摘要
针对当前电网数据管理平台风险预警模型无法有效判断平台风险的现状,为提升平台的安全性,基于我国“双碳”战略和空间技术应用背景,结合电网数据管理平台的特点及信息安全评估的一般原理,针对平台自身安全的脆弱性和外部威胁,进行脆弱性识别、资产识别以及威胁识别;重点考虑平台面临的各类风险概率,综合各方面风险作为平台信息安全的风险度量,由此判断当前平台的风险水平,并建立了平台信息安全风险评价层级模型;针对不确定性因素的影响,借助直觉模糊集合理论对不同层级的风险进行了量化评估.最后,选取某智能电网数据管理平台进行了实例分析,结果显示,平台的软硬件漏洞是信息安全风险管理中首要关注的指标,以及恶意软件感染和信息被删丢失等风险需要加以关注,将有助于提高电网平台的信息风险抵御能力.
In view of the current situation that the risk early warning model of the power information platform cannot effectively judge the platform risk,in order to improve the security of the power space technology application platform.Based on China's"double carbon"strategy and the application background of space technology,combined with the characteristics of the power space technology platform and the general principles of information security assessment,this paper carries out vulnerability identification,asset identification and threat identification for the platform's own security vulnerabilities and external threats;Focusing on the probability of various risks faced by the platform,taking all aspects of risks as the risk measurement of the platform's information security,the risk level of the current platform is judged,and the hierarchical model of the platform's information security risk assessment is established;Aiming at the influence of uncertain factors,the risk of different levels is quantitatively evaluated with the help of intuitionistic fuzzy set theory.Finally,a smart grid information management platform is selected for example analysis.The results show that the software and hardware vulnerabilities of the power platform are the primary indicators of information security risk management,and the risks of malware infection and information deletion and loss need to be paid attention to,which will help improve the information risk resistance of the power platform.
作者
郭文杰
黄镇坤
李蔚
李旭然
黄皓
GUO Wen-jie;HUANG Zhen-kun;LI Wei;LI Xu-ran;HUANG Hao(State Grid Power Space Technology Co.,Ltd.,Beijing 102211,China;School of Economics and Management,North China Electric Power University,Beijing 102206,China)
出处
《数学的实践与认识》
2023年第12期90-99,共10页
Mathematics in Practice and Theory
关键词
智能电网
数据管理平台
直觉模糊集合
信息安全
风险评估
smart grid
power information platform
intuitionistic fuzzy set
information security
risk assessment
