Grid-STIX：一种符合STIX 2.1标准的电网网络物理安全本体
Grid-STIX: A STIX 2.1-Compliant Cyber-Physical Security Ontology for Power Grid
AI总结：
针对现有威胁情报标准缺乏电网特定资产、操作技术关系及网络物理 interdependencies覆盖的问题，提出符合STIX 2.1的Grid-STIX本体，通过模块化架构捕获电网组件与关系，支持威胁建模和零信任实施，助力电力行业协作安全研究。
摘要：
现代电网是复杂的网络物理系统，需要超越传统IT安全模型的专用网络安全框架。现有威胁情报标准如STIX 2.1和MITRE ATT&CK缺乏对电网特定资产、操作技术关系以及电力系统安全关键的网络物理 interdependencies的覆盖。我们提出Grid-STIX，一种STIX 2.1的领域特定扩展，用于电网网络安全应用。Grid-STIX采用模块化架构，包含物理资产、操作技术组件、网络物理关系和安全策略，可捕获现代电力系统，包括分布式能源资源、高级计量基础设施和核能设施。该框架通过系统表示攻击模式、供应链风险和跨域影响分析提供威胁建模能力，同时保持STIX 2.1合规性。Grid-STIX包含核保障和防扩散验证模块，支持传统和核能领域的网络安全建模。本体通过策略决策点和操作上下文集成支持零信任实施。我们的实现包括验证管道、Python代码生成和可视化。用例展示了跨公用事业威胁情报共享、供应链风险评估和核设施网络安全等应用。Grid-STIX作为开源框架提供，以推进电力行业的协作网络安全研究。
英文摘要：
Modern electrical power grids represent complex cyber-physical systems requiring specialized cybersecurity frameworks beyond traditional IT security models. Existing threat intelligence standards such as STIX 2.1 and MITRE ATT\&CK lack coverage for grid-specific assets, operational technology relationships, and cyber-physical interdependencies essential for power system security. We present Grid-STIX, a domain-specific extension of STIX 2.1 for electrical grid cybersecurity applications. Grid-STIX employs a modular architecture encompassing physical assets, operational technology components, cyber-physical relationships, and security policies that capture modern power systems including distributed energy resources, advanced metering infrastructure, and nuclear energy facilities. The framework provides threat modeling capabilities through systematic representation of attack patterns, supply chain risks, and cross-domain impact analysis while maintaining STIX 2.1 compliance. Grid-STIX includes modules for nuclear safeguards and non-proliferation verification, enabling cybersecurity modeling across conventional and nuclear energy sectors. The ontology supports Zero Trust enforcement through policy decision points and operational context integration. Our implementation includes validation pipelines, Python code generation, and visualizations. Use cases demonstrate applications including cross-utility threat intelligence sharing, supply chain risk assessment, and nuclear facility cybersecurity. Grid-STIX is available as an open-source framework to advance collaborative cybersecurity research across the electrical power sector.
机构、总结、中文摘要均由AI分析而来，可能存在错误，请以论文正文为准。
