电力通信网安全分区研究

Research on the Security Partition of Electric Power Communication Network

安全分区是将重要性和安全要求相同的资产划分至同一安全区域内,以达到分层次安全防护的目的。针对电力通信业务系统安全分区难以界定的问题,文章首先明确电力通信网安全分区对象,分析所承载的生产控制、通信专业、管理信息等各类业务系统的安全属性,采用相似聚类方法对各业务系统进行共性归类,给出各类分区数据网承载方式,并从传输网隔离性、数据网承载方式、业务系统安全属性归类3方面得到电力通信网安全分区结果。

The security partition is to divide the important assets with same safety requirements into a security area to reach the goal of hierarchy security protection. To solve the problem of security partition definition in electric power communication service system, this paper first identifies the security partition objects of electric power communication network, and analyzes security attributes of various service systems including production control system, communication system and management information system. Then the similar clustering method is used to classify the service systems and the classified data communication network bearing mode is presented. Finally, the security partition result of power communication network is obtained from three aspects including isolation of the transmission network, bearing mode of the data communication network and security attribute classification of the service systems.