Study On Detection And Evaluation Technology In Security Of Electric Power Information Network Nodes

With the development of global informatization, the electric power industry, as the industry which early implements information, the informatization degree is continuously enhanced. In addition, electric power industry is a pillar industry of the national economy and social life whose security problems are concerned by all over the society and various safety fields. It is the important research content that how to carry out security detection and security evaluation on electric power information network nodes, and develop the useful technology which can detect and control the security of electric power information network devices, and improve the security level of electric power information network devices.The traditional security detection technology is widely used in the universal network, for example, Intrusion Detection Systems is the most common security detection tool used in the industrial enterprises. But there is no special detection tool to carry out security detection on electric power information network device which has unique attributes. This paper uses a unique baseline security detection tool for electric power information network device which has unique attributes in electric power information network. This tool can extract the configuration information of the electric power information network device automatically, then according to the type of the electric power information network device and security baseline which is prior configured, carry out the security detection on the electric power information network device and output the detection report automatically. In addition, this tool is improved to summarize the classification results with the detection on all electric power information network devices.There is no security evaluation model that matches the electric power information network in traditional safety assessment technology. This paper bases on the general node safety assessment techniques, abstracts three key factors from the electric power information network: asset, vulnerability and threats, and then adds the risk of allover the electric power information network. The security evaluation model of electric power information network node is turned out based on these four factors. This security evaluation model is mainly based on the vulnerability data collected by the security baseline detection tool mentioned above. In addition, this paper develop the quantification method for each factor in the security evaluation model which makes the calculated result standard and have strong adaptability. The emergence of the security evaluation model of electric power information network node makes the security evaluation model of electric power information network device more accurate and matches the electric power information network, and we can conclude that it can complete the security evaluation mission of electric power information network device well.This paper develops a security evaluation system of electric power information network node with the security evaluation model of electric power information network device as well. This system uses the current popular B/S architecture, and adds the security baseline detection tool into the security evaluation system. In this way, this system makes the security detection and security evaluation together, free installation, almost operates the evaluation task automatically, saves large of manpower, and has small errors. We can conclude that this security evaluation system can solve the problem of security detection and security evaluation of electric power information network node.