| Energy Internet has the characteristics of complex network environment,frequent information interaction,and diversified form transformation between multiple types of energy networks.Most energy dispatching and energy application depend on data transmission.The extensive access of a large number of terminals and the free and complicated Internet architecture make all aspects of the energy Internet unable to completely avoid the real-time data attacks on a large number of different ways.It is very important to evaluate the security risk of distribution network information physical system comprehensively and accurately to effectively control and solve the hidden danger of distribution network security.However,the existing qualitative or quantitative risk assessment methods cannot accurately reveal the risk propagation mechanism in distribution network information system and physical system.To solve the above problems,this paper proposes a data tolerance intrusion model of energy Internet under network attack.The specific research includes the following contents:Aiming at the energy Internet security risk analysis problem,in this thesis,the typical energy Internet business scenarios(production,transmission and application of block division,combined with UML modeling method to construct energy of four links in the Internet business system data communication and interaction model,and based on the root node target of the attack tree model,the leaf node object analysis of risk in the energy Internet logic relationship.The minimal data security event set and data attack path set are solved through the radiation path of risk elements,and finally the attack graph is formed.Finally,through the simulation experiment on IEEE39-BUS example,network attack has a great impact on the stability of the system,which verifies the necessity of risk assessment.Aiming at the comprehensive risk assessment of energy Internet security,this thesis proposes a risk assessment model for network attack,which mainly includes risk intrusion probability,attack success probability and minimum load loss ratio of distribution network after corresponding attack(quantitative analysis of physical impact).In this model,three factors affecting the security risk assessment of distribution network information physical system are calculated by accumulative distribution function,infectious disease model and minimum load loss ratio respectively,and finally the security risk value of distribution network information physical system under network attack is quantitatively evaluated comprehensively.Finally,the feasibility and effectiveness of the proposed model are verified by simulation experiments on IEEE 39-BUS system.The experiment shows that different vulnerability of distribution network information system has significant influence on the probability of distribution network information system being attacked,the probability of physical system being attacked,the load loss of physical system and the security risk value of distribution network.Aiming at the intrusion tolerance problem of energy Internet data,in order to solve the problem of energy Internet data intrusion tolerance,the risk tolerance capability of the system is quantified by identifying the possibility of business risk attack on the basis of allowing the system to have attack risk.By means of node network state graph,behavior state machine and Markov chain,the intrusion tolerance ability of state data of tolerance system is evaluated,and the ability of information node to work continuously under network attack is predicted in advance.Finally,the experiment shows that the tolerance ability is related to the vulnerability of the system and the probability of initial attack success,and the availability,confidentiality and integrity of the system can be effectively guaranteed by strengthening the tolerance ability of intrusion. |