配电信息物理系统网络协同攻击安全风险评价和优化防御研究

The increasing interactions between the electric power distribution network and underlying communication system have reshaped the infrastructure to be an electric cyber-physical system (ECPS) and exhibits complex phenomena. This project aims to address a set of technical challenges of secure distribution network operation under cooperative cyber attacks and attempts to make the following contributions: ① establishing the system model based on the Finite State Machine and Mixed Logical Dynamical modeling approach to analyze the characteristics of coupling effect between the continuous and discrete systems; ②examining the intrinsic characteristics of cooperative cyber attacks, and present the multiple layer analysis of security risks and computational methods to evaluate the risks on different granularity, i.e. service, host and system. This can provide an initiative for addressing the issues of quantitative analysis of cyber security in power distribution networks; and ③ presenting an algorithmic solution based on game theoretical approach to allocate the defense resources in an optimal fashion against the cyber attacks. This project exploits the key research area in power network security and the research outcome could pave the way for secure and efficient operation of electric power distribution networks.

配电系统和信息网络的高度协同逐步形成了配电信息物理融合系统，其跨信息、物理空间的多维异构和深度耦合引入了更为复杂的系统安全风险，对配网可靠运行带来了全新的技术挑战。本项目聚焦网络协同攻击下的配网安全风险分析和防御关键问题，并从三个方面寻求创新：① 构建计及网络协同攻击的基于有限状态机和混合动态逻辑的配网“离散-连续”时空混成模型，深入揭示网络攻击下跨空间耦合作用和风险传播机理；②从“信息-物理耦合”视角来深究协同攻击的时空分散特性和威胁影响，提出“服务、主机和系统”粒度上的层次化安全态势分析和风险量化计算方法，为配网安全风险评价提供新借鉴；③引入动态攻防博弈和“适度安全”思想，提出基于混合策略型非合作、非零和博弈理论的协同攻击最优动态防御策略，为破解配网安全防御能力不足和防御资源利用不优的现实矛盾提供新思路；本项目研究成果对提升我国配网设施安全运行能力具有重要的科研价值和现实意义。

配电系统和信息网络的高度协同逐步形成了配电信息物理融合系统，其跨信息、物理空间的多维异构和深度耦合引入了更为复杂的系统安全风险，对配网可靠运行带来了全新的技术挑战。本项目聚焦网络协同攻击下的配网安全风险分析和防御关键问题，项目从三个方面取得了创新成果：① 构建计及网络协同攻击的基于有限状态机和混合动态逻辑的配网“离散-连续”时空混成模型，深入揭示网络攻击下跨空间耦合作用和风险传播机理；②从“信息-物理耦合”视角来深究协同攻击的时空分散特性和威胁影响，提出“服务、主机和系统”粒度上的层次化安全态势分析和风险量化计算方法，为配网安全风险评价提供新借鉴；③引入动态攻防博弈和“适度安全”思想，提出基于混合策略型非合作、非零和博弈理论的协同攻击最优动态防御策略，为破解配网安全防御能力不足和防御资源利用不优的现实矛盾提供新思路；本项目研究成果对提升我国配网设施安全运行能力具有重要的科研价值和现实意义。