电力数据通信网安全防护方案的分析和研究

Analysis and Research on Network Security Protection Scheme in Power Data Communication Network

电力数据通信网是承载电力系统管理信息大区业务的关键网络,业务种类多,业务重要性强,整体网络基于BGP MPLS VPN技术体制,网络由骨干层、汇聚层、接入层多层部署。同时网络接入大量直调电厂,并与其他单位网络跨域互联,实现业务的横纵贯通。文章主要研究了电力数据通信网的安全防护,分别从电厂边界安全防护、骨干网主站安全态势感知部署2个方面,提出了电力数据通信网的安全防护思路,并提出网络安全管理方案,全面提升电力数据通信网安全防护能力,引导后期本区域电力通信网安全防护的进一步规划建设。

Power data communication network is an key enterprise management network which bearing many kinds of important businesses. The network construction technology is based on the BGP MPLS VPN. The network structure includes backbone layer, convergence layer and access layer. At the same time, the network is connected to a large number of direct power plants, and the network of other units is connected across domains to realize the horizontal and longitudinal communication of services. This paper puts forward a security protection idea of power data communication network from two aspects: power plant boundary security protection and backbone network master station security situation awareness deployment. At last, a network security management scheme is provided. It can comprehensively improve the security protection ability of power data communication network, and guide the further planning and construction of power communication network security protection in the future.