集团型电力企业信息安全技术防护体系架构研究和设计.pdfVIP

第 49 卷 第 12 期 通信技术 Vol.49 No.12 2016 年 12 月 Communications Technology Dec.2016 doi:10.3969/j.issn.1002-0802.2016.12.026 集团型电力企业信息安全技术防护体系架构研究和设计 王  静 （国家电力投资集团公司，北京 100033） 摘  要：作为国家关键信息基础设施，电力行业一直面临着较大风险隐患。为确保电力生产管理 和信息网络的安全稳定，在前期信息安全规划基础上，通过调研和分析，从基础设施、技术支撑 平台、应用三个层面提出了集团型电力企业信息安全技术防护体系框架。同时，提出一系列技术 措施研究专题，包括工业控制系统安全、统一安全监测审计系统、数据备份与容灾等，以指导集 团信息安全项目持续开展，提升和优化信息安全能力。 关键词：电力行业；信息安全；技术防护；工业控制系统安全；数据备份与容灾 中图分类号：TP393.0 文献标志码：A 文章编号：1002-0802(2016)-12-1714-06 Design on Infosec Technology Protection System of Electric Group Enterprise WANG Jing (China Power Investment Corporation, Beijing 100033, China) Abstract: Electric power industry, as the key infrastructure of the country, is always faced with great hidden risks, and the serious consequence resulted from Ukraine power network security event is absolutely terrific. Based on the information security planning made earlier, this paper discusses the information security system framework of electric group enterprise from the three aspects of infrastructure, technical support platform, and application, proposes a series of technical-measure topics, including industrial-control-system security, unified monitoring and auditing system, data backup and disaster recovery, thus to guide the continuous development of the group enterprise,s information security projects, enhance and optimize its information security capabilities. Key words: electric group enterprise; information security; technology protection; industrial-control-system security; data backup and disaster recovery 0 引  言