WAMS信息安全风险评估  

Information Security and Risk Assessment of WAMS System

作　　者：张鑫[1] 刘文霞[1] 黄宇峰[1] 范勇峰[1] 

机构地区：[1]华北电力大学电气与电子工程学院,北京102206

出　　处：《现代电力》2010年第1期61-66,共6页Modern Electric Power

基　　金：国家自然科学基金项目(50877026)

摘　　要：建立了WAMS通信系统的信息安全评估框架。通过功能域和ISO/IEC 27002标准将WAMS分为若干子功能域并确定待评估的信息资产,再由功能树模型将功能与资产关联,确立系统信息安全评价的层次结构,并分配各子功能及下属资产的关键度。最后利用证据推理算法融合各子资产的判定数据,减少不同专家评判产生的信息模糊性。算例表明,建立的框架和评估方法对提高WAMS系统的信息安全有一定意义,该框架也可应用在电力安全评估的其他方面。An information security assessment framework is established for the WAMS communication system. Based on the function tree model and the ISO/IEC 27002 standard, the WAMS system is divided into several sub-domains, and the information assets are identified. Combining the func- tion with the assets, the hierarchical structure of the evolu- tion is established for the information security of the WAMS system, and the key values for the sub-functions and assets are distributed. The evidence theory is used to integrate the de- cision data of experts, which reduces the fuzzy of information generated from the assessments of different experts. Example analysis shows that the established framework and the assessment method are useful to improve the information security of the WAMS system. The framework can also be effectively used in other aspects of the security assessment of power systems.

关 键 词：WAMS 信息安全 功能树 ISO/IEC27002 证据理论 

分 类 号：TM73[电气工程—电力系统及自动化]