Research on Abnormal Attack Monitoring Technology Based on Virtual Sandbox of Electric Power Monitoring System

With the rapid development of information technology, the power monitoring system increasingly relies on networked and intelligent means, but its security problems are also increasingly prominent. For the network security threats faced by the power monitoring system, this paper proposes an abnormal attack monitoring method based on virtual sandbox technology. First of all, this paper introduces in detail the principle of virtual sandbox and its application advantages in power monitoring system, and explains the key role of virtual sandbox in isolating the suspicious program, simulating the real system environment, and monitoring the program behavior in real time. Secondly, this paper constructs an abnormal attack monitoring system based on virtual sandbox, including modules of data acquisition, virtual sandbox, behavior analysis, early warning and security management, and discusses the design and implementation of each module in detail. Through experimental verification, the technology can effectively identify a variety of network attacks such as DDoS attacks, malware injection, advanced persistent threats, etc., and the detection accuracy reaches 98%, 95% and 92%, respectively, showing high accuracy and real-time performance. This study provides a new idea and method for the security protection of power monitoring system, which is of great significance for guaranteeing the safe and stable operation of power grid.