CN112579163A - Network security emergency response implementation system for industrial control system of thermal power plant - Google Patents

Network security emergency response implementation system for industrial control system of thermal power plant Download PDF

Info

Publication number
CN112579163A
CN112579163A CN202011356662.4A CN202011356662A CN112579163A CN 112579163 A CN112579163 A CN 112579163A CN 202011356662 A CN202011356662 A CN 202011356662A CN 112579163 A CN112579163 A CN 112579163A
Authority
CN
China
Prior art keywords
emergency response
microcomputer
power plant
thermal power
industrial control
Prior art date
Legal status (The legal status is an assumption and is not a legal conclusion. Google has not performed a legal analysis and makes no representation as to the accuracy of the status listed.)
Pending
Application number
CN202011356662.4A
Other languages
Chinese (zh)
Inventor
杨国玉
张伟
车业蒙
郭卫霞
熊中浩
Current Assignee (The listed assignees may be inaccurate. Google has not performed a legal analysis and makes no representation or warranty as to the accuracy of the list.)
China Datang Corp Science and Technology Research Institute Co Ltd
Original Assignee
China Datang Corp Science and Technology Research Institute Co Ltd
Priority date (The priority date is an assumption and is not a legal conclusion. Google has not performed a legal analysis and makes no representation as to the accuracy of the date listed.)
Filing date
Publication date
Application filed by China Datang Corp Science and Technology Research Institute Co Ltd filed Critical China Datang Corp Science and Technology Research Institute Co Ltd
Priority to CN202011356662.4A priority Critical patent/CN112579163A/en
Publication of CN112579163A publication Critical patent/CN112579163A/en
Pending legal-status Critical Current

Links

Images

Classifications

    • GPHYSICS
    • G06COMPUTING; CALCULATING OR COUNTING
    • G06FELECTRIC DIGITAL DATA PROCESSING
    • G06F9/00Arrangements for program control, e.g. control units
    • G06F9/06Arrangements for program control, e.g. control units using stored programs, i.e. using an internal store of processing equipment to receive or retain programs
    • G06F9/30Arrangements for executing machine instructions, e.g. instruction decode
    • G06F9/30003Arrangements for executing specific machine instructions
    • G06F9/30076Arrangements for executing specific machine instructions to perform miscellaneous control operations, e.g. NOP
    • GPHYSICS
    • G06COMPUTING; CALCULATING OR COUNTING
    • G06FELECTRIC DIGITAL DATA PROCESSING
    • G06F9/00Arrangements for program control, e.g. control units
    • G06F9/06Arrangements for program control, e.g. control units using stored programs, i.e. using an internal store of processing equipment to receive or retain programs
    • G06F9/30Arrangements for executing machine instructions, e.g. instruction decode
    • G06F9/30003Arrangements for executing specific machine instructions
    • GPHYSICS
    • G06COMPUTING; CALCULATING OR COUNTING
    • G06NCOMPUTING ARRANGEMENTS BASED ON SPECIFIC COMPUTATIONAL MODELS
    • G06N20/00Machine learning
    • GPHYSICS
    • G08SIGNALLING
    • G08BSIGNALLING OR CALLING SYSTEMS; ORDER TELEGRAPHS; ALARM SYSTEMS
    • G08B21/00Alarms responsive to a single specified undesired or abnormal condition and not otherwise provided for
    • G08B21/18Status alarms
    • G08B21/24Reminder alarms, e.g. anti-loss alarms
    • HELECTRICITY
    • H04ELECTRIC COMMUNICATION TECHNIQUE
    • H04LTRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION
    • H04L63/00Network architectures or network communication protocols for network security
    • H04L63/14Network architectures or network communication protocols for network security for detecting or protecting against malicious traffic
    • H04L63/1441Countermeasures against malicious traffic
    • HELECTRICITY
    • H04ELECTRIC COMMUNICATION TECHNIQUE
    • H04LTRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION
    • H04L67/00Network arrangements or protocols for supporting network services or applications
    • H04L67/01Protocols
    • H04L67/10Protocols in which an application is distributed across nodes in the network
    • H04L67/1097Protocols in which an application is distributed across nodes in the network for distributed storage of data in networks, e.g. transport arrangements for network file system [NFS], storage area networks [SAN] or network attached storage [NAS]

