Design And Implementation Of Substation Network Security Monitoring System

With the development of the global energy Internet,it is inevitable that systems will be integrated and interconnected.The dedicated platforms and protocols will be gradually replaced by open ones,and the possibility of being attacked will increase.The large-scale power outage in the Ukrainian power grid was due to the lack of management and monitoring of the operation and maintenance process.Industrialization and informatization are constantly intertwined,and substation networks also use a large number of information technologies and face traditional cybersecurity threats.The special requirements of the substation network for business continuity and high real-time performance make it difficult to apply traditional network security technologies directly to substation networks.The existing power network secondary network security monitoring platform mainly collects logs to obtain abnormal information,and can not realize real-time monitoring of traffic in the substation network,deep analysis of protocols,and it is impossible to grasp abnormal device access and illegal data operation instructions in real time.In view of the above problems,this paper studies the protocol deep analysis technology,the trusted measurement device access detection technology,the real-time monitoring alarm technology,and analyzes the substation network security monitoring function requirements,and designs and implements the substation network security monitoring system.The system consists of a network probe module,a monitoring management center module,and a UI management workstation module.On the basis of functional design,each functional module is implemented for coding,and the system function test is in line with expectations.Through the substation network security monitoring system,on the one hand,timely discover potential network attacks and alarms,and take countermeasures before the attacks occur to prevent damage to critical power infrastructure.On the other hand,after the attack occurs,it is possible to restore the attack path,track the attack source,and discover the vulnerability.The substation network is an important part of the country's critical infrastructure,and the safety of the substation network is related to the country's strategic security.Therefore,it is of great significance to carry out research on substation network security monitoring system to ensure the safe and stable operation of substation network.