信息安全研究 ›› 2019, Vol. 5 ›› Issue (12): 1068-1075.

• 学术论文 • 上一篇    下一篇

智能电网的信息物理安全综述

胡钋,李莉莉   

  1. 武汉大学电气与自动化学院
  • 收稿日期:2019-12-10 出版日期:2019-12-15 发布日期:2019-12-10
  • 通讯作者: 胡钋
  • 作者简介:胡钋 博士,教授,博士生导师,主要研究方向为电力系统控制、电力系统分析以及电力自动监控、测量技术. phu1126@126.com 武汉大学电气与自动化学院 李莉莉 博士研究生,主要研究方向为智能电网网络与信息安全. lily6310@163.com

A Review of Cyber-Physical Security in Smart Grids

  • Received:2019-12-10 Online:2019-12-15 Published:2019-12-10

摘要: 现代智能电网是一个典型的信息物理融合系统,融合了电力系统工程技术和通信信息技术.由于目前计算机网络和通信网络经常遭受网络攻击,因此,依赖于通信信息技术的智能电网也成为网络攻击的重点对象.其中有一种信息物理融合攻击——“虚假数据攻击”,引起各界广泛关注,这种攻击可以通过访问远程终端设备,干扰通信或协同攻击数据流,以篡改通信网络传输数据,使电力系统控制中心的传统不良数据检测机制失效,进而导致设备故障甚至系统崩溃.根据其攻击对象,可归纳为四大类:设备攻击、数据攻击、隐私信息攻击和网络可达性攻击.为了防御这种攻击,需结合电力系统特点和网络数据流特征,检测不良的信息数据,定位故障的物理设备,以清除攻击影响.随着新信息技术的不断发展,信息物理融合安全问题将面临巨大的挑战.

关键词: 智能电网, 信息物理系统, 电力系统安全, 虚假数据攻击, 信息物理融合安全

Abstract: Smart grids integrate the power system engineering technology with the information and communication technology as a typical cyberphysical system. Resulting from the frequent cyberattacks on computer networks and communication networks, the smart grid has become the focus of cyberattacks. False data injection attack is one type of cyberphysical attacks, which has aroused public concern. It can physically tamper with the remote access utilities, intentionally intercept communication traffic flows or cooperatively manipulate data transmitted over the communication network to circumvent the power system integrity check and then malfunction equipment even collapse the whole power system. According to its attack targets, it can be divided into four categories: device attack, data attack, privacy attack and network availability attack. In order to defend against this kind of attack, fusion security measures are designed which can combine the characteristics of the power system and network data flow to detect the bad data and locate the failed physical equipment. With the development of advanced information technology, smart grids will face enormous challenges on fusion security.

Key words: smart grids, cyber-physical system, power system security, false data injection attack, cyber-physical fusion security