摘要
针对传统安全机制缺乏动态管控、难以满足复杂系统安全需求等问题,提出了一种基于PKI体系的电力物资信息系统安全机制。该机制结合公钥基础设施(PKI)与授权管理基础设施(PMI)构建了PKI-PMI体系,从而解决了单一PKI体系无法实现权限管理的问题。同时,还设计了基于实体行为的可信度模型用于感知用户行为的动态变化,有效提高了用户信息的可靠性,并进一步保证了系统信息安全。实验结果表明,当每小时发生1000次网络攻击时,所提机制的安全性仍高于85%,且运行时间仅为15.28 ms,能够较好地保证电力物资信息系统的安全。
Aiming at the problems that the traditional security mechanism lacks dynamic control and is difficult to meet the security requirements of complex systems,this paper proposes a security mechanism of power material information system based on PKI system.This mechanism combines Public Key Infrastructure(PKI)and Privilege Management Infrastructure(PMI)to build a PKI-PMI system,which solves the problem that a single PKI system can not realize authority management.At the same time,a credibility model based on entity behavior is designed to perceive the dynamic changes of user behavior,which effectively improves the reliability of user information and further ensures the security of system information.The experimental results show that when 1000 network attacks occur per hour,the security of the proposed mechanism is still higher than 85%,and the running time is only 15.28 ms,which can better ensure the security of power material information system.
作者
王鹏
李松
豆科
王治豪
李珂
WANG Peng;LI Song;DOU Ke;WANG Zhihao;LI Ke(State Grid Shaanxi Electric Power Company,Xi’an 710061,China)
出处
《电子设计工程》
2023年第22期157-161,共5页
Electronic Design Engineering
基金
国网陕西省电力公司2021年专项成本项目(SGSN0000WZWT1600442)。
