基于数据防泄漏技术的电网信息化安全控制研究

Research on Security Control of Power Grid Information based on Data Leaking Prevention Technology

由于传统安全控制方法缺少对不同层次电网信息的研究,导致控制延迟时间较长,控制效果较差等问题。针对该问题,提出基于数据防泄漏技术的电网信息化安全控制研究。结合数据防泄漏技术应用原理,设计访问层、防护层、对象层的3层电网信息化安全控制防泄漏体系框架,拦截对信息自行操作请求,并采取隔离策略。检查信息内容、信息分类、访问权限矩阵列表、分类结果以及信息具体输出形式后,设计4层技术防护,并采取电网敏感信息闭环管理策略,实现电网信息化安全控制。在VS-20型号虚拟服务器上搭建的实验环境进行实验分析,由得出结果可知,该方法控制延迟时间短且控制效果良好,最高控制效果可达到90%,对于提高电网信息化建设是具有可行性的。

Due to the lack of research on different levels of power grid information in traditional security control methods,the problems such as long control delay time,and poor control effect are caused.In order to solve this problem,the research on security control of power grid information based on data leaking prevention technology was proposed.Combined with the application principle of data leaking prevention technology,a three-tier grid information security control and leaking prevention system framework composed of access alyer,protection layer,and object layer was designed,and the frame can intercept request for information self-operation and adopt the isolation strategy.After checking the information content,information classification,access permission matrix list,classification results and specific information output form,four layers of technical protection was designed,and a closed-loop management strategy for power grid sensitive information was adopted to realize the security control of power grid information.The experimental analysis was conducted on the experimental environment built on the VS-20 model virtual server.The experimental results show that the methods has short control delay time and good control effect.,The highest control effect can reach 90%,which is feasible to improve the power grid information construction.