Analyzing Vulnerability And Evaluating Survivability Of Power SCADA System

The Power SCADA System is the important foundation for the power about production automation and modern management, achieving the optimal operation of power system by the reasonable management, scheduling and controlling the power system. The Power SCADA System is an important guarantee for the safe operation of the power system, so it is necessary to study its safety.The Traditional information system security technologies such as Firewall and Intrusion Detection Systems which used ideas of "defense" and "inspection" have been unable to meet security needs because of increasing the overall risk of system. Survivability, the third-generation information security technology, breaks the traditional concept of security of information systems and achieves security of the system from a new point of "coexistence". It emphasizes the capability of a system to fulfill its critical services under attack or catastrophic incidents during operation. This article study the survivability of power SCADA system based on its vulnerability analysis.This article includes the vulnerability analysis and survival study about power SCADA system. First, it analyzes the vulnerability about IEC60870-5-101, which is power SCADA system's communication protocol, from the integrity, confidentiality and availability and the existence of these vulnerabilities can be carried out attacks. Then it analyzes the vulnerability about IEC60870-5-104 at the application layer, transport layer, Network layer. Last, it analyzes the vulnerability in the other about power SCADA system.Based on vulnerability analysis, this article proposes the research method of survivability by combination of AHP and attack graph, and quantify the survival capabilities from the system's resistance, resilience and responsiveness. This article also verifies the survivability model with an example, and puts forward suggestions for improvement in survivability about the power SCADA system.