Power system APT attack modeling method based on ATT and CK

The invention discloses a power system APT attack modeling method based on ATT and CK, and the method comprises the following steps: analyzing an attack target, and deciding to use an attack means; preparing for attack according to the determined attack means and the characteristics of the victim, developing a corresponding program, and implanting a malicious program into the system; by modeling and analyzing the APT, security technicians can be helped to understand an attack process, identify fragile nodes in a network system and perform information extraction, threat intelligence analysis, threat hunting, attack tracing and the like, so that the security technicians can dynamically and integrally know security risks on the basis of the environment; the discovery, identification, understanding, analysis, response and disposal capabilities of security threats are improved from a global perspective, namely, the network space security situation awareness capability is improved. 本发明公开了一种基于ATT和CK的电力系统APT攻击建模方法，所述