基于智慧城市架构中的安全防范体系研究

本文首先阐述了智慧城市建设的重要意义,其次分析了智慧城市安全运营面临的主要风险,包括顶层设计风险、组织机构风险、技术风险、运行模式风险以及信息安全风险,最后基于上述风险讨论了如何构建智慧城市安全运营的安全防范体系,以期为业内人士提供有益参考。     

Security system architecture for data integrity based on a virtual smart meter overlay in a smart grid system

As an efficient and intelligent system for managing and monitoring electricity usage, the “smart grid” has many useful applications. It supports energy producers and energy consumers efficiently by supporting the estimation and provision of the proper amount of electricity at the proper time. The most serious threat to a smart grid system may be when information is altered or forged by attackers; the system could malfunction and could collapse. In some cases, the attackers could waste system resources on purpose and this could lead to disastrous results. In this paper, we propose security system architecture to provide the secure and reliable smart grid service. It includes a data authentication process to verify the aggregated data and virtual network management to detect a compromised area or node. It detects a false data injection attack and further prevents a denial of service attack efficiently with less overhead for the individual devices comprising the smart grid system.     

网格服务系统安全体系的研究与设计

网格将分散的资源聚合在一起,形成更高层次的分布式资源共享环境,安全问题一直以来都是网格环境中考虑的一个重要问题.研究并设计了网格服务系统的安全体系结构,分析了网格服务系统的特点及面临的安全问题,讨论了安全体系中涉及的技术手段,通过本地及域级用户映射机制和资源自描述的安全方案,实现了较为灵活的网格服务系统安全体系.     

Blockchain-empowered security and privacy protection technologies for smart grid

With the rapid development in society of the economy and of computational technologies, it is particularly important to build a secure, efficient and reliable smart grid architecture to provide users with high-quality electricity services. However, data collection and energy trading in public networks creates security and privacy challenges in smart grids. Blockchain technologies have the excellent characteristics of decentralization, immutability and traceability, which can resolve the security, integration and coordination problems faced by the traditional centralized networks for smart grids. The goal of this paper is to introduce and compare blockchain-based technologies in addressing the problems of privacy protection, identity authentication, data aggregation and electricity pricing for the data collection and power energy trading processes in smart grids. In addition, the existing challenges and future research directions of smart grids are discussed.     

Integrated smart grid systems security threat model

The smart grid (SG) integrates the power grid and the Information and Communication Technology (ICT) with the aim of achieving more reliable and safe power transmission and distribution to the customers. Integrating the power grid with the ICT exposes the SG to systems security threats and vulnerabilities that could be compromised by malicious users and attackers. This paper presents a SG systems threats analysis and integrated SG Systems Security Threat Model (SSTM). The reference architecture of the SG, with its components and communication interfaces used to exchange the energy-related information, is integrated with the results of SG systems security threat analysis to produce a comprehensive, integrated SG SSTM. The SG SSTM in this paper helps better depict and understand the vulnerabilities exploited by attackers to compromise the components and communication links of the SG. The SG SSTM provides a reference of the systems security threats for industrial security practitioners, and can be used for design and implementation of SG systems security controls and countermeasures.     

一个具有强授权特性的网格安全框架

网格安全技术主要解决网格环境中实体之间的认证和授权问题。Globus网格项目中的GSI(Grid Secudty Infrastmcture)主要基于X．509技术实现身份认证以及数据的机密性、完整性和抗否认性,重点解决了认证和消息保护问题,然而在授权问题上缺乏必要的技术支撑。在分析现有安全技术的基础上,提出了将基于X．509的PKI技术和PMI技术相结合的网格安全框架,旨在实现基于安全认证基础之上网格用户和虚拟群组实体间的安全授权机制,从而构建强认证、强授权的网格安全基础设施。     

智能电网及其信息安全分析

随着自动控制技术、信息技术、网络技术以及物联网技术的不断发展,传统的电网将逐渐被智能电网所取代,智能电网将广泛应用在社会生产和生活的各个领域。在特殊情况下,智能电网的数据传输、共享需要连接到互联网等公共网络系统中,从而面临病毒、黑客等信息安全的威胁。文中阐述了智能电网的关键技术、安全风险、主要安全技术和防范措施,探索了保障智能电网安全平稳运行的新技术和新方法。     

A reliable opportunistic routing for smart grid with in-home power line communication networks

The topology of in-home power line communication (PLC) networks varies frequently, which makes traditional routing algorithms failure. To solve this problem, an end-to-end transmission time for remaining path (TTRP) metric-based opportunistic routing (TTRPOR) is proposed. Since a local broadcasting scheme is adopted, the algorithm can find the optimal path for forwarding packets in a dynamic PLC network. The closed-form of the outage probability for a PLC channel is derived to estimate the TTRP. It is proved that the average throughput can achieve maximum as the metric TTRP is utilized to sort candidate forwarding nodes. Numerical results show that the end-to-end throughput of networks with TTRPOR, outperforms that of the network adopting DSR and EXOR, especially for the case of varying-topology in-home PLC networks.     

智能电网信息安全威胁及对策分析

智能电网是电网和现代信息技术融合于一体的新型电网,已成为解决21世纪全球能源问题的新战略。智能电网信息安全在整个电网通信网络中的重要性越来越突出,需要更多相关研究来制定标准以及开发相应技术来满足智能电网信息安全需要。介绍了智能电网信息的特点、国内外发展现状以及最新的电网信息安全事件,总结了智能电网面临的安全威胁,对国家为保证智能电网信息安全制定的相关政策法规给出了说明,最后提出了应对智能电网信息安全威胁的具体防护措施。     

A secure data analytics scheme for multimedia communication in a decentralized smart grid

With the exponential increase in energy demands (commercial as well as residential), the traditional grid infrastructure significantly shifted to intelligent ICT-based Smart Grid (SG) infrastructure. In the SG environment, only efficient energy management may not be sufficient as the SG dynamics have significant impacts on multimedia communications such as video surveillance of the technical/non-technical losses of energy and many more. The inevitable energy losses can be identified by process and analyze the massive amount of heterogeneous data, i.e., Big Data (BD) generated through smart devices such as sensors, Smart Meters (SMs), and others. The key challenges in analyzing multimedia BD are computational complexity, operational integration complexity, data security, and privacy. To overcome the aforementioned issues, this paper proposes a blockchain-based data analytics scheme called ChoIce, which offers secure data collection, analysis, and decision support for the SG systems. It works in two phases; (i) secure data collection over Ethereum and (ii) BD analytics and decision-making using deep learning (DL). The robust and secure data analytics, efficient network management, and high-performance computing for BD are crucial towards the optimization of SG operation. The performance of ChoIce is evaluated considering parameters such as the data storage cost, multimedia communication latency, and prediction accuracy. Thus, the results of ChoIce shows that it outperforms in contrast to other state-of-the-art approaches.

     

A novel hybrid security mechanism for data communication networks

Multimedia Tools and Applications - With the growing internet technology over the last decade, the number of intruders trying to steal the confidential information has also risen. As a result, for...     

面向任务生命周期网格安全体系结构研究

在分析了网格安全需求、安全策略及安全问题后,提出了面向任务生命周期的5层安全体系结构.以快速制造服务的实例说明了该体系的安全实施.     

基于椭圆曲线密码的智能电网通信认证协议

为了确保通信在智能电网中的安全可靠,越来越多的认证协议被应用在通信过程中。针对Mahmood等（MAHMOOD K,CHAUDHRY S A,NAQVI H,et al.An elliptic curve cryptography based lightweight authentication scheme for smart grid communication.Future Generation Computer Systems,2018,81：557-565）提出的认证协议,指出此协议易受到内部特权人员攻击,缺少更换口令阶段,对用户缺少亲和性,无法保证用户有唯一的用户名,并有一个公式的错误。为改进此协议,提出一个基于椭圆曲线的认证协议。首先,增加用户与设备之间的登录阶段,其次,利用椭圆曲线密码学难题进行信息交互,最后补充口令更换阶段。通过BAN逻辑形式化分析,改进协议安全可行,能抵挡住内部人员攻击,并具有口令更换、用户名唯一、对用户有亲和性的特点。     

基于ARM的电动汽车车载智能充电系统的研制

电动汽车以其高效率、低排放、多能源的特点有效地抑制了能源紧张和环境污染问题,但高效可靠的充电系统和车载能源问题成为其发展的主要瓶颈。对此,以ARM处理器为整个充电系统的控制核心,并结合嵌入式操作系统研制了一种车载智能充电系统。构建了嵌入式系统软硬件平台,详细阐述了车载智能充电系统的设计过程。理论和实验分析表明,该充电系统减少了电动汽车充电时间,性能优良、可靠性高。     

A novel decentralized security architecture against sybil attack in RPL-based IoT networks: a focus on smart home use case

The Journal of Supercomputing - Internet of things (IoT) is renowned for being a massive revolution led by business leaders and researchers. Routing protocol for low-power and lossy network (RPL)...     

浅议野战机动通信系统安全电子盘的设计与实现

文中重点描述了安全电子盘的设计思想和实现,较好地解决了机械硬盘存在的问题,对提高信息安全水平有一定借鉴作用,对野战保障能力有促进作用。     

基于车联网的汽车智能防盗系统设计

针对目前汽车防盗系统所存在的不足与缺陷,设计了一款基于车联网的智能防盗系统,该系统可以实现智能防盗预警及失盗追踪。利用多传感器融合技术智能识别是否强行进入车辆来启动防盗系统;借助手机平台及互联网技术实现拍照、GPS跟踪、数据自动传输至网络、手机远程遥控和紧急按键启动防盗系统等功能。利用P ROTUES软件建立系统原理图并进行仿真,取得较好效果;搭建硬件实验平台,验证了系统的稳定性和可靠性。实验结果表明,该系统报警精准度为92%,定位精度可达5m,具有较高社会应用价值。