信息网络安全 ›› 2019, Vol. 19 ›› Issue (4): 29-36.doi: 10.3969/j.issn.1671-1122.2019.04.004

• 技术研究 • 上一篇    下一篇

电力网络中基于物理信息的虚假数据入侵检测方法

夏卓群1,2,3(), 曾悠优2, 尹波1,2, 徐明3   

  1. 1. 长沙理工大学综合交通运输大数据智能处理湖南省重点实验室,湖南长沙 410114
    2. 长沙理工大学计算机与通信工程学院,湖南长沙 410114
    3.国防科技大学计算机学院,湖南长沙410073
  • 收稿日期:2018-10-15 出版日期:2019-04-10 发布日期:2020-05-11
  • 作者简介:

    作者简介:夏卓群(1977—),男,湖南,教授,博士,主要研究方向为智能电网安全、物联网安全;曾悠优(1994—),女,湖南,硕士研究生,主要研究方向为智能电网安全;尹波(1983—),女,湖南,博士,主要研究方向为数据管理与分析、网络与信息安全;徐明(1964—),男,湖南,教授,博士,主要研究方向为无线网络及安全、移动计算技术。

  • 基金资助:
    国家自然科学基金[61872372];CCF-启明星辰“鸿雁”科研资助计划项目;湖南省自然科学基金[2019JJ40314]

False Data Intrusion Detection Method Based on Physical Information in Power Network

Zhuoqun XIA1,2,3(), Youyou ZENG2, Bo YIN1,2, Ming XU3   

  1. 1. Hunan Provincial Key Laboratory of Intelligent Processing of Big Data on Transportation, Changsha University of Science and Technology, Changsha Hunan 410114, China
    2. School of Computer and Communication Engineering, Changsha University of Science and Technology, Changsha Hunan 410114, China
    3. School of Computer, National University of Defense Technology, Changsha Hunan 410073, China
  • Received:2018-10-15 Online:2019-04-10 Published:2020-05-11

摘要:

文章针对虚假数据攻击检测方法中难以快速检测的问题,提出一种基于物理信息的虚假数据入侵检测方法。该方法采用高采样的同步相量测量单元实时采集量测数据,计算节点电压稳定性指标(NVSI)。当电网节点中存在异常NVSI值时,采用离群点异常值检测算法找出受攻击的节点;当电网节点中无明显异常NVSI值时,根据节点的NVSI值在时间上变化的差值筛选出脆弱节点,对筛选出的节点使用物理规则协作检测的方法检测出受攻击的节点。文章使用标准IEEE 39节点电力测试系统进行模拟仿真,结果表明,文章方法相比其他方法能较快检测出受攻击的节点,且提高了检测准确率。

关键词: 虚假数据注入, 同步相量测量, 脆弱节点, 物理规则

Abstract: Aim

ing at the difficulty of fast detection in false data intrusion detection method, this paper proposes a false data intrusion detection method based on physical information. The method uses the high-sampling synchronous phasor measurement unit to collect measurement data in real time, and calculates the node voltage stability index (NVSI). When abnormal NVSI values exist in grid nodes, the system is based on the outlier detection algorithm to find the attacked nodes. When there are no obvious abnormal NVSI values in grid nodes, the vulnerable nodes are selected according to the difference of the NVSI value in time, and the attacked nodes are detected by physical rules cooperative detection method for the selected nodes. This paper uses a standard IEEE 39-bus power test system to simulate the system. The results show that the proposed method can detect the attacked nodes faster than other methods, and improve the detection accuracy.

Key words: false data injection, synchronous phasor measurement, vulnerable nodes, physical rules

中图分类号: