电网信息物理系统网络安全风险分析与防护对策  

Network Security Risk Analysis and Protective Countermeasures for Power Grid Cyber Physical System

作　　者：丁伟 唐洁瑶 曹扬 戴涛 陈华军 许爱东 DING Wei;TANG Jieyao;CAO Yang;DAI Tao;CHEN Huajun;XU Aidong(Electric Power Research Institute,CSG,Guangzhou 510663,China;Kaili Power Supply Bureau,Guizhou Power Grid Co.,Ltd.,Kaili 556000,China)

机构地区：[1]南方电网科学研究院有限责任公司,广东广州510663 [2]贵州电网有限责任公司凯里供电局,贵州凯里556000

出　　处：《电力信息与通信技术》2018年第9期33-38,共6页Electric Power Information and Communication Technology

基　　金：南方电网公司科技项目"信息安全攻防与漏洞挖掘技术研究"

摘　　要：为有效应对电网信息物理系统(Power Grid Cyber Physical Systems,PGCPS)所面临的网络安全风险和保证PGCPS的安全稳定运行,文章结合我国PGCPS的网络安全防护现状总结了目前管理和技术2方面存在的主要问题,从结构安全、本体安全、监测应急、安全管理4个方面系统分析了目前存在的安全风险,从网络边界防护、设备接入和防病毒、源代码安全检测与漏洞修补、网络安全态势感知平台建设、威胁情报通报与应急队伍建设5个角度提出对应的安全防护对策,从而提高了PGCPS网络安全水平。In order to effectively deal with the network security risks faced by power grid cyber physical systems（PGCPS） and ensure its safe and stable operation, fi rstly, based on the actual situation of network security protection of China＇s PGCPS, the main problems existing in management and technology are summarized. Then the existing security risks are systematically analyzed from the aspects of structure security, system ontology, perception and emergency, and security management. Finally, this paper puts forward some security protection countermeasures to improve the level of PGCPS network security from five aspects, including network border protection, equipment access and anti-virus, source code security detection and vulnerability remediation, construction of network security situation awareness platform, threat intelligence reporting and emergency team building.

关 键 词：电网信息物理系统 安全风险 防护对策 源代码分析 态势感知 

分 类 号：TM734[电气工程—电力系统及自动化]