水利信息化Issue(5)：35-43,9.DOI:10.19364/j.1674-9405.2025.05.006
泛连接环境下的小型水电站网络安全改造和实践
Cybersecurity transformation and practice for small hydropower stations in ubiquitous connection environment
摘要
Abstract
To address cybersecurity challenges faced by small hydropower stations in a ubiquitous connection environment,a three-dimensional protection scheme was designed by integrating a layered network architecture with advanced communication technologies,covering both the plant area and the centralized control center.The scheme employed 5G private networks to establish isolated data transmission channels and incorporated end-to-end encryption protocols to effectively prevent data eavesdropping,replay attacks,and protocol tampering in traditional public network environments.By introducing the SASE architecture,a zero-trust security model was established,enabling a dynamic and trusted access environment for remote operation and maintenance personnel while mitigating lateral penetration attacks based on vulnerability exploitation.Built on an SDN architecture,the scheme integrated multi-dimensional data elements to explore intelligent end-to-end network management for small hydropower stations,achieving an upgrade in management from passive monitoring to proactive defense.Results showed that the scheme enabled small hydropower stations to achieve reliable network connectivity,end-to-end network security protection,and improved operation and maintenance efficiency through intelligent management.The study provides a quantifiable and replicable cybersecurity transformation solution for unmanned and intelligent operation of small hydropower stations and offers engineering reference for cybersecurity system construction in energy-sector IoT scenarios.关键词
网络安全改造/小型水电站/5G专网/专网承载/多因素认证/智能化运维/泛连接环境Key words
cybersecurity transformation/small hydropower stations/5G private network/private network bearer/multi-factor authentication/intelligent operation and maintenance/ubiquitous connection environment分类
信息技术与安全科学引用本文复制引用
陈淏,龚子桓,宋然,程崇浩,卞正皑,余雪芬,刘鲤晞,吴子劲,邢明辉..泛连接环境下的小型水电站网络安全改造和实践[J].水利信息化,2025,(5):35-43,9.基金项目
中国福建电信科创委研发任务基金项目(24FJ002343) （24FJ002343）
