华电技术 ›› 2021, Vol. 43 ›› Issue (2): 9-14.doi: 10.3969/j.issn.1674-1951.2021.02.002

• 电力数据安全 • 上一篇    下一篇

基于GRU-CNN的综合能源网络安全攻击检测方法

吕政权1(), 李朝阳2, 王海峰1, 陈怡君1, 彭道刚2,*()   

  1. 1.国网上海市电力公司培训中心,上海 200438
    2.上海电力大学 自动化工程学院,上海 200090
  • 收稿日期:2020-08-04 修回日期:2021-02-02 出版日期:2021-02-25 发布日期:2021-03-05
  • 通讯作者: 彭道刚
  • 作者简介:吕政权(1985—),男,上海人,高级工程师,硕士,从事电力安全演练策划组织工作(E-mail: lvzhengq@163.com)。
  • 基金资助:
    国网上海市电力公司科技项目(52097019001N)

An intrusion detection method for integrated energy network based on GRU-CNN

LYU Zhengquan1(), LI Zhaoyang2, WANG Haifeng1, CHEN Yijun1, PENG Daogang2,*()   

  1. 1. State Grid Shanghai Electric Power Company Training Center,Shanghai 200438,China
    2. School of Automation Engineering,Shanghai University of Electric Power,Shanghai 200090,China
  • Received:2020-08-04 Revised:2021-02-02 Online:2021-02-25 Published:2021-03-05
  • Contact: PENG Daogang

摘要:

在电力系统向综合能源转型与网络攻击技术演进的双重影响下,电力信息安全和防护形势日益严峻,网络攻击检测系统有助于发现电力系统薄弱环节。针对传统研究算法改进一味追求更高检测准确率而忽视特征人工提取过程中信息丢失的问题,提出一种基于门控循环神经网络(GRU)和卷积神经网络(CNN)的攻击检测方法。该方法采用GRU提取原始时间序列特征,利用CNN获得多维度特征,然后结合Softmax分类器实现异常流量的映射。采用该检测方法对KDD99数据集和虚假数据注入攻击(FDIAs)2个试验模型进行训练测试,结果表明,相比传统模型,该方法有较好的分类效果和较高的准确率,验证了方法的有效性与实用性。

关键词: 综合能源, 攻击检测, 网络安全, 深度学习, 循环神经网络, 卷积神经网络, 云大物移智链

Abstract:

Influenced by the transformation of power system to an integrated energy one and the evolution of network attack technology, power information security and protection is getting mounting challenges. Network intrusion detection system (NIDS)can identify weaknesses in the power system. Pursuing detection accuracy, but neglecting the missing data in manual feature extraction is the problem in the course of improving the traditional algorithm. Thus, an intrusion detection method based on the Gated Recurrent Unit (GRU) and Convolutional Neural Network (CNN) is proposed. The method uses GRU to extract the original time series features, takes CNN to obtain multi-dimensional features, and realizes the mapping of abnormal traffic with Softmax classifier. The method has been practiced in the training of two experimental models, KDD99 data set and False Data Injection Attack (FDIAs). The results show that the method performs better in classification and detection accuracy than the traditional one, which verifies the effectiveness and practicability of the method.

Key words: integrated energy, intrusion detection, cyber security, deep learning, GRU, CNN, cloud computing,big data,IoT,mobile internet,AI and blockchain

中图分类号: