| With the development of the smart grid,the openness and complexity of the intelligent substation control system gradually increase,and the network security risks and intrusion threats are also deepening.In order to improve the ability of intelligent substation system to recognize abnormal network data,it is studied to detect the network data anomaly of IEC61850 standard in the intelligent substation and to design the online monitoring system of intelligent substation network.The main achievement of this paper is as follows.(1)The development of intelligent substation and cyber-security threats in intelligent substation network is analyzed.The development of online monitoring system for intelligent substation network and IEC 61850 standard widely used in substation communication field are also introduced.(2)The three types of protocols MMS,GOOSE and SV,which are typical of IEC 61850 protocol,are introduced.According to the structure of the protocol,an anomaly detection method is designed for each protocol.(3)The online monitoring system of intelligent substation network is designed,and the anomaly detection rule is applied to the abnormal data detection.The packets capture module,packets parsing module,anomaly detection module,message cache module,data storage module,remote query and management module of intelligent substation monitoring system are introduced respectively.(4)The test and simulation software with the function of network data playback and reconstruction are designed based on Libpcap.The abnormal messages are constructed according to the abnormal behavior in MMS,GOOSE and SV message.The simulation tests are developed by building simulation test platform and sending abnormal packets to the destination host with the simulation software,the monitoring system detected abnormal packets successfully.Finally,the work in the dissertation is summarized.The weaknesses of the monitoring system are analyzed,and the problems needed for further studies are prospected. |
PDF Full Text Request