Power control system attack detection and protection method and device based on data messages

The invention discloses a power control system attack detection and protection method and device based on data messages, and the method comprises the steps: carrying out the information detection of different types of data messages in a power control system environment, and collecting and obtaining the key information of the data messages; classifying the key information types of the data messagesto ensure that information baselines of the corresponding types of data messages are generated within a certain time period; and identifying various tampering and counterfeiting attack information based on data messages through baseline difference between abnormal data message operation and data message key information categories, and achieving detection and protection of data message attack means. According to the invention, the detection and protection of data message attack means can be realized, and the security of the power control system can be improved. 本发明公开了一种基于数据报文的电力控制系统攻击检测防护方法及装置，该方法包括：对电力控制系统环境下不同类型的数据报