信息网络安全

信息网络安全 ›› 2025, Vol. 25 ›› Issue (6): 955-966.doi: 10.3969/j.issn.1671-1122.2025.06.010

• 专题论文: 网络主动防御 • 上一篇    下一篇

基于四蜜协同的能源系统主动防御安全体系研究

朱志成1,2, 曹慧2, 王寅生2()   

  1. 1.北京交通大学网络空间安全学院，北京 100044
    2.国家能源投资集团有限责任公司信息技术分公司，北京 100010
  • 收稿日期:2025-02-20 出版日期:2025-06-10 发布日期:2025-07-11
  • 通讯作者: 王寅生 12075872@ceic.com
  • 作者简介:朱志成（1972—），男，黑龙江，高级工程师，硕士，主要研究方向为网络安全主动防御技术|曹慧（1987—），男，北京，工程师，本科，主要研究方向为能源系统安全防护|王寅生（1986—），男，河北，高级工程师，博士，主要研究方向为工控系统安全。
  • 基金资助:
    国家重点研发计划(2022YFB3103403)

Research on Active Defense Security System Based on Four-Honey Coordination for Energy Systems

ZHU Zhicheng1,2, CAO Hui2, WANG Yinsheng2()   

  1. 1. School of Cyberspace Science and Technology, Beijing Jiaotong University, Beijing 100044, China
    2. Information Technology Branch of National Energy Investment Group Co., Ltd., Beijing 100010, China
  • Received:2025-02-20 Online:2025-06-10 Published:2025-07-11

RichHTML

18

PDF (PC)

51

摘要：

能源系统作为国家关键基础设施，面临高级持续性威胁（APT）和零日漏洞攻击的严峻挑战。文章针对当前能源系统安全防御方案主要依赖特征检测与边界防护，难以应对隐蔽性高、潜伏期长的APT攻击的安全挑战，引入新型基于诱捕的四蜜协同主动防御体系，通过在能源系统中部署蜜点、蜜庭、蜜洞和蜜阵构建威胁感知网络，结合欺骗防御与动态协同机制，形成面向能源系统的“护卫式”主动防御系统，实现对攻击者的早期感知、精准判别和溯源威慑。实验结果表明，该系统在应对能源系统复杂网络攻击时可有效捕获攻击行为，及时预警潜在威胁，为能源系统面向APT攻击提供安全防护的新思路。

关键词: 能源系统安全, 高级持续性威胁, 威胁感知, 协同防御, 动态诱捕

Abstract:

The energy system, as a critical national infrastructure, faces severe challenges from advanced persistent threats (APTs) and zero day vulnerability attacks. This paper focused on the current energy system security defense solutions that mainly rely on feature detection and boundary protection, making it difficult to cope with the security challenges of high concealment and long latency APT attacks. A new type of four honey collaborative active defense system based on trapping was introduced. By deploying honey points, honeypots, honeyholes, and honey arrays in the energy system to construct a threat perception network, combined with deception defense and dynamic collaboration mechanisms, a “protective” active defense system for the energy system was formed, achieving early perception, accurate discrimination, and traceability deterrence of attackers. The experimental results show that this system can effectively capture attack behaviors and provide timely warnings of potential threats when dealing with complex network attacks in energy systems, providing a new approach to security protection for energy systems against APT attacks.

Key words: energy system security, advanced persistent threat, threat perception, collaborative defense model, dynamic decoying

中图分类号: