Application of Message Compliance Detection and Intrusion Blocking Technology in Remote Operation and Maintenance System of Relay Protection
In the remote operation and maintenance of relay protection, there are network intrusion risks at every stage of data transmission. Existing security measures have not effectively addressed business layer risks, and some issues such as delayed risk response still exist. Therefore, a message complian...
Saved in:
| Main Authors: | , , , , , , |
|---|---|
| Format: | Article |
| Language: | zho |
| Published: |
State Grid Energy Research Institute
2024-03-01
|
| Series: | Zhongguo dianli |
| Subjects: | |
| Online Access: | https://www.electricpower.com.cn/CN/10.11930/j.issn.1004-9649.202302015 |
| Tags: |
Add Tag
No Tags, Be the first to tag this record!
|
| Summary: | In the remote operation and maintenance of relay protection, there are network intrusion risks at every stage of data transmission. Existing security measures have not effectively addressed business layer risks, and some issues such as delayed risk response still exist. Therefore, a message compliance detection method and intrusion blocking technology have been proposed. By analyzing the objects, formats, business logic, and behavioral patterns of messages, a library of message compliance rules and a strategy for blocking non-compliant messages are established. Finally, modules for blocking non-compliant messages and an "emergency blocking" control module are designed and developed. The simulation testing results indicate that the proposed technology consistently blocks abnormal messages of different types as expected. This technology can effectively prevent the illegal intrusion attacks, thereby enhancing the security and stability of the remote operation and maintenance for relay protection. |
|---|---|
| ISSN: | 1004-9649 |