电力信息系统现有安全设计方法分析比较  

Analysis and Comparison of Existing Security Design Methods for Power Information System

作　　者：胡炎[1] 谢小荣[2] 辛耀中[3] 

机构地区：[1]南瑞继保电气有限公司,江苏省南京市211100 [2]清华大学电机工程与应用电子技术系,北京市海淀区100084 [3]国家电力调度通信中心,北京市西城区100031

出　　处：《电网技术》2006年第4期36-42,共7页Power System Technology

基　　金：国家863高技术基金项目(2002AA145040)~~

摘　　要：电力信息系统是典型的分布式互连系统,需要采用系统化的方法进行安全设计。文章分析了风险管理方法、遵循安全设计指南方法、形式化验证方法、“发现修改”方法、预防性安全设计方法等现有安全设计方法的特点和不足,总结了信息系统安全工程过程、安全需求分析方法、可生存系统分析设计等方面研究的可借鉴之处。文章采用的分析不同安全设计方法的角度可用于安全设计方法的分类和比较,有利于对安全设计过程的进一步深入研究。Power information system is a typical distributed and interconnected system, which needs a systematic security design method. The authors analyze the features and defects of existing security design methods such as risk management method, guideline adherence, formal verification, find and fix approach and preventive design approach, and summarize the research results, which are available for reference, such as information system security engineering, analysis and design of survivable systems and security requirements analysis methods. The ten points to assess security design methods proposed in this paper can be used to classify and compare various security design methods, which can promote the research of security design process.

关 键 词：计算机和网络安全 电力信息系统 安全体系设计 风险管理方法 安全需求分析 可生存系统 

分 类 号：TM769[电气工程—电力系统及自动化]