一种定量化的电力信息系统安全体系设计方法  

A Quantitative Security Architecture Design Method for Power Information System

作　　者：胡炎[1] 谢小荣[2] 辛耀中[3] 

机构地区：[1]南瑞继保电气有限公司,江苏省南京市211100 [2]清华大学电机工程与应用电子技术系,北京市海淀区100084 [3]国家电力调度通信中心,北京市西城区100031

出　　处：《电网技术》2006年第2期7-13,共7页Power System Technology

基　　金：国家863高技术基金项目(2002AA145040)~~

摘　　要：目前电力信息系统尚缺乏定量化的安全体系设计方法和辅助工具。文章提出了一种基于模式的定量化安全体系设计方法,分别采用攻击模式和保护模式对攻击行为和安全措施建模,并基于集合论严格定义了几种安全措施选择的量化指标。文章从安全策略、系统建模、攻击建模、安全措施建模、风险度量、风险分析、安全措施选择等方面详细论证了新方法相对于传统风险管理方法的优势,并进一步将安全体系设计问题抽象为0-1整数规划的数学模型,以降低安全体系设计的代价,实现安全体系设计的计算机辅助工具。At present there are not quantitative security architecture design methods and computer-aided design tools for power information system. The authors propose a pattern based quantitative security architecture design method, in which the aggressive behavior and safeguard are modeled by aggressive pattern and safeguard pattern respectively and the quantitative indices to select several safeguards are strictly defined with set theory. The advantages of the proposed method over the traditional risk management method are demonstrated in detail in security policy, system modeling, attack modeling, safeguard modeling, risk measurement, risk analysis and selection of safeguards. In order to decrease the cost of security architecture design and implement computer-aided design tools, the security architecture design process is further abstracted into a mathematical model of 0-1 -integer programming.

关 键 词：网络安全 电力信息系统 安全体系设计 风险管理方法 定量化方法 

分 类 号：TM769[电气工程—电力系统及自动化]