电力保护装置站控制层网络的防火墙策略及其实现方法

本文提供一种电力保护装置站控制层网络的防火墙策略及其实现。由于电力保护装置的特殊性,其防火墙策略有其独特的特点,不同的保护装置所使用的操作系统、协议栈可能不同,防火墙策略本身是一种报文处理逻辑的抽象,并不会受具体系统的影响,只是防火墙策略的实现需要依赖于保护装置自身的操作系统、协议栈。策略本身是抽象的方法论,与具体的系统没有关系,在不同的系统上有不同的实现方式,即策略统一、实现方式不同。在Linux操作系统上实现电力保护装置的防火墙来对防火墙策略进行说明,在Linux系统上利用netfilter子系统和nftables工具实现电力保护装置的防火墙策略,防火墙仅是电力系统保护装置网络安全架构的一小部分。

Firewall Strategy of Power Protection Device and Implementation Method

In the paper,a firewall strategy and its implementation for the network of the control layer of the power protection device are introduced.Due to the particularity of the power protection device,its firewall strategy has its unique characteristics.Different protection devices may use different operating systems and protocol stacks.The firewall strategy itself is an abstraction of packet processing logic and will not be affected by the specific system.The implementation of the firewall strategy depends on the operating system and protocol stack of the protection device itself.The strategy itself is an abstract methodology and has nothing to do with the specific system.There are different ways of implementation on different systems,that is,the strategy is unified and the way of implementation is different.We implement the firewall of the power protection device in the Linux operating system to explain the firewall strategy.On the Linux system,we use the netfilter subsystem and the nftables tool to implement the firewall strategy of the power protection device.The firewall is only one of the network security architectures of the power system protection device.