Electric power information system cloud safety guarantee system and implementation method thereof

Abstract

The invention discloses an electric power information system cloud safety guarantee system and an implementation method thereof. The electric power information system cloud safety guarantee system comprises a risk management module, a network and infrastructure safety module, a platform safety module and an application safety module, and a shared safety module, wherein the risk management module, the network and infrastructure safety module, the platform safety module and the application safety module are arranged successively from top to bottom; and the shared safety module is arranged among the network and infrastructure safety module, the platform safety module and the application safety module. The electric power information system cloud safety guarantee system and the implementation method thereof utilize targeted effective actions for different hierarchical structures and needs for a cloud computing platform in an electric power information system, and are integratively in linkage with multi-layers, and interact and coordinate with each other, and are integrated with monitoring and detection of abnormal behavior events, virus searching and killing, interdicting defense and attack and multi-protection, and can realize real-time intelligent monitoring of virus and attack, integration of detection analysis and safety defense, and can quickly perform real-time intelligent protection and can clean the virus and useless files, and can reduce the consumption, and can perform stereo, deep and dynamically protective comprehensive monitoring and defense for the cloud computing platform in the electric power information system.

Description

technical field [0001] The invention relates to the technical field of computer network information security, in particular to a cloud security guarantee system of an electric power information system and an implementation method thereof. Background technique [0002] The power information system mainly includes power dispatching system, power control system and related information management system, etc. It is necessary to carry out risk analysis on its network cloud security requirements. It mainly includes seven key cloud security risk domains and security threats proposed by the Cloud Security Alliance CSA (Canadian Standards Association): [0003] 1. Abuse and Nefarious Use of Cloud Computing (abuse and nefarious use of cloud computing and denial of service attacks); [0004] 2. Insecure Interfaces and APIs (insecure interfaces and application programming interface APIs); [0005] 3. Malicious Insiders (malicious internal employees); [0006] 4. SharedTechnologyIssue...

AI Technical Summary

Problems solved by technology

At present, a lot of work has been done on the construction of network security for the power information system, mainly through the deployment and implementation of key security products such as firewalls, intrusion detection systems, and VPN equipment, and a basic network security protection system has been initially established. However, the network security protection system still has the following security problems: First, the firewall and intrusion detection and defense technology usually adopt a passive defense method, which has a high rate of false negatives and false positives; second, the information exchange between systems lacks encryption and authentication. mechanism, intrusion detection and other early warning mechanisms, vulnerability scanning and auditing methods, there are security risks in access; third, the virus database is usually updated manually, which lacks real-time performance, making it difficult to manage the stations and industrial control rooms of each factory; fourth, security protection The goals, strategies, and systems are not perfect, and almost all security measures taken are based on passive protection; fifth, the "information islands" formed by traditional isolated network security technologies lack effective overall interaction and collaborative defense capabilities, and data interaction lacks regularity. It is difficult to carry out unified security protection, dynamic management and emergency treatment for the system and data

Images