An assessment method of vulnerabilities in electric CPS cyber space

Abstract

The Vulnerability Risk Assessment in general information network cannot exactly assess the vulnerabilities in Electric Power Information Network(EPIN). Aiming at the limitations of current vulnerability risk assessment technologies for general information network, a vulnerability risk assessment method for Electric Power Information Network is proposed on the basis of CVSS. A hierarchy assessment model with Grey Clustering Algorithm (GCA) is proposed to strengthen the correlation analysis of vulnerability risk assessment factors and reduce the subjective effect. GCA is adopted to calculate the grey class of indicators, which figures out the important part of vulnerability in the cyber space of electric CPS. Results of experiments by CVSS, CNNVD and the proposed method based on 4 typical vulnerabilities in EPIN show that the proposed method is more effective in vulnerability risk assessment for electric CPS cyber space under the condition of poor information, and reasonably reflects the interdependency between risk elements.