美国电力行业信息安全工作现状与特点分析.pdfVIP

第 35 卷 第 12 期 电 网 技 术 Vol. 35 No. 12 2011 年 12 月 Power System Technology Dec. 2011 文章编号：1000-3673 （2011 ）12-0221-08 中图分类号：TM 732 ；TP 309 文献标志码：A 学科代码：470·4054 美国电力行业信息安全工作现状与特点分析 梁潇，高昆仑，徐志博，郑晓崑 （中国电力科学研究院，北京市海淀区 100192 ） A Survey on Cybersecurity of U.S. Electric Power Industry LIANG Xiao, GAO Kunlun, XU Zhibo, ZHENG Xiaokun (China Electric Power Research Institute, Haidian District, Beijing 100192, China) ABSTRACT: United States is one of the earliest counties that 用，病毒、网络攻击给电力生产带来了信息安全风 began the research on cyber security of electric power industry 险，尤其美国部分落后地区电网基础设施陈旧，测 and is also the country that releases most standards and 控与保护系统缺少安全防护机制，一旦遭受信息安 guidelines for cybersecurity of electric power industry. In this 全攻击，不仅造成本地区的电力故障，还可能影响 paper the research and management framework related to cyber 北美地区的电力供应。2003 年美国东北部和加拿大 security of U.S. electric power industry is presented; the working mechanism of related government departments and 部分地区发生大面积停电就是典型的连锁反应事 standardization organizations of the United States, such as 故。随着美国智能电网建设的推进，更加开放与友 Department of Homeland Security (DHS), Department of 好的电网让美国的电力供应面临更多威胁。2009 年 Energy (DOE), North American Electric Reliability 的美国黑帽大会上就有人演示验证了蠕虫可以在 Corporation (NERC) and National Institute of Standards and 24 h 内感染智能电表，使 1.5 万户家庭电力供应陷入 Technology (NIST), is described; main contents of important publications such as NERC CIP, NISTSP 800-53, ISA99 and 瘫痪[1] 。针对基础设施信息安全的严峻形势，美国联 others as well as their spread and application are analyze