Dynamic Control Mechanism for Improving Endogenous Security of Electric Power Information System

This paper designs a dynamic control mechanism for the endogenous security of new power information system. This mechanism continuously evaluates intranet devices during entire access period and hierarchically splits device permission to minimize device permission granting. In evaluation for intranet device access, the mechanism introduces malicious access evaluation method such as IP entropy to extract effective context information in access process and improves the soil transport distance algorithm for calculating equipment trust values comprehensively to endow the power information system with the ability to dynamically adjust permission of intranet devices. The experimental results show that the mechanism can continuously monitor intranet device access, detect access changes timely, and verify the fine-grained segmentation and dynamic adjustment capabilities of the power information network for device access. The endogenous security of power information system can be effectively guaranteed.