Shulou(Shulou.com)06/01 Report--

Risks faced by Informatization in Electric Power Industry

With the deep integration and rapid development of industrialization and informatization in our country, the information security problem faced by industrial control system is becoming more and more serious. In order to ensure the safe and stable operation of the control system of energy and infrastructure industry, it is necessary to establish a targeted security protection system.

The power industry is related to the national economy and people's livelihood, national strategic development, and so on. Take the Iranian nuclear power plant incident, for example, at the critical moment of the development of nuclear energy, due to the breach of data transmission equipment, the whole plan was forced to run aground and related important data were lost. The international status of the whole country has declined sharply. There have also been many major accidents in the domestic power industry due to the information security problems of information systems or transmission links. Thus it can be seen that as the basis of national energy, the information security of industrial control system in power industry is very important.

In May 2002, decree No. 30 of the State Economic and Trade Commission, "provisions on the Security Protection of Power Grid and Power Plant computer Monitoring system and dispatching data Network" has an important guiding meaning for the security construction of power system. In 2006, the electricity Regulatory Commission issued a series of measures such as "General Plan for Security Protection of Electric Power Secondary system". The protection strategy of power secondary system stipulates that the sixteen words of "security zoning, network dedicated, horizontal isolation, vertical encryption" become the core of the overall security protection strategy.

two。 Brief introduction of Information system in Electric Power Industry

Power informatization can be divided into power generation system and dispatching system, which runs through four links: power generation, transmission, power supply and power consumption. the infrastructure of power information system is composed of five platforms, two systems and one center. The five platforms are network platform, system support platform, information integration platform, application platform and portal platform. The two systems include the information security system and the information standard management system. A center is called a data center.

The following figure shows the information system architecture of the power industry:

From the above picture, it is not difficult to see that there must be corresponding security protection for every business system, and the current power generation system and dispatching system have more or less carried out related information security construction. and the "overall security protection scheme for power secondary system" has also been clear about the overall protection strategy.

The following picture shows the framework of the overall security protection scheme for the power secondary system:

What is the current implementation situation, whether to carry out security planning according to the scheme, and whether the planning can fully meet the requirements of the scheme? at the stage of the rapid development of industrial control informatization, whether the existing security protection segment can achieve the set goal, these problems have been solved whether the protection of information security can be realized. It has been nearly 8 years since the introduction of the plan, and now it is necessary for the power industry to analyze the current problems and put forward security requirements.

3. New demand brought by smart grid

The personal understanding of smart grid is to integrate the information network into the traditional power network. The traditional power network information security stays within its power industry, but the emergence of smart grid has pushed the security boundary to the final user-individual.

The security construction of smart grid has not been carried out on a large scale, and the new demand brought by new services has not been solved. We need to comprehensively consider the physical security, network security, data security, authentication security and other issues, but also related to the actual needs of multi-network convergence.

In short, the power industry still has a long way to go on the road of industrial control and information security, which can be summed up in one sentence: "it's a long journey, and I won't stop pursuing it."

Welcome to subscribe "Shulou Technology Information " to get latest news, interesting things and hot topics in the IT industry, and controls the hottest and latest Internet news, technology news and IT industry trends.