Information security and function security association analysis method

Abstract

The invention relates to an information security and function security association analysis method, and belongs to the field of information security. The method comprises the following steps that: anintelligent equipment information system security risk assessment model, an intelligent equipment function fault security analysis model and an information security and function fault matching model are included, and the intelligent equipment information system security risk assessment model is mainly used for collecting authoritative known industrial control information system security vulnerability information and establishing a CIA information base for the vulnerability information. The equipment function fault safety analysis model is used for calculating a confidentiality threat value, anintegrity threat value and an availability threat value of a logic node function according to description of the logic node function fault of the intelligent equipment involved in the IEC 61850 standard; and a logic node function fault CIA threat library is established. The information security and function fault matching model is used for establishing a corresponding relation calculation methodof information system security CIA and intelligent equipment security CIA threat values.

Description

technical field [0001] The invention belongs to the field of information security and relates to a correlation analysis method between information security and functional security. Background technique [0002] Smart substations are widely used in the power industry. The structure of smart substations has the characteristics of mixed layers of information systems and physical systems, which are manifested in: 1. The station control layer at the top is a typical information monitoring system; 2. The interval layer in the middle The main function is to play the role of scheduling, connection, management, and transmission between the upper information system and the lower process layer system, and it is the fusion point of the information system and the physical system; 3. The process layer system at the bottom layer is directly oriented to physical facilities system level. [0003] The continuous integration of smart substation systems with traditional computer systems and ne...

AI Technical Summary

Problems solved by technology

Security risk analysis for smart substation systems is a key link in establishing a safe, reliable, stable, and efficient substation industrial control system, but traditional risk analysis methods and technologies are mainly implemented for the information system itself, and the analysis of its asset value, vulnerability, and threat Taking information system objects as the starting point, there is a lack of holistic risk assessment methods for cyber-physical mixed-layer systems such as industrial control systems

Images