摘要
Abstract
[Objective]The gradual opening-up,interconnection,and intelligentization of the new power system,along with the integration of new energy sources and smart terminals,infinitely expands the attack surface of the system externally,posing severe cybersecurity challenges.To tackle the challenges posed by existing protection systems in the context of defending against high-persistence threats,and to strengthen the security defense capabilities of the new power system.[Methods]The paper develops a collaborative defense system that integrates the"compliance baseline"with"practical capability"by aligning the MITRE ATT&CK threat modeling framework with the GB/T 39204-2022,Information security technology—Cybersecurity requirements for critical information infrastructure protection.Through a structured four-step implementation process of"analysis and identification,security protection,detection and evaluation,response and recovery",the paper develops a set of actionable and measurable technical implementation checklists and technical capability evaluation index systems.[Results]At a centralized photovoltaic power station,this solution is validated to systematically improve detection and prevention of malicious control command attacks,reducing the average threat detection time from hours to minutes.[Conclusion]This study confirms the effectiveness of the method in enhancing the security assurance capability of new power systems,offering a feasible technical approach for security protection of critical information infrastructure.关键词
新型电力系统/关键基础设施/GB/T 39204/MITRE ATT&CK/协同防御Key words
new power system/critical infrastructure/GB/T 39204/MITRE ATT&CK/collaborative defense
