电力系统自主可信网络安全主动防御体系建设  

Construction of Independent and Trusted Network Security Active Defense System for Power System

作　　者：汤成俊 李洪池 纪陵 檀庭方 高飞 TANG Chengjun;LI Hongchi;JI Ling;TAN Tingfang;GAO Fei(Nanjing SAC Power Grid Automation Co.,Ltd.,Nanjing 211100,China)

机构地区：[1]南京国电南自电网自动化有限公司,江苏南京211100

出　　处：《电工技术》2023年第12期149-151,154,共4页Electric Engineering

摘　　要：电力系统目前的网络安全防护主要以被动防御为主,缺少对系统本质安全以及主动防御能力的提升,导致整个系统无法有效应对日益严重的网络安全攻击。以自主可控软硬件生态为基石,构建了从底层硬件、操作系统到上层应用的可信免疫主动防御体系,实现了电力系统从边界防护的被动防御模式到内生安全的主动防御模式的转变,解决了核心设备软硬件非自主可控、核心算法非安全可信的问题,提升了系统的整体网络安全防护水平。At present,the network security protection of the power system is mainly passive defense,and the lack of improvement of the intrinsic safety of the system and active defense capabilities makes the entire system unable to effectively respond to increasingly serious network security attacks.Based on the independent and controllable software and hardware ecology,a trusted immune active defense system from the underlying hardware,operating system to the upper application is constructed,which realizes the transformation of the power system from the passive defense mode of boundary protection to the active defense mode of endogenous security,solves the problems of non-autonomous and controllable core equipment software and hardware,and non-security and credibility of core algorithms,and improves the overall network security protection level of the system.

关 键 词：主动防御 可信免疫 自主可控 

分 类 号：TM76[电气工程—电力系统及自动化]