智能电网调度控制系统安全防护技术及发展  

Development and Process of Cybersecurity Protection Architecture for Smart Grid Dispatching and Control Systems

作　　者：高昆仑[1] 辛耀中[2] 李钊[1] 孙炜[2] 南贵林[2] 陶洪铸[2] 赵保华[1] 

机构地区：[1]中国电力科学研究院,北京市100192 [2]国家电网公司国家电力调度控制中心,北京市100031

出　　处：《电力系统自动化》2015年第1期48-52,共5页Automation of Electric Power Systems

基　　金：国家高技术研究发展计划(863计划)资助项目(2011AA05A118);国家电网公司科技项目"基于可信计算的电力生产调度系统安全增强技术研究及应用"~~

摘　　要：对中国电网调度控制系统信息安全防护体系的发展历程进行梳理,总结为3个阶段,即基于边界安全的纵深防护体系阶段、基于等级保护的业务安全防护体系阶段以及基于可信计算的主动防御体系阶段。结合当前日新月异的新型威胁及国家级网络空间对抗新形势,提出基于可信计算技术,实现计算环境可信、应用行为可信、网络通信可信,构建以安全免疫为特征、以安全可控为目标的新一代智能电网调度控制系统安全主动防御体系,并介绍了其核心防御技术。The development process of cybersecurity protection architecture for the smart grid dispatching and control system in China is analyzed and summarized in three stages,namely,in-depth safeguard based on perimeter security,business security based on classified protection and active safeguard based on trusted computation.Then,with the current rapidly changing threats and the new situation of national cyberspace confrontation taken into account,a new generation of grid dispatching control system security active safeguarding architecture based on trusted computing technology is proposed.The purpose is to achieve a trusted computing environment,trusted application behavior and trusted network communication.The architecture proposed is characterized by security and immunity,and has security and controllability as its obj ective.The core safeguarding technologies are described.

关 键 词：智能电网调度控制系统 网络安全 纵深防护 等级保护 可信计算 主动防御 

分 类 号：TM76[电气工程—电力系统及自动化] TM73TM921.5