电力生产控制区业务系统漏洞修补研究

Study on Vulnerability Repair of Business System in Electric Power Production and Control Area

电力生产控制区二次系统漏洞修补属于安全防护工作中必不可少的重要组成部分。文章重点研究了漏洞修补策略在电力行业的应用,为在漏洞半衰期内将高危漏洞修补,对电力生产控制区内部业务系统的系统漏洞提出了5条修补策略,并介绍了广西电网研究建立的基于漏洞资产管理、漏洞分析、漏洞修补和修补审计4个部份的全网漏洞管理流程和工作成果。

Vulnerability repair of electric power production and control area secondary system is a necessary and important part of security protection work. The application of vulnerability repair strategy in electric power industry is studied, and five repair strategies for vulnerabilities of business system in electric power production and control area are proposed so that high dangerous vulnerabilities will be repaired within their half- life. The vulnerability management flow which is based on vulnerability asset management, vulner- ability analysis, vulnerability repair and vulnerability audit in Guangxi power grid and corresponding work products achieved are introduced.