入侵攻击模拟验证系统作为提高电网安全性的一种代表性工具,通过自动模拟从内外部对网络、系统和应用程序发起的广泛攻击,实现模拟攻击,评估系统安全能力。然而,针对电力网络中主要面临的长期且多阶段的高级持续攻击,现存入侵攻击模拟...入侵攻击模拟验证系统作为提高电网安全性的一种代表性工具,通过自动模拟从内外部对网络、系统和应用程序发起的广泛攻击,实现模拟攻击,评估系统安全能力。然而,针对电力网络中主要面临的长期且多阶段的高级持续攻击,现存入侵攻击模拟验证系统的设计却普遍存在一定的局限性,不能有效地进行全面模拟和防御。针对上述问题,本文提出了一种面向电力网络高级持续攻击防御的自动化入侵攻击模拟验证系统设计方案,该方案采用虚拟化与流量模拟技术实现了对电力网络的实战仿真,并在仿真环境中,通过对比防护前后攻击的效果来对高级持续攻击的防护措施进行有效性验证。本文首先基于虚拟化技术实现了针对高级持续攻击的基础网络与组件的模拟,其次采用流量模拟技术实现了系统中电网业务流量和高级持续攻击流量的双重模拟,最后搭建了面向高级持续攻击的实战场景,实现了防护措施的有效性验证模块。经试验表明,本文所提方案能够较好地进行电力网络攻防实验和防御长期多阶段的高级持续攻击。As a representative tool to improve the security of power grids, the Intrusion Attack Simulation Verification System automatically simulates a wide range of attacks on networks, systems, and applications from inside and outside, realizes simulated attacks, and evaluates system security capabilities. However, in view of the long-term and multi-stage advanced persistent attacks mainly faced in power networks, the design of the existing intrusion attack simulation and verification system has some limitations, and it cannot be effectively simulated and defended. In order to solve the above problems, this paper proposes a design scheme for the automatic intrusion attack simulation and verification system for advanced continuous attack defense of power network, which uses virtualization and traffic simulation technology to realize the actual combat simulation of power network, and verifies the effectiveness of the protection measures of advanced continuous attack by comparing the effect of attack before and after protection in the simulation environment. In this paper, the simulation of the basic network and components for advanced persistent attacks is realized based on virtualization technology, and secondly, the dual simulation of power grid service traffic and advanced persistent attack traffic in the system is realized by using traffic simulation technology, and finally the actual combat scenario for advanced persistent attacks is built, and the effectiveness verification module of protective measures is realized. Experiments show that the proposed scheme can be better for power network attack and defense experiments and defense against long-term and multi-stage advanced persistent attacks.展开更多
白云鄂博矿石中含有较高的天然放射性核素钍,在采矿、选矿和冶炼过程中会向环境中排放放射性核素钍及其子体。目前包头钢铁有限责任公司(包钢)废钢渣广泛用于建材,可能影响包头及白云鄂博地区(白云区)室内辐射水平。为初步摸清资源利用...白云鄂博矿石中含有较高的天然放射性核素钍,在采矿、选矿和冶炼过程中会向环境中排放放射性核素钍及其子体。目前包头钢铁有限责任公司(包钢)废钢渣广泛用于建材,可能影响包头及白云鄂博地区(白云区)室内辐射水平。为初步摸清资源利用过程中是否引起室内辐射水平的变化,采用固体核径迹方法分4个阶段对包头及白云鄂博地区室内222Rn、220Rn浓度进行了为期1年的测量,采用热释光法进行了为期3个月的γ辐射水平累积测量。结果表明,包头及白云鄂博地区室内222Rn浓度范围为16.7~125.3 Bq/m3,均值为39.3 Bq/m3;220Rn浓度范围为30~153.3 Bq/m3,均值为51.2 Bq/m3;γ辐射水平范围为120~283 n Gy/h,均值为149 n Gy/h。白云区总体222Rn、220Rn、γ辐射水平高于包头市区,总体上包头市区没有表现出离包钢较近的河西工业区室内220Rn浓度偏高,但包钢、白云区及掺渣建材建造的房屋室内222Rn浓度、γ辐射水平明显高于本次调查的其它区域的房间。随房间建造年代的增加,包头市区室内222Rn、220Rn浓度基本呈增高趋势,γ辐射水平没有明显的变化趋势。展开更多
文摘入侵攻击模拟验证系统作为提高电网安全性的一种代表性工具,通过自动模拟从内外部对网络、系统和应用程序发起的广泛攻击,实现模拟攻击,评估系统安全能力。然而,针对电力网络中主要面临的长期且多阶段的高级持续攻击,现存入侵攻击模拟验证系统的设计却普遍存在一定的局限性,不能有效地进行全面模拟和防御。针对上述问题,本文提出了一种面向电力网络高级持续攻击防御的自动化入侵攻击模拟验证系统设计方案,该方案采用虚拟化与流量模拟技术实现了对电力网络的实战仿真,并在仿真环境中,通过对比防护前后攻击的效果来对高级持续攻击的防护措施进行有效性验证。本文首先基于虚拟化技术实现了针对高级持续攻击的基础网络与组件的模拟,其次采用流量模拟技术实现了系统中电网业务流量和高级持续攻击流量的双重模拟,最后搭建了面向高级持续攻击的实战场景,实现了防护措施的有效性验证模块。经试验表明,本文所提方案能够较好地进行电力网络攻防实验和防御长期多阶段的高级持续攻击。As a representative tool to improve the security of power grids, the Intrusion Attack Simulation Verification System automatically simulates a wide range of attacks on networks, systems, and applications from inside and outside, realizes simulated attacks, and evaluates system security capabilities. However, in view of the long-term and multi-stage advanced persistent attacks mainly faced in power networks, the design of the existing intrusion attack simulation and verification system has some limitations, and it cannot be effectively simulated and defended. In order to solve the above problems, this paper proposes a design scheme for the automatic intrusion attack simulation and verification system for advanced continuous attack defense of power network, which uses virtualization and traffic simulation technology to realize the actual combat simulation of power network, and verifies the effectiveness of the protection measures of advanced continuous attack by comparing the effect of attack before and after protection in the simulation environment. In this paper, the simulation of the basic network and components for advanced persistent attacks is realized based on virtualization technology, and secondly, the dual simulation of power grid service traffic and advanced persistent attack traffic in the system is realized by using traffic simulation technology, and finally the actual combat scenario for advanced persistent attacks is built, and the effectiveness verification module of protective measures is realized. Experiments show that the proposed scheme can be better for power network attack and defense experiments and defense against long-term and multi-stage advanced persistent attacks.
文摘白云鄂博矿石中含有较高的天然放射性核素钍,在采矿、选矿和冶炼过程中会向环境中排放放射性核素钍及其子体。目前包头钢铁有限责任公司(包钢)废钢渣广泛用于建材,可能影响包头及白云鄂博地区(白云区)室内辐射水平。为初步摸清资源利用过程中是否引起室内辐射水平的变化,采用固体核径迹方法分4个阶段对包头及白云鄂博地区室内222Rn、220Rn浓度进行了为期1年的测量,采用热释光法进行了为期3个月的γ辐射水平累积测量。结果表明,包头及白云鄂博地区室内222Rn浓度范围为16.7~125.3 Bq/m3,均值为39.3 Bq/m3;220Rn浓度范围为30~153.3 Bq/m3,均值为51.2 Bq/m3;γ辐射水平范围为120~283 n Gy/h,均值为149 n Gy/h。白云区总体222Rn、220Rn、γ辐射水平高于包头市区,总体上包头市区没有表现出离包钢较近的河西工业区室内220Rn浓度偏高,但包钢、白云区及掺渣建材建造的房屋室内222Rn浓度、γ辐射水平明显高于本次调查的其它区域的房间。随房间建造年代的增加,包头市区室内222Rn、220Rn浓度基本呈增高趋势,γ辐射水平没有明显的变化趋势。
