Research And Development Of Network Isolation Components For Distribution Network Security

With the deepening of distribution automation,the distribution network is more widely distributed,and the number of distribution terminals is growing rapidly.However,the security protection of distribution network is insufficient.Under the condition of continuous upgrading of network attack means,the distribution terminal is vulnerable to malicious attack by hackers when communicating w ith the distribution main station.In order to realize the safe data exchange between the distribution terminal and the main station,and protect the information security in the distribution network,the network isolation components for the distribution network security are studied and implemented.This paper analyzes the current security risks and protection status of distribution network,and studies the related network border security protection technology.According to the application scenarios and functional requirements of the network isolation components in the distribution network,the network isolation components designed in this paper include the functions of access control,distribution protocol filtering and data isolation and exchange,so as to achieve the security and reliability of the distribution business data exchange.At the same time,in order to improve the usability and operability of network isolation components,the corresponding configuration management system is designed and implemented for the visual configuration management of equipment.During the implementation of network isolation component,the main technologies and methods are as follows:first,netmap technology is used to capture and forward data packets.Netmap technology adopts zero copy technology,which can save the loss of system resources by reducing the number of copies of data in the kernel,so as to improve the efficiency of forwarding and processing packets of network isolation components.The second is to analyze and filter the distribution protocol based on the inspection of message character words,and consider all kinds of situations of message,such as plaintext and ciphertext,fixed length and variable length,message combination and split,so as to realize the filtering of distribution message in different situations.In this paper,the function and performance of network isolation components are tested.The experimental results show that the access control function and distribution protocol filtering function of network isolation components are normal,and the performance is far beyond the test target,which can meet the needs of various applications.