Research on network attack monitoring technology of power industry control system

With the continuous development of smart grid construction, the degree of automation of power system has increased rapidly, and the number of power grid sensors, information network scale and decision-making unit has increased significantly. The cyber security of power industry control systems is facing serious challenges. This paper deeply studies the attack monitoring data acquisition and preprocessing technology of the real-time interaction process of the electric power industrial control system, and realizes the high-speed collection of real-time data of the electric power industrial control system and the unified preprocessing of data of different structures, dimensions and formats. Provide a data basis for follow-up monitoring and correlation analysis. Research on the attack correlation analysis technology of the electric power industrial control system, correlate the massive abnormal events generated in the real-time interaction process of the electric power industrial control system, and automatically generate the association rules to achieve accurate identification of network attacks in specific attack scenarios.