智能电网调度控制系统安全防护技术及发展

对中国电网调度控制系统信息安全防护体系的发展历程进行梳理,总结为3个阶段,即基于边界安全的纵深防护体系阶段、基于等级保护的业务安全防护体系阶段以及基于可信计算的主动防御体系阶段。结合当前日新月异的新型威胁及国家级网络空间对抗新形势,提出基于可信计算技术,实现计算环境可信、应用行为可信、网络通信可信,构建以安全免疫为特征、以安全可控为目标的新一代智能电网调度控制系统安全主动防御体系,并介绍了其核心防御技术。

Development and Process of Cybersecurity Protection Architecture for Smart Grid Dispatching and Control Systems

The development process of cybersecurity protection architecture for the smart grid dispatching and control system in China is analyzed and summarized in three stages, namely, in-depth safeguard based on perimeter security, business security based on classified protection and active safeguard based on trusted computation. Then, with the current rapidly changing threats and the new situation of national cyberspace confrontation taken into account, a new generation of grid dispatching control system security active safeguarding architecture based on trusted computing technology is proposed. The purpose is to achieve a trusted computing environment, trusted application behavior and trusted network communication. The architecture proposed is characterized by security and immunity, and has security and controllability as its objective. The core safeguarding technologies are described.