Web动态防御系统在电网的应用研究  

Study on Application of Web Dynamic Defense System in Power Grid

作　　者：冯铭能 王欣[1] 梁辰恺 Feng Mingneng;Wang Xin;Liang Chenkai(China Information Technology Designing&Consulting Institute Co.,Ltd.Guangdong Branch,Guangzhou 510627,China)

机构地区：[1]中讯邮电咨询设计院有限公司广东分公司,广东广州510627

出　　处：《邮电设计技术》2022年第3期42-47,共6页Designing Techniques of Posts and Telecommunications

摘　　要：目前电网Web应用主要通过传统WAF防火墙进行防护,传统WAF过于依赖特征库,存在误报和漏报、维护成本高等问题。基于Web动态防御系统采用先进的动态防御理念以及传统的静态特征过滤,构建“动态欺骗”+“静态防御”的防御体系,保护电网Web应用服务器免于自动化攻击,大幅降低电网企业对抗新兴安全威胁的难度,全面提升电网Web应用的安全性。At present,the Web application of the power grid is mainly protected by the traditional WAF firewall. The traditional WAF is too dependent on the feature library,which has the problems of false alarm,missing alarm and high maintenance. Based on the Web dynamic defense system,the advanced dynamic defense concept and traditional static feature filtering are adopted to build a "dynamic deception" + "static defense" defense system,which protects the power grid Web application server from automatic attacks,greatly reduces the difficulty of power grid enterprises against emerging security threats,and comprehensively improves the security of power grid Web applications.

关 键 词：WEB应用防火墙 动态防御 智能电网 

分 类 号：TN918[电子电信—通信与信息系统]