Research On Abnormal Flow Detection Of Distribution Industrial Control Network Based On Business

The power distribution industrial control system,as the "last kilometer line" of power supply to the users of power enterprises,plays the role of a bridge between power supply enterprises and electricity customers.In the past,distribution network is an independent,closed industrial control system,with the deployment of intelligent terminals and the application of a variety of communication methods,so that the original closed system began to develop in the direction of open and connected.In the information transmission,data exchange is convenient and fast at the same time,but also with a lot of security risks.At present,the security protection measures of power distribution industrial control system are not perfect,network security incidents occur from time to time,there are certain security risks in the process of data transmission.As the last line of defense for communication users of power system,it is of practical significance to protect the network security of the power distribution industrial control system.In this paper,the industrial control system network as the background,for the distribution of industrial control network information security research.First of all.the distribution network business is analyzed,summarized the distribution network data transmission characteristics.This is a summary of the possible safety risks in the operation of the distribution network system,and the safety protection strategy applicable to the distribution and control network is proposed.Secondly,the power distribution control network and the traditional Internet network are compared,the data characteristics of the power distribution network flow are analyzed,and the I EC 104 protocol and MQTT protocol involved in the distribution network business process are studied in the light of the current development trend of the Power Distribution Internet of Things.This paper analyzes the causes of traffic anomalies in the distribution network,and combines the current network traffic anomaly detection method,and from the point of view of the power distribution industry control network,the flow anomaly detection method based on threshold is used to propose the flow anomaly detection model applicable to the power distribution control network.Finally,the system design and system implementation are carried out for the flow anomaly detection model,and the test is carried out by the specific test.Based on the analysis of the original distribution network protocol,this paper studies and analyzes the MQTT protocol used in the power distribution Internet of Things,calculates the traffic threshold of distribution network business,and makes abnormal detection of distribution network traffic through the established flow anomaly detection model.After the system experiment test,the purpose of the abnormal detection of power distribution control network flow has been achieved,so as to ensure the safe and stable operation of the power distribution control system.