泛在电力物联网环境下网络安全攻击研究Survey on Cyber Attack in the Context of Ubiquitous Power Internet of Things
王海峰,李朝阳,吕政权,陈怡君,彭道刚
WANG Haifeng,LI Zhaoyang,LYU Zhengquan,CHEN Yijun,PENG Daogang
摘要(Abstract):
近年来网络攻击导致的大范围停电事故频发,信息安全形势日益严峻,电力与能源领域的网络安全直接关系着供电与用电安全,不容轻视。通过阐述泛在电力物联网环境下网络安全的有关概念及其架构;选取委内瑞拉大停电事例形象化分析恶意网络攻击过程;总结了泛在电力物联网环境下网络攻击的分类、应用场景、防护体系和未来可研究方向,提出了相应的防御措施,对泛在电力物联网建设具有重要意义。
In recent years, large-scale blackouts caused by network attacks occur frequently, and the situation of information security is becoming increasingly severe. The network security in the field of power and energy sectors is directly related to the security of power supply and consumption that cannot be ignored. This paper describes the concept and architecture of ubiquitous power Internet of things, analyzes the process of malicious cyber-attack with the case of Venezuelan blackout, and finally summarizes the classification, application scenarios, protection system and future research directions of cyber-attack in ubiquitous power Internet of things, and puts forward corresponding defense measures, which are of great significance for the construction of ubiquitous power Internet of things.
关键词(KeyWords):
泛在电力物联网;网络安全;信息安全;网络攻击
ubiquitous power Internet of things;network security;information security;cyber attack
基金项目(Foundation): 国家电网有限公司科技项目(SGSHPX00ZHJS1900262)
作者(Author):
王海峰,李朝阳,吕政权,陈怡君,彭道刚
WANG Haifeng,LI Zhaoyang,LYU Zhengquan,CHEN Yijun,PENG Daogang
DOI: 10.19585/j.zjdl.201912013
参考文献(References):
- [1]郭庆来,辛蜀骏,孙宏斌,等.电力系统信息物理融合建模与综合安全评估:驱动力与研究构想[J].中国电机工程学报,2016,36(6):1481-1489.
- [2]JING Q,VASILAKOS A V,WAN J,et al.Security of the Internet of Things:perspectives and challenges[J].Wirel Netw,2014,20(8):2481-2501.
- [3]汤奕,陈倩,李梦雅,等.电力信息物理融合系统环境中的网络攻击研究综述[J].电力系统自动化,2016,40(17):59-69.
- [4]SICARI S,RIZZARDI A,GRIECO LA,et al.Security,privacy and trust in Internet of things:the road ahead[J].Comput Netw,2015(76):146-164.
- [5]贾益刚.物联网技术在环境监测和预警中的应用研究[J].上海建设科技,2010,8(6):65-67.
- [6]文浩.无处不在的终极网络———泛在网[J].射频世界,2010,5(1):44-47.
- [7]胡畔,周鲲鹏,王作维,等.泛在电力物联网发展建议及关键技术展望[J].湖北电力,2019,43(1):1-9.
- [8]国家电网有限公司.国家电网部署泛在电力物联网建设[EB/OL].国家电网公司网站,(2019-03-18)[2019-09-10].http://www.sasac.gov.cn/n2588025/n2588124/c10743656/content.html.
- [9]杨东升,王道浩,周博文,等.泛在电力物联网的关键技术与应用前景[J].发电技术,2019,40(2):107-114.
- [10]CE安全网.美国能源部进行网络攻击断电测试Liberty Eclipse演习[EB/OL].(2018-08-07)[2019-09-10].https://www.cesafe.com/6872.html.
- [11]南方电网报.南方电网公司启动2019年网络安全攻防演习[EB/OL].(2019-04-19)[2019-09-10].http://www.cec.org.cn/zdlhuiyuandongtai/dianwang/2019-04-19/190416.html.
- [12]唐朝蓉.浅谈电力监控系统网络安全及实现方式[J].华东科技(综合),2018(5):228-228.
- [13]张立强.电网调度自动化系统可靠性的研究[D].济南:山东大学,2015.
- [14]刘柳.面向SCADA业务的电力通信传输网安全性评估[D].北京:华北电力大学,2013.
- [15]TITCOMB J.Ukrainian blackout blame on cyber-attack[EB/OL].(2016-01-05)[2016-05-29].http://tele-graph.co.uk/technology/news/12082758/Ukrainian-blackout-blameedon-cyber-attack-in-world-first.html.
- [16]GOODIN D.Israel′s electric authority hit by “severe” hack attack[EB/OL].(2016-01-27)[2016-05-29].http://ars-technica.com/security/2016/01/israels-electric-grid-hit-bysevere-hack-attack/.
- [17]姜正涛,李满意.全球网络共治新考验———勒索病毒Wannacry爆发[J].保密科学技术,2017,13(6):10-13.
- [18]刘迎.委内瑞拉大规模停电事件对我国工业信息安全发展的启示[J].保密科学技术,2019,25(3):25-28.
- [19]刘念,余星火,张建华,等.网络协同攻击:乌克兰停电事件的推演与启示[J].电力系统自动化,2016,40(6):144-147.
- [20]何申.面向3G移动通信网络的安全框架研究[D].合肥:中国科学技术大学,2007.
- [21]ALABA F A,OTHMAN M,HASHEM I A T,et al.Internet of Things security:A survey[J].Journal of Network and Computer Applications,2017,88(21):10-28.
- [22]WANG F X.Research on security issues of the internet of things[J].Advanced Materials Research,2014,989(18):4261-4264.
- [23]刘瑾,孙瑞雪,章辉,等.基于电力三网融合的用电信息采集方案[J].电工技术,2015,8(5):8-11.
- [24]DRIAS Z,SERHROUCHNI A,VOGEL O.Analysis of cyber security for industrial control systems[C].Pro. of the Int.Con. on Cyber Security of Smart Cities,Industrial Control System and Communications,2015:1-8.
- [25]殷树刚,许勇刚,李祉岐,等.基于泛在电力物联网的全场景网络安全防护体系研究[J].供用电,2019,36(6):83-89.
- [26]苏盛,吴长江,马钧,等.基于攻击方视角的电力CPS网络攻击模式分析[J].电网技术,2014,38(11):3115-3120.
- [27]李田,苏盛,杨洪明,等.电力信息物理系统的攻击行为与安全防护[J].电力系统自动化,2017,41(22):162-167.
- [28]李慧,都晓辉,赵越超.电力信息物理融合系统中的网络攻击探究[J].中国科技投资,2017,20(8):102.
- 泛在电力物联网
- 网络安全
- 信息安全
- 网络攻击
ubiquitous power Internet of things - network security
- information security
- cyber attack