The Research On Network Attack Prevention Of Intelligent Substation

As a hub node of the power grid,the intelligent substation is a high-value target of network attacks.The malicious attack software that invades multiple substations adopts a synergistic mechanism to initiate synchronous attacks.It is very strong to use of exploits and propagation capability,and can successfully invade physical isolation protection and tamper with Transmission information(such as GOOSE messages)in the substation affects the reliable and complete transmission of real-time information such as blocking signals and trip commands,and is likely to trigger large-scale blackouts.Existing security systems are difficult to completely eliminate such attacks.In this paper,a time-based collaborative attack protection scheme is designed based on the principle of time-based collaborative attack.Breaking the synergy mechanism between the collaborative attack malware invading the substation,avoiding the attack behavior and causing a large number of intelligent substation to stop the pressure loss,significantly reducing the harmful consequences of the intrusion into the intelligent substation.The time-enhanced attack tree and the enhanced-non-deterministic finite-state automaton are designed to model and analyze the network cooperative attack,and further understand the attack process and principle of the collaborative software.In this paper,designed the collaborative attack detection algorithm based on ENFTA.This paper designs a hybrid encryption GOOSE message method based on AES and RSA to prevent the illegal tampering of network information by the network attack of the intrusion intelligent substation.Firstly,it analyzes the problems faced by the current intelligent substation network security,the difference and connection between intelligent substations and traditional substations,intelligent substation security partition,station network structure and current ideas and methods for solving intelligent substation network security.Intelligent substation security partition,station network structure and current ideas and methods for solving intelligent substation network security..Secondly,the time-enhanced attack tree modeling model is designed to overcome the problem that the original model cannot reflect the order relationship between attack nodes and record the attack node time and attack state.The design of time-based collaborative attack model processing analysis method in substation network attack is designed,showing the processing of a time-enhanced attack tree.Thirdly,in order to cope with the time-based coordinated attack,this paper designs a time-based collaborative attack protection scheme,and designs the differentiated time management module to adjust the consistency between the time in the substation and the global synchronous clock to destroy the synergistic mechanism of time-based coordinated attacks and prevent such attacks from causing power system failures such as full-scale substation full stop loss and voltage.Fourthly,the substation IEC 61850 standard is studied.The clear text transmission characteristics of GOOSE messages in complex network environments make them vulnerable to tampering of network attacks.A hybrid encryption GOOSE message protection method based on AES and RSA is proposed.Finally,the network modeling and simulation based on the OPNET network simulation platform is implemented for the GOOSE message protection method based on hybrid encryption.It proves that the proposed hybrid encryption method meets the security requirements and has a smaller network delay,which can be to some extent.Effectively reduce external malicious attacks on substations and ensure the security of network communication between substations and other systems.Through the Matlab and MatPower simulation package,the effectiveness of the time-based collaborative attack protection method is simulated on different sides,and the protection effect of the protection method on the substation coordinated attack is verified.