基于SSE-CMM的电力通信安全风险评估

阐述了对电力通信系统进行风险评估的意义;介绍了系统安全工程能力成熟模型（SSE-CMM）风险评估过程;描述了电力通信系统暴露的威胁、脆弱性及对系统安全的影响,并运用故障树方法对安全风险进行分析,制定了比较完善的风险评估表,进而建立起适用于电力通信系统风险评估的模型.在风险评估过程中,评估组根据被评估通信机构执行该模型的所有过程域和基本实践情况,给出其安全能力成熟度级别.此模型对电力企业的风险评估具有实际指导价值.

Research on security risk assessment for electric power communication system based on the SSE-CMM

The significance of carrying out the risk assessment on power communication system has been explained in this paper, and the structure of SSE-CMM system and the process of risk evaluation is also introduced. The danger, fragility and factors of influencing the safe running of an electric power communication system are found out. By using the fault tree method, the security risks of electric power communication system are analyzed, and a quite perfect risk evaluation table is made, and the risk assessing models suiting for electric power communication system are set up. During the risk evaluation process, according to the assessment of all courses and basic practical situation of electric power communication system models that are set up by assess communication organization, the assessing group gives safe ability maturity grades. The risk-assessing models have practical guiding significance to electric power enterprises risk assessment.