网络安全等级保护在大型水电站的实践

Practice of Classified Protection of Cybersecurity in Large － scale Hydropower Station

摘要:

按照《信息安全技术网络安全等级保护基本要求》要求,对某大型水电站电力监控系统安全防护现状做出详细分析后,提出电力监控系统安全防护整改方案。整改方案严格遵守《信息安全技术网络安全等级保护基本要求》《电力监控系统安全防护规定》等重要文件要求,涵盖了水电站主要的电力监控系统。在采取了有针对性的技术措施加强安全防护的同时,完善了水电站电力监控系统安全防护管理的建设。最后,对部分遗留问题进行了初步探讨,以便今后进一步完善电力监控系统安全防护体系建设。

Abstract:

After a detailed analysis for the current situation of security protection in a hydropower station，the security architecture of power monitoring system in hydropower station is designed and proposed，which is strictly based on the " Information security technology － － Baseline for classified protection of cybersecurity" and " Ｒegulations on security protection of power monitoring system" and covers the technology and management together． The design also involves most subsystems of the station， and is feasible to be put into practice． Finally，several remaining issues which need to be improved are discussed in order to enhance the security architecture．