An Intelligent Threat-Detection Method for Power Monitoring System Based on Attack Chain Knowledge

The network attacks targeted at the Power Monitoring System (PMS) become much more complex and covert. However, traditional security protection methods cannot well detect such unknown attacks or multi-step attacks, which leads to a constant threat. How to use the massive log and warning data generated from various types of traditional security equipment to effectively detect and trace the advanced network threats becomes more and more important. This paper proposes an extended attack-chain based knowledge graph model to detect the threat lurked in the network of the PMS.