the currently monitored period before
N number of monitoring cycle is measurement period, the data on flows of each monitoring cycle and the access frequency in measurement period is acquired, to obtain
Flow sequence { x (i) } and frequency sequence { y (i) } in measurement period；Wherein x (i) is i-th of monitoring cycle in measurement period
Data on flows, y (i) is the frequency data in measurement period in the i-th monitoring cycles at different levels.
The Situation Awareness that medium-voltage distribution network termination is constructed described in step S2 analyzes probabilistic model, specially using following step
Rapid building model:
A. the mathematic expectaion λ for the flow sequence { x (i) } that step S1 is obtained is calculatedx, and constructing Poisson parameter is λxPoisson
Probability Distribution Model；
B. the mathematic expectaion λ for the flow sequence { y (i) } that step S1 is obtained is calculatedy, and constructing Poisson parameter is λyPoisson
Probability Distribution Model；
C. the Situation Awareness for constructing medium-voltage distribution network termination analyzes probabilistic model p (x, y)=p (x) * p (y), p (x) in formula
For flow probability density, value is that Poisson parameter is λxPoisson probability distributed model probability density；P (y) is frequency probability
Density, value are that Poisson parameter is λyPoisson probability distributed model probability density.
The information security state of medium voltage distribution network is monitored described in step S3, is specially carried out using following steps
Monitoring:
(1) traffic security factor alpha, frequency safety coefficient β and secure threshold γ are set；
(2) in the space of the Situation Awareness analysis probabilistic model of medium-voltage distribution network termination, using flow variable as x-axis, with
Frequency variable is y-axis, defines 2 dimensional region S, and wherein the range of region S is by straight line x=(1- α) λx, x=(1+ α) λx, y=
(1-β)λyWith y=(1+ β) λyArea defined；
(3) the data on flows x of the medium-voltage distribution network termination in the currently monitored period is obtained0With frequency data y0；
(4) the information security state in the currently monitored period is determined using following rule:
If R1. point (x0,y0) not in the S of region, then determine that the information security state in the currently monitored period is exception；
If R2. point (x0,y0) in the S of region, then the information security probability in the currently monitored period is calculated according to the following formula:
And if P (x0,y0) >=γ then determines that the information security in the currently monitored period is normal；If P (x0,y0) < γ, then
The information security state for determining the currently monitored period is exception.
This information safety monitoring method for medium voltage distribution network provided by the invention is obtained by active and is sufficiently examined
The data statistics and access frequency characteristic for considering the distribution network terminal communication flows that distribution main website monitors, are obtained by acquisition and match host
The data information for the monitoring distribution terminal stood constructs the flow and access frequency Situation Awareness analysis model of distribution network terminal, improves
The validity of medium voltage distribution network end message safety monitoring.
Detailed description of the invention
Fig. 1 is the method flow diagram of the method for the present invention.
Fig. 2 is the schematic diagram of 2 dimensional region S constructed by the method for the present invention.
