Research On Key Technologies Of Performance-Oriented Network Attack Detection System For Smart Substation Based On CPPS

With the increasingly strong desire for clean and sustainable energy,the utilization pattern of global energy will eventually be electrified,and the power grid will gradually evolve into a smart grid that is more intelligent,automated and networked.However,the characteristics that smart grid highly integrated computer technology,sensor technology and information technology make it face increasingly serious information security challenges in the information age.As the only place in the smart grid to realize real-time data acquisition of grid operation data,real-time monitoring of substation equipment status and grid fault state prevention,Smart substation is a key component of safe and reliable operation of smart grid.The process layer message GOOSE,SMV based on IEC61850 standard of smart substation,which carries the real state of power equipment operation and control commands such as tripping,has extremely high requirements for real-time transmission.Therefore,performance-oriented network attacks targeting congestion or delay are extremely threatening to the process layer of smart substation.Unfortunately,the information security standard IEC623 51 only focuses on the content security during message transmission.Therefore,exploring the detection system of performance-oriented network attack is of great significance.This paper attempts to study some key technologies in detection system of performance-oriented network attack.Firstly,the current research status of smart substation flow calculation model and abnormal flow detection model is elaborated and analyzed,and a solution based on cyber physical power system is proposed.Then,the message flow of the process layer driven by power equipment and the DoS attack traffic flow are analyzed in detail.Based on the physical and logical connection information of smart substation,the flow calculation model based on cyber physical power system is formed.By designing a variety of smart substation operation scenarios,the proposed calculation model be verified by OPNET simulation software.The analytic result proved that the proposed model can realize analysis of substation information flow with off-line.Based on the characteristics of substation process layer flow and the proposed calculation model,refer to the Internet abnormal traffic detection strategy,the principle and process of abnormal flow detection in the process layer of smart substation are proposed.The key parameter calculation method is described in detail.Taking DoS attack as an example,the case calculation and analysis prove that the proposed detection method can effectively identify abnormal traffic.Finally,the engineering application scheme of the detection system for the intelligent substation is designed.