Design And Implementation Of Information Security Protection Testing And Verification Platform For Distribution System

Distribution system is an important link between users and substation systems.Its safe operation is related to people’s lives,social economic development and even national stability.With the widespread use of IT technology in power distribution systems,it faces increasing information security threats.In order to solve the problem of information attack and protection test on the actual power distribution system,this thesis designs and implements the power distribution system information security protection test and verification simulation bed,which provides test environment for the research of information security theory and method with.the cost and risk in control.This thesis first analyzes the requirements of the test and verification bed from three aspects: the structure and function of the power distribution system,attack injection and security protection,and proposes the overall framework of the test and verification platform is proposed.And then,this thesis introduces how the power distribution SCADA simulation system is designed and implemented in detail.The test and verification platform consists of four parts: physical object simulation,station control system,WAN simulation and dispatch control center.The physical object uses the IEEE 33 nodes as the power distribution system model,and uses MATLAB and Simulink to simulate the continuously and stably operation of the system,generating real-time status data and receiving control commands from the dispatch control center;when designing and implementing the station control system and the dispatch control center,MySQL is used to store and backup the data.Qt is used for human interaction interface,which completes data acquisition and monitoring of the system;OPNET is used to simulate the network environment of WAN,realize the data interaction between the real network and the simulation network,provides the WAN environment for information security analysis;the station control system conmmunicates with the dispatch control center between the the simulated wide area network through TCP.Based on the test bed,this thesis tests the function of the static security protection;designs and implements ARP-based man-in-the-middle attack and SYN Flood-based DoS attack for power distribution,verifis the attack injection function of the platform;proposes a genetic algorithm-based scheduling and fault recovery strategy optimization method under different system operating conditions,which performs anomaly detection and state division by collecting and analyzing the state data and network data of the post-attack power distribution system,and then according to the results,the corresponding scheduling strategy is adopted to realize the dynamic protection of the system,verifying the function of the information security dynamic protection method.