Real-time Linkage and Active Defense Architecture of Electric Power Industrial Control System

Electric power industry is the most important fundamental energy industry in the development of national economy, and it is the cornerstone of economic development and social progress. The traditional security defense system of industrial control system adopts the passive working mode composed of traditional security products, which is difficult to resist the increasingly serious network attacks of industrial control system and eliminate hidden dangers fundamentally. In this regard, it is necessary to explore the active security defense system architecture to improve the comprehensive defense capabilities of industrial control systems and effectively resist cyberspace threats. Through in-depth analysis of the security status, protection strategy, particularity and vulnerability of power industrial control system, this paper proposes a real-time linkage active defense system including five modules of prediction, defense, detection, response and learning, and expounds the architecture and technology of each part. The active defense system proposed in this paper can prevent the vast majority of external attacks, and can flexibly adapt to and predict changes in enemy attacks.