上海交通大学学报

上海交通大学学报

• •    

针对电力高级量测体系的DDoS攻击动态建模与最优防御策略（网络首发）

  

  1. 1. 长沙理工大学电网防灾减灾全国重点实验室；2. 长沙理工大学电网安全监控技术教育部工程研究中心；3. 湖南工程学院电气与信息工程学院；4. 国防科技大学系统工程学院
  • 基金资助:
    国家自然科学基金联合基金重点支持项目(U22B20113)； 国家自然科学基金项目(52177068)； 湖南省自然科学基金项目(2023JJ30028)

Dynamic Modeling and Optimal Defending Strategy for Power Advanced Metering Infrastructure Under Distributed Denial-of-Service Attacks

  1. （1. National Key Laboratory of Disaster Prevention and Reduction for Power Grid, Changsha University of Science and Technology, Changsha 410114, China; 2. Ministry of Engineering Center for Power System Security and Supervisory Control Technology, Changsha University of Science and Technology, Changsha 410114, China; 3. School of Electrical and Information Engineering, Hunan Institute of Engineering, Xiangtan 411104, Hunan, China；4. College of Systems Engineering, National University of Defense Technology, Changsha 410073, China）

PDF (PC)

32

摘要： 高级量测体系(Advanced Metering Infrastructure， AMI)是新型电力系统的关键组成部分，异构通信网络和智能终端的广泛应用导致其易受到网络攻击威胁。本文研究分布式拒绝服务(Distributed Denial-of-Service， DDoS)攻击下AMI网络的动态建模与最优防御策略。首先，分析DDoS攻击在AMI网络中的传播路径，并结合复杂网络理论与SEIR传染病模型，建立了一个刻画AMI网络中节点遭受DDoS攻击后的状态演化模型，分析DDoS攻击在AMI网络中的传播机理和攻击容忍水平；然后，以最小化防御损失和成本为目标提出了一种在AMI网络中灵活优化部署防御资源的防御策略。最后，在两种不同的AMI网络结构下进行了大量的数值仿真验证了所提策略的有效性。

关键词: 高级量测体系, 分布式拒绝服务攻击, 动态SEIR传染病模型, 复杂网络理论, 最优控制

Abstract: Advanced metering infrastructure is a key component of the new power system. The wide application of heterogeneous communication networks and intelligent terminals makes it vulnerable to cyber-attacks. This paper studies the dynamic modeling and optimal defending strategy of AMI network under distributed denial-of-service attacks. Firstly, the propagation path of DDoS attack in AMI network is analyzed. Combined with complex network theory and SEIR epidemic model, a state evolution model is established to describe the state evolution of nodes in AMI network after DDoS attack. The propagation mechanism and attack tolerance level of DDoS attack in AMI network are analyzed. Then, a defending strategy for flexibly optimizing the deployment of defense resources in AMI networks is proposed with the goal of minimizing defense losses and costs. Finally, the effectiveness of the proposed strategy is verified by a large number of numerical simulations under two different AMI network structures.

Key words: advanced metering infrastructure, distributed denial-of-service attacks, dynamic SEIR epidemic model, complex network theory, optimal control.

中图分类号: