电网融合泛在网信息平台设计及安全威胁分析

摘要

随着电力系统信息化的快速发展,电力系统已建立成EMS能量管理系统、SCADA电网调度自动化系统等管理系统.为了解决电力系统众多异构子系统造成的“信息孤岛”问题,提出基于SOA的电网融合泛在网信息平台架构,并针对其体系结构分别从基础设施层、数据层、服务层对安全威胁进行研究.基础设施层的安全威胁研究主要针对终端设备、网络和服务器等物理设施的安全问题,数据层的安全威胁研究主要针对隐私信息泄漏或破坏以及非法访问等安全问题,服务层的安全威胁研究主要针对认证授权措施不当等问题.最后针对各层所面临的安全威胁提出相应的安全措施和建议.%With the rapid development of electrical informatization,the electric power system has established EMS (Energy Management System),SCADA(Supervisory Control And Data Acquisition) power grid automatic dispatching system,etc.In order to solve the problem of "information islands" caused by various heterogeneous subsystems in the electric power system,an information platform of the SOA-based fusion ubiquitous network in power grid was proposed.Threats of the infrastructure layer,data layer and service layer were researched on the architecture of the system.The infrastructure layer threats include security threats for terminals,networks and servers.Data layer threats include private information leakage or damage and illegal access.Service layer threats include improper measures of certificate authority.Finally,security measures and recommendations were given for security threats faced by each level.