风电场SCADA系统边界安全模型设计  

Design of Border Security Model of SCADA System for Wind Power Farm

作　　者：颜娜[1] 段斌[1] 邓清勇[1] 龚立秋[1] 

机构地区：[1]湘潭大学信息工程学院,湖南省湘潭市411105

出　　处：《电网技术》2009年第7期24-29,共6页Power System Technology

基　　金：国家863高技术基金项目(2007AA012476);国家自然科学基金资助项目(50677058)~~

摘　　要：针对风电SCADA系统边界安全体系架构问题,将防火墙和入侵检测系统(intrusion detection system,IDS)功能集于一体,融入入侵容忍技术、诱骗系统和数字取证等网络安全技术,设计出风电SCADA系统边界安全模型。该模型提供了多层屏障,可实现风电SCADA网络和外部网络间的深度防御,增加网络的安全性,对解决电力企业进行远程控制和通信的网络安全问题具有参考和应用价值。In order to solve the problem of border security system frame of SCADA for wind power farm, the firewall and intrusion detection system （IDS） are integrated in the design of border security system frame of SCADA for wind power farm, to which the network security techniques such as intrusion tolerant technology, deception system and digital forensics are merged. The proposed model offers a multilayer barrier, thus the defense in depth between the SCADA for wind power farm and external network can be implemented and the security of SCADA network is enhanced. The results of this research are applicable and available for reference in the network security of remote control and communication of power enterprises.

关 键 词：SCADA系统 非军事区 分布式防火墙 入侵检 测系统 安全策略 

分 类 号：TM732[电气工程—电力系统及自动化]