电力信息安全主动防御一体化平台研究

电力企业开展风险评估、安全防护工作已有多年1],取得了一定的经验。文章根据多年信息安全防护工作实践,分析了电力企业信息安全防护现状和面临的问题,研究并设计了一个电力信息安全主动防御一体化平台,以降低信息安全运行维护成本、提高信息安全防护能力。该平台主要由安全测评、安全加固等基础组件和安全态势分析与预测、安全策略规划与调整、解决方案设计与执行、风险评价与监控等高级应用组件组成。

Research of Active Defense Integration Platform for Power Information Security

Since the safety risk assessment and security protection works have evolved over a period of many years, power enterprises have obtained some experiences. According to previous working experience, this paper analyzes the current situation of the information security of power enterprises and the problems that they face. An active defense integration platform for power information security is presented to reduce the cost of operation and maintenance and improve the ability of security protection. The proposed platform has two kinds of components： basic component and advanced application component. Basic component consists of several sub components such as security assessment and security reinforcement. But advanced application component also includes several sub components： security situation analysis and predication, security policy planning and adjustment, solution design and implementation, risk evaluation and monitoring.