Specific embodiment
It is as shown in Figure 1 the method flow diagram of the method for the present invention: this letter for medium voltage distribution network provided by the invention
Safety monitoring method is ceased, is included the following steps:
S1. the communication data information for acquiring medium-voltage distribution network termination, specifically includes the flow of acquisition medium-voltage distribution network termination
With frequency data information；And when acquiring, preceding N (it is recommended that value is 10~15) a monitoring cycle with the currently monitored period is system
The period is counted, the data on flows of each monitoring cycle and the access frequency in measurement period are acquired, to obtain the stream in measurement period
Measure sequence { x (i) } and frequency sequence { y (i) }；Wherein x (i) is the data on flows of i-th of monitoring cycle in measurement period, y (i)
For the frequency data in the in measurement period i-th monitoring cycles at different levels；
S2. the Situation Awareness of the communication data information acquired according to step S1, building medium-voltage distribution network termination analyzes probability
Model；Specially model is constructed using following steps:
A. the mathematic expectaion λ for the flow sequence { x (i) } that step S1 is obtained is calculatedx, and constructing Poisson parameter is λxPoisson
Probability Distribution Model；
B. the mathematic expectaion λ for the flow sequence { y (i) } that step S1 is obtained is calculatedy, and constructing Poisson parameter is λyPoisson
Probability Distribution Model；
C. the Situation Awareness for constructing medium-voltage distribution network termination analyzes probabilistic model p (x, y)=p (x) * p (y), p (x) in formula
For flow probability density, value is that Poisson parameter is λxPoisson probability distributed model probability density；P (y) is frequency probability
Density, value are that Poisson parameter is λyPoisson probability distributed model probability density；
S3. the Situation Awareness analysis probabilistic model obtained using step S2 carries out the information security state of medium voltage distribution network
Monitoring；Specially it is monitored using following steps:
(1) traffic security factor alpha, frequency safety coefficient β and secure threshold γ are set, wherein the value model of safety coefficient α
Enclosing is 0~1, and the value range of frequency safety coefficient β is 0~1, it is proposed that the value range of secure threshold γ be 4%~8%；
(2) in the space of the Situation Awareness analysis probabilistic model of medium-voltage distribution network termination, using flow variable as x-axis, with
Frequency variable is y-axis, defines 2 dimensional region S, and wherein the range of region S is by straight line x=(1- α) λx, x=(1+ α) λx, y=
(1-β)λyWith y=(1+ β) λyArea defined；The schematic diagram of region S is as shown in Figure 2；
(3) the data on flows x of the medium-voltage distribution network termination in the currently monitored period is obtained0With frequency data y0；
(4) the information security state in the currently monitored period is determined using following rule:
If R1. point (x0,y0) not in the S of region, then determine that the information security state in the currently monitored period is exception；
If R2. point (x0,y0) in the S of region, then the information security probability in the currently monitored period is calculated according to the following formula:
And if P (x0,y0) >=γ then determines that the information security in the currently monitored period is normal；If P (x0,y0) < γ, then
The information security state for determining the currently monitored period is exception；
The step of above-mentioned calculating is to calculate point (x0,y0) the corresponding information security of dash area in the region that is fallen in
Probability；
In embodiment, α=0.2, β=0.2, γ=8%, λ are takenx=λy=100, then safety zone S be S=(x, y) |
X ∈ [80,120], y ∈ [80,120] }, when judgement, it is specifically divided into two kinds of situations: in monitoring cycle, current time for monitoring
Information security parameter flow-time sequence x (i)=60 of distribution network terminal, frequency time series Y (i)=80 time/s, not in safety
In the S of region, then identify the end message is abnormality safely；In monitoring cycle, the current time distribution network terminal that monitors
Information security parameter flow-time sequence x (i)=90bps, frequency time series y (i)=90 time/s, in the S of safety zone, into
Enter information security acknowledgement state again, the joint that the joint probability density function p (x, y) with flow and the frequency is calculated by formula is general
Rate value P (x, y).If P (x, y) >=0.08, identify the end message is normal condition safely, otherwise identifies end message peace
It is all abnormality；
S4. the obtained monitoring information of step S3 is reported into main website, to complete the information security monitoring of medium voltage distribution network.
Claims (5)
1. a kind of information safety monitoring method for medium voltage distribution network, includes the following steps:
S1. the communication data information of medium-voltage distribution network termination is acquired；
S2. the Situation Awareness of the communication data information acquired according to step S1, building medium-voltage distribution network termination analyzes probabilistic model；
S3. the Situation Awareness analysis probabilistic model obtained using step S2 supervises the information security state of medium voltage distribution network
It surveys；
S4. the obtained monitoring information of step S3 is reported into main website, to complete the information security monitoring of medium voltage distribution network.
2. the information safety monitoring method according to claim 1 for medium voltage distribution network, it is characterised in that step S1 institute
The communication data information for the acquisition medium-voltage distribution network termination stated, specially acquires the flow and frequency data of medium-voltage distribution network termination
Information.
3. the information safety monitoring method according to claim 2 for medium voltage distribution network, it is characterised in that described adopts
The flow and frequency data information of press-fitting electric network terminal are concentrated, is specially system with the top n monitoring cycle in the currently monitored period
The period is counted, the data on flows of each monitoring cycle and the access frequency in measurement period are acquired, to obtain the stream in measurement period
Measure sequence { x (i) } and frequency sequence { y (i) }；Wherein x (i) is the data on flows of i-th of monitoring cycle in measurement period, y (i)
For the frequency data in the in measurement period i-th monitoring cycles at different levels.
4. the information safety monitoring method according to claim 3 for medium voltage distribution network, it is characterised in that step S2 institute
The Situation Awareness analysis probabilistic model for the building medium-voltage distribution network termination stated, specially constructs model using following steps:
A. the mathematic expectaion λ for the flow sequence { x (i) } that step S1 is obtained is calculatedx, and constructing Poisson parameter is λxPoisson probability
Distributed model；
B. the mathematic expectaion λ for the flow sequence { y (i) } that step S1 is obtained is calculatedy, and constructing Poisson parameter is λyPoisson probability
Distributed model；
C. the Situation Awareness for constructing medium-voltage distribution network termination analyzes probabilistic model p (x, y)=p (x) * p (y), and p (x) is stream in formula
Probability density is measured, value is that Poisson parameter is λxPoisson probability distributed model probability density；P (y) is frequency probability density,
Its value is that Poisson parameter is λyPoisson probability distributed model probability density.
5. the information safety monitoring method according to claim 4 for medium voltage distribution network, it is characterised in that step S3 institute
That states is monitored the information security state of medium voltage distribution network, is specially monitored using following steps:
(1) traffic security factor alpha, frequency safety coefficient β and secure threshold γ are set；
(2) in the space of the Situation Awareness analysis probabilistic model of medium-voltage distribution network termination, using flow variable as x-axis, with the frequency
Variable is y-axis, defines 2 dimensional region S, and wherein the range of region S is by straight line x=(1- α) λx, x=(1+ α) λx, y=(1- β)
λyWith y=(1+ β) λyArea defined；
(3) the data on flows x of the medium-voltage distribution network termination in the currently monitored period is obtained0With frequency data y0；
(4) the information security state in the currently monitored period is determined using following rule:
If R1. point (x0,y0) not in the S of region, then determine that the information security state in the currently monitored period is exception；
If R2. point (x0,y0) in the S of region, then the information security probability in the currently monitored period is calculated according to the following formula:
And if P (x0,y0) >=γ then determines that the information security in the currently monitored period is normal；If P (x0,y0) < γ, then determine to work as
The information security state of preceding monitoring cycle is abnormal.
Priority Applications (1)
| Application Number | Priority Date | Filing Date | Title |
|---|---|---|---|
| CN201810962229.1A CN109066981B (en) | 2018-08-22 | 2018-08-22 | Information safety monitoring method for medium-voltage distribution network |
Applications Claiming Priority (1)
| Application Number | Priority Date | Filing Date | Title |
|---|---|---|---|
| CN201810962229.1A CN109066981B (en) | 2018-08-22 | 2018-08-22 | Information safety monitoring method for medium-voltage distribution network |
Publications (2)
| Publication Number | Publication Date |
|---|---|
| CN109066981A true CN109066981A (en) | 2018-12-21 |
| CN109066981B CN109066981B (en) | 2021-08-17 |
Family
ID=64687950
Family Applications (1)
| Application Number | Title | Priority Date | Filing Date |
|---|---|---|---|
| CN201810962229.1A Active CN109066981B (en) | 2018-08-22 | 2018-08-22 | Information safety monitoring method for medium-voltage distribution network |
Country Status (1)
| Country | Link |
|---|---|
| CN (1) | CN109066981B (en) |
Cited By (1)
| Publication number | Priority date | Publication date | Assignee | Title |
|---|---|---|---|---|
| CN110765421A (en) * | 2019-10-22 | 2020-02-07 | 南方电网科学研究院有限责任公司 | Method, device, equipment and storage medium for verifying operation parameters of power distribution network |
Citations (3)
| Publication number | Priority date | Publication date | Assignee | Title |
|---|---|---|---|---|
| CN103501293A (en) * | 2013-09-25 | 2014-01-08 | 国网重庆市电力公司 | Authentication method of terminal credible access in smart power grid |
| CN106027288A (en) * | 2016-05-10 | 2016-10-12 | 华北电力大学 | Communication traffic prediction method for distribution line information monitoring service |