Landscapes

  • Engineering & Computer Science (AREA)
  • Theoretical Computer Science (AREA)
  • Software Systems (AREA)
  • General Engineering & Computer Science (AREA)
  • Physics & Mathematics (AREA)
  • General Physics & Mathematics (AREA)
  • Computer Security & Cryptography (AREA)
  • Signal Processing (AREA)
  • Computing Systems (AREA)
  • Computer Networks & Wireless Communication (AREA)
  • Business, Economics & Management (AREA)
  • Computer Hardware Design (AREA)
  • Emergency Management (AREA)
  • Artificial Intelligence (AREA)
  • Computer Vision & Pattern Recognition (AREA)
  • Data Mining & Analysis (AREA)
  • Evolutionary Computation (AREA)
  • Medical Informatics (AREA)
  • Mathematical Physics (AREA)
  • Safety Devices In Control Systems (AREA)

Abstract

The invention discloses a network security emergency response implementation system of an industrial control system of a thermal power plant, which comprises: DCS system, unit DEH, dust removal system PLC and sulphur removal system PLC, DCS system, unit DEH, dust removal system PLC and sulphur removal system PLC are connected with the microcomputer respectively, the microcomputer is connected with emergency response server respectively. The invention uses the microcomputer to monitor the threat, wrong digital quantity and analog quantity command signals sent by the operator station of the industrial control system of each thermal power plant, and uses the microcomputer to call the database information of the emergency response server to rapidly judge in situ, and the system has low cost and high economy; the volume is small, and the installation is convenient; the calculation capacity is high, and compared with a single chip microcomputer, the calculation capacity is higher; compared with a single chip microcomputer, the microcomputer is provided with an operating system, and operation and use are convenient.

