量化风险的等级保护测评方法及平台设计  

Risk quantified evaluation method and platform design for graded protection

作　　者：王甜[1,2] 徐晖[1,2] 魏理豪[1,2] 朱奕[1,2] 

机构地区：[1]广东电网公司信息中心,广东广州510600 [2]广东电网公司信息化评测实验室,广东广州510600

出　　处：《计算机工程与设计》2012年第5期1761-1766,共6页Computer Engineering and Design

摘　　要：研究了等级保护测评的相关技术,针对当前等级保护测评中存在的典型问题,如风险分析不够准确、测评效率低、测评结果客观性不足等,提出一种量化风险的等级保护测评模型,将系统业务重要性因素引入风险分析环节,能较为可观的量化风险。基于该模型,设计并实现了分布式的等级测评平台(RQEP),能大大提升等级测评的效率,使测评过程更加规范化、标准化。The evaluation technology of graded protection is studied and all the issues faced during the grade evaluation are analyzed,e.g.lack of accuracy on risk analysis,over dependence on the capability of evaluating engineer,etc.Then,a new evaluation model of graded protection,is pat forward,which imports the importance factor of information system,and it quantifies the risk objectively more.Based on this model a risk quantified evaluation platform for graded protection of information system（RQEP for short） is designed and implemented.The efficiency on grade evaluation is improved,and the process of evaluation is standardized.

关 键 词：电力信息安全 等级保护 测评方法 安全风险 测评平台 

分 类 号：TP309[自动化与计算机技术—计算机系统结构]