电力信息物理系统内部威胁研究综述  

Review on the Research of Insider Threat of Cyber Physical Power System

作　　者：陈清清 苏盛[1] 畅广辉 李翔硕 鲁华永 CHEN Qingqing;SU Sheng;CHANG Guanghui;LI Xiangshuo;LU Huayong(College of Electrical and Information Engineering,Changsha University of Science and Technology,Changsha 410114,China;State Grid Henan Electric Power Company,Zhengzhou 450052,China)

机构地区：[1]长沙理工大学电气与信息工程学院,长沙410114 [2]国网河南省电力公司,郑州450052

出　　处：《南方电网技术》2022年第6期1-13,共13页Southern Power System Technology

基　　金：国家自然科学基金(51777015);国家重点研发计划项目(2018YFB0904903);国家自然科学智能电网联合基金(U1966207)。

摘　　要：首先从内部威胁的定义和分类出发,梳理和分析了在一般信息系统基础上发展起来的内部威胁安全防护方法;然后结合电力信息物理系统(cyber-physical power system,CPPS)的具体业务分析指出了面临的内部威胁挑战,并从安全规程指导、防误技术研究、领域知识应用、权限分配研究和数据泄漏防护等方面总结了CPPS内部威胁防护研究现状;最后比对CPPS和一般信息系统的差异,提出可利用CPPS承载具体业务的特点,设计内部威胁的针对性防护措施,最后展望了区块链技术和零信任在相关领域的应用前景。Firstly,starting from the definition and classification of insider threats,this paper combs and analyzes the security protection methods of insider threats developed on the basis of general information systems,Then combining with the specific business analysis of the power information physical system(CPPS),it points out the insider threat challenges faced,and summarizes the research status of CPPs insider threat protection from the aspects of safety regulation guidance,error prevention technology research,domain knowledge application,authority allocation research and data leakage protection;Finally,comparing the differences between CPPs and general information systems,this paper puts forward the characteristics of using CPPs to carry specific business,designs targeted protection measures against insider threats,and finally looks forward to the application prospect of blockchain technology and zero trust in related fields.

关 键 词：电力信息物理系统 内部威胁防护 生产控制信息 市场营销信息 

分 类 号：TM08[电气工程—电工理论与新技术] X913.2[环境科学与工程—安全科学]