电力监控系统安全等级保护在线测评技术研究与应用  

Research and Application of Online Evaluation Technology for Protection Level of Power Monitoring System

作　　者：朱红勤[1] 陈艳[2] Zhu Hongqin;Chen Yan(State Grid Nanjing Power Supply Company,Nanjing Jiangsu 210019,China;State Grid Yangzhou Power Supply Company,Yangzhou Jiangsu 225000,China)

机构地区：[1]南京供电公司,江苏南京210019 [2]扬州供电公司,江苏扬州225000

出　　处：《信息与电脑》2017年第24期29-31,共3页Information & Computer

摘　　要：以等级保护标准规范为基础,遵循等级保护、风险评估等各项标准和规范,结合电力监控系统的特点,建立适合于电力监控系统的安全基线库及漏洞库。改变现有的全人工的等级保护安全测评方式,利用安全基线等技术手段,建立安全基线模型,设计等级保护合规分析模块,实现等保测评的自动化、常态化,并实现信息安全的闭环管理。On the basis of grade protection standard specification,following the standards and specifications of grade protection,risk assessment and so on,combined with the characteristics of power monitoring system,a safety baseline library and vulnerability library suitable for power monitoring system is established.We should change the existing all manual rating protection safety assessment method,establish the safety baseline model by using the safety baseline and other technical means,design the grade protection compliance analysis module,realize the automation and normalization of the equal protection evaluation,and achieve the closed loop management of information security.

关 键 词：等级保护 安全基线 电力监控系统 

分 类 号：TP311.52[自动化与计算机技术—计算机软件与理论]