美国电力行业信息安全工作现状与特点分析

A Survey on Cybersecurity of U.S.Electric Power Industry

美国是从事电力行业信息安全研究工作最早的国家之一,也是发布电力行业信息安全标准与指南最多的国家。介绍了美国电力行业信息安全研究与管理框架,描述了国土安全部、能源部、国家标准技术研究院和北美电力可靠性组织等相关政府部门和标准化组织的工作机制,分析了《关键设施保护标准》、《联邦信息系统推荐安全措施》和《工业自动化与控制系统安全》等重要出版物的主要内容和推广应用情况,并指出了美国开展电力行业信息安全工作的优势和存在的弊端。

United States is one of the earliest counties that began the research on cyber security of electric power industry and is also the country that releases most standards and guidelines for cybersecurity of electric powerindustry. In this paper the research and management framework related to cyber security of U.S. electric power industry is presented; the working mechanism of related government departments and standardization organizations of the United States, such as Department of Homeland Security （DHS）, Department of Energy （DOE）, North American Electric Reliability Corporation （NERC） and National Institute of Standards and Technology （NIST）, is described; main contents of important publications such as NERC CIP, NISTSP 800-53, ISA99 and others as well as their spread and application are analyzed. Besides, the superiority and defects in the work of performing the standards and guidelines of cybersecurity of electric power industry are pointed out.