研究文章
火电热控系统工况感知与安全运维协同方法
摘要
关键词
参考
国家能源局. 关于加快推进能源数字化智能化发展的若干意见：国能发科技〔2023〕27号[EB/OL]. (2023-03-28)[2026-09-04]. https://zfxxgk.nea.gov.cn/2023-03/28/c_1310707122.htm.
FENG C, PALLETI V R, MATHUR A, et al. A systematic framework to generate invariants for anomaly detection in industrial control systems[C]//Network and Distributed System Security Symposium. San Diego: Internet Society, 2019. DOI:10.14722/ndss.2019.23265.
STOUFFER K, PEASE M, TANG C, et al. Guide to operational technology (OT) security: NIST SP 800-82 Rev. 3[R]. Gaithersburg: National Institute of Standards and Technology, 2023. DOI:10.6028/NIST.SP.800-82r3.
国家发展和改革委员会. 电力监控系统安全防护规定：国家发展和改革委员会令第27号[EB/OL]. (2024-11-25)[2026-09-04]. https://zfxxgk.ndrc.gov.cn/web/iteminfo.jsp?id=20457.
IEC. Security for industrial automation and control systems—Part 3-2: Security risk assessment for system design: IEC 62443-3-2:2020[S]. Geneva: IEC, 2020.
ROSE S, BORCHERT O, MITCHELL S, et al. Zero trust architecture: NIST SP 800-207[R]. Gaithersburg: National Institute of Standards and Technology, 2020. DOI:10.6028/NIST.SP.800-207.表 1 合成场景与事件检出结果场景样本数／段方法B结果方法C结果正常场景（稳态运行、正常调峰、授权变更）120误报0段误报0段单纯测量偏移40检出33段检出33段越权变更伴偏移40检出28段检出40段未出现过程偏移的越权变更40检出0段检出40段链路冻结40检出40段检出40段合计280正常误报0/120；异常检出101/160（63.1%）正常误报0/120；异常检出153/160（95.6%）注：B为工况残差方法，C为联合方法；正常场景统计误报，异常场景统计检出。
