【作者】 彭胡；

【导师】 卢继平； 张继红；

【作者基本信息】 重庆大学 ， 电气工程， 2005， 硕士

【摘要】 论文首先综述了面向21世纪中国国家电力数据网(SPDnet或CEDnet)和电网调度自动化技术。随着计算机技术，信息处理技术和通讯技术的发展，电力工业生产和管理已进入了信息时代。电力信息安全，特别是电力调度网的安全对电网的安全、稳定、经济运行有重要作用，国家科技部已将电力系统信息安全列入国家信息安全的示范工程。因此，本论文的选题具有重要的理论意义和实用价值。 论述了信息安全基础：安全标准，安全表述模型，网络安全体系结构：几种典型的安全技术。在此基础上，采用了新颖的PPDR(安全策略、保护、检测、响应)安全表述模型，PPDR模型的核心是安全策略，其特点是动态性和基于时间的特性，按照PPDR模型可使风险降低到最小。 根据重庆电力数据网的现状，对重庆电力数据网的物理层、网络层、管理层，特别是电力调度系统的不安全因素(安全威胁)进行了分析。进而分析了重庆电力数据网的安全策略和管理体系需求，业务系统安全需求，安全服务及安全咨询需求，层次安全需求和内部整体安全需求。设计了重庆电力数据网的安全体系框架。 对重庆电力数据网的安全管理进行了研究，策划了安全管理策略、目标、任务，原则、程序和方法，对安全管理体系：信息安全制度，安全产品，安全技术的解决方案提出了建议，其中部份建议已经实施取得良好的效果。更多还原

【Abstract】 In this thesis, 21th century oriented China state power data network (SPD net or CED net) and power system dispatching automation technique are summarized. With the development of the computer technology, Information processing technology and communication technology, the production and management of electric power industry have entered into information era. The information security of electric power, in particular security of electric power dispatching automation network has important action for the security, steady and economy operation of electric power system. The information security of electric power system has arranged into demonstrate engineering by the national science and technology department. So, the thesis theme selected is of great signification theory sense and practical value.The information security base are discussed, including security criteria, security expression model, system frame of the network security, some typical security technology.On the based, a novel PPDR security expression model (policy, protection, detection, response) is adopted, which nucleus is security policy, which characteristic is dynamic and time-based. According to PPDR model, the risk is reduced to least.According to the current case of Chongqing power data network(CQPDnet), the security threats for every layers of the physics, network, management and electric power dispatching system are analyzed, and then the CQPDnet security requirements are analyzed, including the policy and Management system, professional system, security service and advisory, layer security and internal entirety security . The CQPDnet security system frame is designed.The CQPDnet security management is studied. The policy, object, task, principle, program and method of the security management are plotted.The resolve schemes of the information security regulation, security product and technology are presented. The partial schemes are implemented. And effect is very satisfactory.更多还原