新一代信息安全防护体系架构研究

Study on Architecture of A New Generation of Intelligent Trusted Information Security System

传统的信息安全防护体系缺乏对云计算、大数据等新技术的安全防护措施及设备,因此需要一个全面的信息安全防护体系来应对新技术的发展。针对电力企业面临的信息安全新风险进行详细分析,以"十三五"规划的智能安全防护思想为出发点,设计智能可信的新一代信息安全防护体系架构,在继承传统的安全防护体系架构基础上,融入安全防护新技术,并以安全数据采集、接入、存储、分析、应用、预警、应急响应等环节构建新型技防体系,强化技防联动的安全风险预警能力,为电力企业建设完善新型信息安全防护体系提供指导。

Traditional information security protection system lacks security protection measures and equipment for such new technologies as cloud computing and big data. Therefore, a comprehensive information security system is needed to cope with the development of new technologies. A detailed analysis is made on the new information security risks faced by the power enterprises. Based on the intelligent security protection philosophy defined in the 13 th Five-Year Plan(2016-2020), a new generation of intelligent trusted information security system is proposed in this paper. It is built on the basis of traditional security protection architecture, and by integrating the up to date new security protection technologies into such key links as data collection, accession, storage, analysis, application, early warning and emergency response, and the early warning ability of security risk is strengthened. This paper can provide a guidance for power enterprises to build a complete new information security protection system.