Research on APT Attack Detection Methods for Power Information Systems
Mengjiang Zhu, Tianfu Xu, Qun He, Rixuan Qiu, Jiang Zhu, Wei Wang, Jianye Li · 2024
The power industry, as a pillar of the national economy, has always been the focus of the cyber-security game between major powers. In recent years, there have been multiple cyber-security incidents in the power industry internationally, among which APT attacks have become the most important means of attack. This article proposes an APT attack detection method based on traceability graph feature extraction to address this issue. The method adopts the traceability graph feature extraction method and designs a feature extraction algorithm to detect APT attacks. This article conducts experiments by intercepting network data from the S6000 network security situational awareness platform. The experimental results show that the method proposed in this article can achieve APT attack detection in real scenarios of power systems.