电网融合泛在网信息平台设计及安全威胁分析  

Design and Security Threats Analysis for Information Platform of Fusion Ubiquitous Network in Power Grid

作　　者：戚湧[1] 郭诗炜 李千目[1] QI Yong GUO Shi-wei LI Qian-mu(School of Computer Science and Engineering, Nanjing University of Science and Technology, Nanjing 210094, China)

机构地区：[1]南京理工大学计算机科学与工程学院,南京210094

出　　处：《计算机科学》2017年第3期150-152,174,共4页Computer Science

基　　金：国家自然科学基金项目(61272419);江苏省未来网络前瞻性研究项目(BY2013095-3-02)资助

摘　　要：随着电力系统信息化的快速发展,电力系统已建立成EMS能量管理系统、SCADA电网调度自动化系统等管理系统。为了解决电力系统众多异构子系统造成的"信息孤岛"问题,提出基于SOA的电网融合泛在网信息平台架构,并针对其体系结构分别从基础设施层、数据层、服务层对安全威胁进行研究。基础设施层的安全威胁研究主要针对终端设备、网络和服务器等物理设施的安全问题,数据层的安全威胁研究主要针对隐私信息泄漏或破坏以及非法访问等安全问题,服务层的安全威胁研究主要针对认证授权措施不当等问题。最后针对各层所面临的安全威胁提出相应的安全措施和建议。With the rapid development of electrical informatization, the electric power system has established EMS （Energy Management System）, SCADA（Supervisory Control And Data Acquisition） power grid automatic dispatching system, etc. In order to solve the problem of ＂information islands＂ caused by various heterogeneous subsystems in the electric power system, an information platform of the SOA-based fusion ubiquitous network in power grid was pro- posed. Threats of the infrastructure layer, data layer and service layer were researched on the architecture of the sys- tem. The infrastructure layer threats include security threats for terminals, networks and servers. Data layer threats in- clude private information leakage or damage and illegal access. Service layer threats include improper measures of certifi cate authority. Finally, security measures and recommendations were given for security threats faced by each level.

关 键 词：面向服务 融合泛在网 安全威胁 措施 

分 类 号：TP393.0[自动化与计算机技术—计算机应用技术]