Description

Network security emergency response implementation system for industrial control system of thermal power plant
Technical Field
The invention relates to a network security emergency response implementation system of an industrial control system of a thermal power plant.
Background
The industrial control system of the thermal power plant is often threatened by network security, and the system is damaged after the industrial control system of the thermal power plant is threatened, and the existing system has high cost and low economy; the volume is large, and the installation is inconvenient; the adaptability is poor, and the configuration is not convenient to change; the expandability is poor.
Based on the above, the invention needs to improve the prior art, and provides a network security emergency response implementation system for an industrial control system of a thermal power plant.
Disclosure of Invention
The invention aims to provide an emergency response implementation system for solving problems by using a WeChat computer technology when the network security threat is attacked and permeated to an industrial control system of a thermal power plant and actual damage is caused.
In order to achieve the above object, the present invention provides a system for implementing network security emergency response of an industrial control system of a thermal power plant, which comprises: DCS system, unit DEH, dust removal system PLC and sulphur removal system PLC, DCS system, unit DEH, dust removal system PLC and sulphur removal system PLC are connected with the microcomputer respectively, the microcomputer is connected with emergency response server respectively.
As a further improvement of the present invention, the microcomputer is further configured to provide command signal data to each microcomputer.
As a further improvement of the present invention, the emergency response server is also used to record, classify and process network security threat event processing data, procedures and results transmitted by the microcomputer.
As a further improvement of the invention, the DCS system, the unit DEH, the ash removal system PLC and the sulfur removal system PLC are used for sending digital signals and analog signal commands to control equipment to start, connect the grid or change the opening of the valve.
The invention uses the microcomputer to monitor the threat, wrong digital quantity and analog quantity command signals sent by the operator station of the industrial control system of each thermal power plant, and uses the microcomputer to call the database information of the emergency response server to rapidly judge in situ, if no problem exists, the command signals flow to the relevant equipment, otherwise, the command signals are interrupted, and alarm signals are sent to the operator station; the problem processing process and data are stored in an emergency response server, and a microcomputer is used for solving the problems. The system has low cost and high economical efficiency; the volume is small, and the installation is convenient; the calculation capacity is high, and compared with a single chip microcomputer, the calculation capacity is higher; the operability is strong, compared with a single chip microcomputer, a microcomputer is provided with an operating system, and the operation and the use are convenient; the adaptability is strong, and the configuration is convenient to change; and the expansibility is strong, and the development of other functions is facilitated.
Drawings
FIG. 1 is a schematic diagram of a system for implementing network security emergency response of an industrial control system of a thermal power plant.
Detailed Description
The technical solution of the present invention is further described in detail by the accompanying drawings and embodiments.
Specifically, fig. 1 shows a schematic diagram of a network security emergency response implementation system of an industrial control system of a thermal power plant, according to the present invention: the system comprises: the system comprises a DCS (distributed control system), a machine set DEH, an ash removal system PLC and a sulfur removal system PLC, wherein the DCS, the machine set DEH, the ash removal system PLC and the sulfur removal system PLC are respectively connected with a microcomputer, the microcomputer is respectively connected with an emergency response server and provides corresponding instruction signal data for each microcomputer, and the emergency response server is used for recording, classifying and processing network security threat event processing data, processes and results transmitted by the microcomputer.
The network security threat refers to the network security threat that viruses, attacks and the like which are not intercepted by front-end monitoring and defense measures, searched and killed are about to damage the industrial control system of the thermal power plant.
The DCS system, the unit DEH, the ash removal system PLC and the sulfur removal system PLC belong to important components of an industrial control system of a thermal power plant, and mainly send digital signals and analog signal instructions to achieve the functions of controlling starting of related equipment, grid connection or changing of valve opening and the like, and the signal instructions are mainly sent by operator stations of all the systems.
The microcomputer has high computing power, rich interfaces, powerful processor, operation system support, etc. The related data of raspberry group can be referred to. The system is used for monitoring command signals automatically sent by each system operator station, quickly calling database data of the emergency response server, and predicting and verifying related commands by using a built-in machine learning or deep learning or time sequence method. And if the verification is consistent, transmitting the related instruction signal to the related equipment, otherwise, immediately transmitting the terminal instruction signal, and sending an alarm signal to the operator station of the related industrial control system to remind the operator to quickly enter an emergency response management method of the industrial control system for operation. All the microcomputers send the data, the process and the conclusion of the problem processing to the emergency response server, and the sample data is stored. The system is in a constantly updated, self-learning state. The emergency response requirement of the industrial control system of the thermal power plant can be met more quickly and accurately.
Related equipment such as a steam turbine, a boiler fuel valve and the like.
And the emergency response server stores huge command signal data of the industrial control system of the thermal power plant. Providing corresponding instruction signal data for each microcomputer, and recording, classifying and processing the network security threat event processing data, process and result transmitted by the microcomputers. Provides a powerful learning sample for the microcomputer.
The above-mentioned embodiments are intended to illustrate the objects, technical solutions and advantages of the present invention in further detail, and it should be understood that the above-mentioned embodiments are merely exemplary embodiments of the present invention, and are not intended to limit the scope of the present invention, and any modifications, equivalent substitutions, improvements and the like made within the spirit and principle of the present invention should be included in the scope of the present invention.

Claims (4)

1. A network security emergency response implementation system for an industrial control system of a thermal power plant is characterized by comprising: DCS system, unit DEH, dust removal system PLC and sulphur removal system PLC, DCS system, unit DEH, dust removal system PLC and sulphur removal system PLC are connected with the microcomputer respectively, the microcomputer is connected with emergency response server respectively.
2. The thermal power plant industrial control system network safety emergency response implementation system of claim 1, wherein the microcomputers are further configured to provide command signal data to each of the microcomputers.
3. The thermal power plant industrial control system network security emergency response implementation system of claim 2, wherein the emergency response server is further configured to record, classify and process network security threat event processing data, procedures and results transmitted by the microcomputer.
4. The thermal power plant industrial control system network safety emergency response implementation system of claim 3, wherein the DCS system, the unit DEH, the ash removal system PLC and the sulfur removal system PLC are used for sending digital signals and analog signal commands to control equipment starting, grid connection or change valve opening.
CN202011356662.4A 2020-11-27 2020-11-27 Network security emergency response implementation system for industrial control system of thermal power plant Pending CN112579163A (en)

Priority Applications (1)

Application Number Priority Date Filing Date Title
CN202011356662.4A CN112579163A (en) 2020-11-27 2020-11-27 Network security emergency response implementation system for industrial control system of thermal power plant

