基于SSE-CMM的电力信息安全工程评估  

INFORMATION SECURITY ASSESSMENT OF POWER SYSTEMS BASED ON SSE-CMM

作　　者：李志民[1] 丛琳[2] 郑颖[1] 潘明惠[3] 偏瑞琪[3] 

机构地区：[1]哈尔滨工业大学,黑龙江省哈尔滨市150001 [2]中国电力科学研究院,北京市100085 [3]辽宁省电力有限公司,辽宁省沈阳市110006

出　　处：《电力系统自动化》2003年第23期37-40,共4页Automation of Electric Power Systems

基　　金：国家"十五"科技攻关计划资助项目(2002BA103A-2)

摘　　要：研究了利用系统安全工程能力成熟度模型(SSE-CMM)进行电力信息系统安全工程过程能力评估的方法和步骤,提出了结合BS 7799(ISO/IEC 17799)指导安全工程过程评估内容的新思路,讨论了一种通过问卷答案来生成量化评估结果的评分体系。在该评分体系中,通过定义“完成指数”这一概念使得评估流程易于实现,增强了SSE-CMM应用于电力信息安全评估的可操作性。This paper studies the method and process implemented in security engineering process capability assessment of the power information system with SSE-CMM. It also proposes a new idea of guiding security assessment with BS 7799 (ISO/IEC 17799). And a scoring system, which generates quantitative assessment results via the answers to the questionnaire, is discussed. In this scoring system, the realization of the assessment procedure is facilitated by defining the concept of 'performance index', thus strengthening the maneuverability of SSE-CMM applied in power information security assessment.

关 键 词：办公自动化 电力系统信息安全 系统安全工程能力成熟度模型 能力评估 SSE—CMM 

分 类 号：TM769[电气工程—电力系统及自动化]