证券网络安全事件应急响应评价研究

网络安全事件应急响应横跨多部门、涉及多层次、覆盖多范围,已成为常态化安全运营中关键链路环节,是证券业务稳定安全运行保障的重要核心支撑.针对证券业传统应急响应能力评价指标不统一且过于主观问题,提出了包含检测响应、止损阻断、分析溯源、清除恢复、加固复验的网络安全事件应急响应流程,涵盖工具运用、日志覆盖、人员技能、职责分工、通报处置、宣传教育指标体系的三级评价模型,运用模糊层次分析法确定各层次指标权重,采用专家判断方法建立评价指标集,引入模糊灰色综合评价方法对证券行业网络安全事件应急响应能力进行评价,并通过实例验证对指标数据进行分析汇总,实现了评价指标的量化展示.

美国《网络安全事件与漏洞响应指南》解读

为有效应对日益加剧的网络安全威胁,落实美国拜登政府“关于加强国家网络安全”行政令要求,美国国土安全部网络安全与基础设施安全局于2021年11月发布《网络安全事件与漏洞响应指南》。该指南主要是为美联邦机构制定网络安全事件和漏洞响应标准化处理程序,未来将大幅提升美国网络安全事件及漏洞检测和响应处理能力。

Utilization of DFIG on an Islanded Power Generation and Distribution System

The utilization of wind generation equipment, such as DFIGs （double fed induction generators）, interconnected to islanded power generation and distribution systems is investigated in order to determine their effects on the overall system operating characteristics and stability. The use of a stable power station （with high speed machines） will be critical in achieving fast and reliable transient response to network events, in particular, when large transient loads are expected on a continuous basis, i.e., industrial mining and mineral processing equipment. Simulation results of this paper assist in understanding how small power stations and wind generation equipment respond to large transients in an islanded network. In particular, detailed simulations and analyses will be presented on impacts of distributed wind generation units （1.5 MW DF1G） on the stability of a small weak network. The novelty of this paper is on detailed analyses and simulation of weak networks with interconnects DFIG＇s including their impacts on system stability under various transient operating conditions.