Research on Network Intrusion Risk and Behavior Detection Methods for Power Grid Information Physical System

With the application of new technologies such as “cloud computing, Big data, the Internet of Things, Artificial intelligence, 5G” in the power system and the development of smart grid, the multi stream integration of energy flow, business flow, and data flow, the interaction between the power internal network and the internet is becoming more frequently, and the boundaries of the power system network are constantly extending, shifting from closed to open, which will bring unprecedented network security risks and challenges. Traditional intrusion detection methods of information systems isn't suitable for power grid information physical system, and research on intrusion risk analysis for power grid information physical system is few currently. Therefore, according to the operation characteristics of the Power grid information physical system, this paper deeply analyzes the network intrusion risk of the power industrial control system, and summarizes the possible types of network attacks of the Power grid information physical system. Based on the risk types analyzed, this article proposes an intrusion detection method suitable for power grid information physical system, which also provides support for subsequent network tracing.