Abstract:

The energy system, as a critical national infrastructure, faces severe challenges from advanced persistent threats (APTs) and zero day vulnerability attacks. This paper focused on the current energy system security defense solutions that mainly rely on feature detection and boundary protection, making it difficult to cope with the security challenges of high concealment and long latency APT attacks. A new type of four honey collaborative active defense system based on trapping was introduced. By deploying honey points, honeypots, honeyholes, and honey arrays in the energy system to construct a threat perception network, combined with deception defense and dynamic collaboration mechanisms, a “protective” active defense system for the energy system was formed, achieving early perception, accurate discrimination, and traceability deterrence of attackers. The experimental results show that this system can effectively capture attack behaviors and provide timely warnings of potential threats when dealing with complex network attacks in energy systems, providing a new approach to security protection for energy systems against APT attacks.

Key words: energy system security, advanced persistent threat, threat perception, collaborative defense model, dynamic decoying