Applications Claiming Priority (1)

Application Number Priority Date Filing Date Title
CN202011356662.4A CN112579163A (en) 2020-11-27 2020-11-27 Network security emergency response implementation system for industrial control system of thermal power plant

Publications (1)

Publication Number Publication Date
CN112579163A true CN112579163A (en) 2021-03-30

Family

ID=75124285

Family Applications (1)

Application Number Title Priority Date Filing Date
CN202011356662.4A Pending CN112579163A (en) 2020-11-27 2020-11-27 Network security emergency response implementation system for industrial control system of thermal power plant

Country Status (1)

Country Link
CN (1) CN112579163A (en)

Citations (3)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
CN107770125A (en) * 2016-08-16 2018-03-06 深圳市深信服电子科技有限公司 A kind of network security emergency response method and emergency response platform
CN109525597A (en) * 2018-12-26 2019-03-26 安徽网华信息科技有限公司 It is a kind of can remote assistance operation network security emergency disposal system
US20200089885A1 (en) * 2018-09-17 2020-03-19 Schneider Electric Systems Usa, Inc. Industrial system event detection and corresponding response

Patent Citations (3)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
CN107770125A (en) * 2016-08-16 2018-03-06 深圳市深信服电子科技有限公司 A kind of network security emergency response method and emergency response platform
US20200089885A1 (en) * 2018-09-17 2020-03-19 Schneider Electric Systems Usa, Inc. Industrial system event detection and corresponding response
CN109525597A (en) * 2018-12-26 2019-03-26 安徽网华信息科技有限公司 It is a kind of can remote assistance operation network security emergency disposal system

Non-Patent Citations (2)

* Cited by examiner, † Cited by third party
Title
张大松等: "火电工控系统网络安全防护方案设计", 《信息技术与网络安全》 *
张相东: "火电厂DCS系统网络安全防护", 《电脑知识与技术》 *

Similar Documents

Publication Publication Date Title
CN112799358B (en) Industrial control safety defense system
CN104052730A (en) Intelligent Cyberphysical Intrusion Detection And Prevention Systems And Methods For Industrial Control Systems
CN102694871A (en) Server long-distance monitoring and fault processing device and method based on short message of mobile phone
CN110535238A (en) A kind of transformer equipment intelligent monitor system and method
CN104184790A (en) Electrical vehicle-mounted equipment quality remote monitoring method and system
CN110501956B (en) Production test alarm system, server and alarm information acquisition equipment
CN111431754A (en) Fault analysis method and system for power distribution and utilization communication network
CN111786986B (en) Numerical control system network intrusion prevention system and method
CN105225288A (en) A kind of pipe network cruising inspection system
CN103021142A (en) Remote warning system of engineering machinery device and control method of remote warning system
CN115562144A (en) Major hazard source safety monitoring and early warning management system based on 5G technology
CN112866262A (en) Power plant safety I area situation perception platform based on neural network
CN106227672B (en) A kind of built-in application program failure captures and processing method
CN114625074A (en) Safety protection system and method for DCS (distributed control System) of thermal power generating unit
CN112579163A (en) Network security emergency response implementation system for industrial control system of thermal power plant
CN105242655A (en) Industrial on-site supervising device based on Internet of Things
CN111149105B (en) Method and device for immediate and non-reactive transmission of log messages
CN110599646A (en) Special local module for access control system, control method, intelligent substation safety precaution method and system
WO2019241845A1 (en) System for technology infrastructure analysis
CN115150197A (en) Method and system for preventing command attack of UPS (uninterrupted Power supply) air conditioning equipment
CN201750221U (en) Power relay protection text message monitoring device
CN112510823A (en) Power supply remote control system
CN111146863A (en) Power safety detection method for transformer substation
CN103994464A (en) Remote monitoring system for industrial torch
CN215187089U (en) Remote intelligent monitoring software system

Legal Events

Date Code Title Description
PB01 Publication
PB01 Publication
SE01 Entry into force of request for substantive examination
SE01 Entry into force of request for substantive examination
RJ01 Rejection of invention patent application after publication
RJ01 Rejection of invention patent application after publication

Application publication date: 20210330