智能变电站嵌入式终端的网络攻击类型研究及验证

全面掌握智能变电站嵌入式终端可能遭受的网络攻击方式及其对电力一次系统的影响，是建立有效安全防护措施的基础。目前，有关智能变电站嵌入式终端网络攻击的研究大都针对单一类型的网络攻击，且仅停留在理论分析阶段，未对提出的网络攻击类型进行验证。在分析智能变电站嵌入式终端及其通信环境的脆弱性的基础上，从攻击检测所需要的数据源和检测方法角度总结了终端可能遭受的网络攻击类型；提出了实物与仿真相结合的攻击验证方案；分析了泛洪类和报文类主要攻击的原理，给出了相应攻击工具的构造方法；使用所构造的攻击工具在验证方案设计的实验环境中进行了测试，结果证明这些攻击会对智能变电站嵌入式终端及电力一次设备造成影响，且终端抵御泛洪类攻击能力较差。

Type and Verification of Network Attacks on Embedded Terminals of Intelligent Substation

A comprehensive understanding of the ways of network attacks on the embedded terminals of intelligent substation and their impacts on the primary power system is the basis for taking effective security protection measures. At present, most researches on the embedded terminal attack of intelligent substation focus on the single type of network attack and stay in the theoretical analysis stage, and no verification is conducted on the presented types of network attack. Based on a vulnerability analysis of the embedded terminals of intelligent substation and their communication environment, the types of network attacks on the terminals are summarized in terms of the data sources and detection methods required for attack detection. Then, an attack verification scheme is proposed with combination of physical testing and simulation. Meanwhile, the principles of flooding and message attacks are analyzed, and the construction methods of the corresponding attack tools are presented. Finally, the constructed attack tools are tested in the experiment environment of the designed verification scheme. The test results show that the presented two attacks can affect the embedded terminals of intelligent substation and the primary equipment, and the embedded terminals are poor in resisting flooding attack.