Research On Information Security Status Perception Technology Of Intelligent Substation Monitoring System

With the proposal and implementation of the power internet of things(IOT),advanced information technologies are integrated into the power grid,the interaction between information technology and traditional power grid is more active,and the security weakness on the information side also brings new risks to the safe and stable operation of the power grid.As an important and power facility,substation is already equipped with an information security defense system which features " Secure Partitioning,network-specialized,transverse physical isolation,and vertical authentication",but there are still typical internal man-made risks such as illegal network outreach,no-identification mobile media access,and lack of corresponding monitoring,management and control means.In view of the serious hidden security risks in the current substation monitoring equipment information security and combined with the practical application needs of the current substation,a transplantable distributed monitoring equipment monitoring original software is designed in this thesis which is based on the research of substation monitoring system and equipment situation awareness technology.The original software is based on Linux operating system platform that is widely used in substation,and is deployed on the monitoring equipment such as substation monitoring host,gateway machine,etc.It adopts independent operation mode to automatically collect security information of monitoring equipment,and its correctness is tested and verified.The specific work is as follows:(1)Based on the in-depth analysis of the working principle and technical characteristics of the current intelligent substation defense system,this thesis studies and designs the three-tier distributed overall architecture of the information security monitoring prototype software for substation monitoring equipment,combined with the principle of "minimum privilege" in the "separation of three powers" of the information security management system.The data collection is implemented by the probe module,and the data encapsulation and transmission are implemented by the agent module,respectively.(2)In the data acquisition module,the standard C language library and POSIX standard are used to realize the portability of software.Aiming at the problem of low fault tolerance of kernel programming,uses the kernel files in the kernel module to conduct situation awareness on the user behavior and system performance of the monitoring device,and thus simplifies the acquisition method.In order to solve the problem of interprocess communication blocking,the circular queue is used to realize data buffering.In the data transmission module,a new multi cooperation strategy is proposed to meet the requirements of communication node equilibrium and reliable interaction in distributed system.The corresponding encryption algorithm and authentication strategy are designed and implemented to ensure the security of transmission data.(3)Based on the typical operation environment of a 110 k V voltage level substation monitoring system,a similar test environment is built and the designed and implemented original software is test.The validity of the function and the reliability of the performance of the original software are proved by the test.Overall,using the situation awareness technology of substation monitoring equipment can better regulate the behavior of internal personnel,effectively prevent the occurrence of artificial network security events in substation,and ensure the safe and reliable operation of intelligent substation.