针对风电SCADA系统边界安全体系架构问题,将防火墙和入侵检测系统(intrusion detectionsystem,IDS)功能集于一体,融入入侵容忍技术、诱骗系统和数字取证等网络安全技术,设计出风电SCADA系统边界安全模型。该模型提供了多层屏障,可实现风电SCADA网络和外部网络间的深度防御,增加网络的安全性,对解决电力企业进行远程控制和通信的网络安全问题具有参考和应用价值。
In order to solve the problem of border security system frame of SCADA for wind power farm, the firewall and intrusion detection system (IDS) are integrated in the design of border security system frame of SCADA for wind power farm, to which the network security techniques such as intrusion tolerant technology, deception system and digital forensics are merged. The proposed model offers a multilayer barrier, thus the defense in depth between the SCADA for wind power farm and external network can be implemented and the security of SCADA network is enhanced. The results of this research are applicable and available for reference in the network security of remote control and communication of power enterprises.