电网技术Issue(11)：3118-3125,8.DOI:10.13335/j.1000-3673.pst.2014.11.026
基于攻击方视角的电力CPS网络攻击模式分析
Attacker’s Perspective Based Analysis on Cyber Attack Mode to Cyber-Physical System
摘要
Abstract
In modern power grid the dispatching and control as well as the production management heavily rely on the electrical cyber-physical system (CPS). Consequently, the electric CPS becomes a high value target of cyber attack. Since there are obvious differences among attack objects due to the different aims of the attack, the adopted attack patterns are different, herein the cyber attacks in electrical CPS are classified into three categories, i.e., having no specific aim, getting economic benefit and destroying power grid stability such as leading to catastrophic blackout, and discussed respectively. Firstly, based on the collected data related to blackouts in North America from 2003 to 2007, the impacts of the cyber attack without special aim and the random failure and anomaly of cyber system itself on power grid are analyzed;then the methods to detect the electricity theft by the cyber attack to seek economic interests are summarized; finally, assuming that the malware, whose purpose is to collapse power grid stability, could intrude into real-time controlling area by virtue of the propagation mode of stuxnet and based on existing differences between the applications of the SCADA and the wide-area protection system in China and North America power enterprises, the attack objects and attack modes, which the attacker could choose, as well as the consequences of the attack are analyzed, and the potential intrusion detection technique for smart meters and SCADA are discussed.关键词
电力CPS/信息安全/网络攻击/震网病毒Key words
electrical cyber-physical system/cyber security/cyber attack/stuxnet分类
信息技术与安全科学引用本文复制引用
苏盛,吴长江,马钧,曾祥君..基于攻击方视角的电力CPS网络攻击模式分析[J].电网技术,2014,(11):3118-3125,8.基金项目
国家自然科学基金项目(50907005,61233008)。Project Supported by National Natural Science Foundation of China (50907005，61233008) （50907005,61233008）
