A Defense‑in‑Depth and Zero‑Trust Based Boundary Security System for Thermal Power Plant Information Areas
DOI:
https://doi.org/10.66069/ojspub.26820709Keywords:
Thermal power plant information area, Boundary security, Defense‑in‑depth, Zero‑trust, ATT&CK, Intrusion detectionAbstract
Addressing the escalating boundary security risks in thermal power plant information areas (Zone III) due to remote O&M and Internet connectivity, traditional static defenses are inadequate against stealthy multi‑stage attacks. This paper proposes a defense‑in‑depth system integrating identity authentication, channel encryption, behavior perception, and policy linkage, grounded in defense‑in‑depth theory, zero‑trust architecture, and the MITRE ATT&CK model. Simulation experiments involving remote command execution and lateral penetration show a 92.7% detection rate and 89.3% lateral interception rate, while maintaining high availability for critical business systems. The study further provides an evaluable deployment strategy and indicator system, offering a replicable and implementable pathway for enhancing the security framework of thermal power plant information areas.
References
Zhang Tao, Zhao Dongyan, Xue Feng, Zhang Bo, Zhang Rui. Research Framework of Information Security Protection Technology for Intelligent Terminals in Power Systems [J]. Automation of Electric Power Systems, 2019, 43(19): 1-8.
Chen Tiezheng. Current Situation and Suggestions of Network Security Protection for Power Monitoring Systems [J]. Telecom Power Technology, 2020, 37(4): 109-110.
NIST. Guide to Industrial Control Systems (ICS) Security: NIST Special Publication 800-82 Revision 2 [EB/OL]. National Institute of Standards and Technology, 2015.
IEC. Industrial communication networks - Network and system security - Part 1-1: General requirements (IEC 62443-1-1) [S]. Geneva: International Electrotechnical Commission, 2018.
Ten C. W., Liu C.C., Manimaran G. Cybersecurity for Critical Infrastructures: Attack and Defense Modeling [J]. IEEE Transactions on Systems, Man, and Cybernetics, Part A: Systems and Humans, 2010, 40(4): 853-865.
Knapp E. D., Langill J.T. Industrial Network Security: Securing Critical Infrastructure Networks for Smart Grid, SCADA, and Other Industrial Control Systems [M]. Waltham: Elsevier, 2011.
Gao Xiang, Liang Zongyu. A Brief Discussion on the Research of Network Security Protection Technology for Power Monitoring Systems [J]. Network Security Technology and Application, 2021(9): 123-124.
Liu Rui, Hong Sheng, Li Wei, Wang Xin. A Review of Intrusion Detection Technologies for Industrial Control Systems [J]. Information Technology and Network Security, 2021, 40(3): 1-7.
Sun Yanbin, Wang Hongyi, Tian Zhihong, Fang Binxing. Research on the Development of Security Protection Technology for Industrial Control Systems [J]. Engineering Sciences, 2023, 25(6): 126-13.
NIST. Zero Trust Architecture: NIST Special Publication 800-207 [EB/OL]. National Institute of Standards and Technology, 2020.