| CN107834703A (en) * | 2017-11-21 | 2018-03-23 | 武汉精伦电气有限公司 | A kind of intelligent grid power distribution room monitoring management system and method |
-
2018
- 2018-08-22 CN CN201810962229.1A patent/CN109066981B/en active Active
Patent Citations (3)
| Publication number | Priority date | Publication date | Assignee | Title |
|---|---|---|---|---|
| CN103501293A (en) * | 2013-09-25 | 2014-01-08 | 国网重庆市电力公司 | Authentication method of terminal credible access in smart power grid |
| CN106027288A (en) * | 2016-05-10 | 2016-10-12 | 华北电力大学 | Communication traffic prediction method for distribution line information monitoring service |
| CN107834703A (en) * | 2017-11-21 | 2018-03-23 | 武汉精伦电气有限公司 | A kind of intelligent grid power distribution room monitoring management system and method |
Non-Patent Citations (1)
| Title |
|---|
| 黄伟等: "基于主动配电***供电能力的安全态势感知方法", 《电力自动化设备》 * |
Cited By (1)
| Publication number | Priority date | Publication date | Assignee | Title |
|---|---|---|---|---|
| CN110765421A (en) * | 2019-10-22 | 2020-02-07 | 南方电网科学研究院有限责任公司 | Method, device, equipment and storage medium for verifying operation parameters of power distribution network |
Also Published As
| Publication number | Publication date |
|---|---|
| CN109066981B (en) | 2021-08-17 |
Similar Documents
| Publication | Publication Date | Title |
|---|---|---|
| Li et al. | Distributed host-based collaborative detection for false data injection attacks in smart grid cyber-physical system | |
| CN110035090B (en) | False data injection attack detection method for smart grid | |
| CN101645884B (en) | Multi-measure network abnormity detection method based on relative entropy theory | |
| CN105868629B (en) | Security threat situation assessment method suitable for electric power information physical system | |
| CN107016236A (en) | Power network false data detection method for injection attack based on non-linear measurement equation | |
| CN105429977A (en) | Method for monitoring abnormal flows of deep packet detection equipment based on information entropy measurement | |
| CN105303743A (en) | WiFi-based indoor intrusion detection method and device | |
| CN102882895A (en) | Method and device for identifying message attack | |
| CN103837777B (en) | Electric power system electricity quality evaluation method and system | |
| CN109767352A (en) | A kind of power information physics emerging system safety situation evaluation method | |
| CN104125112A (en) | Physical-information fuzzy inference based smart power grid attack detection method | |
| CN106127047A (en) | A kind of power system malicious data detection method based on Jensen Shannon distance | |
| CN109861825B (en) | Internal attack detection method based on weighting rule and consistency in CPS system | |
| CN105069701A (en) | Monte Carlo method based risk evaluation method for power transmission system | |
| CN108090677A (en) | A kind of critical infrastructures reliability assessment method | |
| CN103546319B (en) | The alarming flow method and system of the network equipment | |
| CN104618908A (en) | Method and device for resisting spectrum sensing data falsification through distributed cognitive radio network | |
| CN110022293A (en) | A kind of electric network information physics emerging system methods of risk assessment | |
| CN109066981A (en) | Information safety monitoring method for medium voltage distribution network | |
| CN103686737A (en) | Wireless sensor network intrusion tolerance method and system based on tree topology | |
| CN116503054A (en) | Equipment unified operation and maintenance platform and method based on big data | |
| CN104601567B (en) | A kind of indexing security measure method excavated based on information network security of power system event | |
| CN110165674B (en) | Active filter safety management system | |
| Sia et al. | PMU change point detection of imminent voltage collapse and stealthy attacks | |
| CN113159638A (en) | Intelligent substation layered health degree index evaluation method and device |
Legal Events
| Date | Code | Title | Description |
|---|---|---|---|
| PB01 | Publication | ||
| PB01 | Publication | ||
| SE01 | Entry into force of request for substantive examination | ||
| SE01 | Entry into force of request for substantive examination | ||
| GR01 | Patent grant | ||
| GR01 | Patent grant |