Automatic detecting method and device for electric power industry information system networking safety evaluation

Abstract

The invention discloses an automatic detecting method and a device for electric power industry information system networking safety evaluation. The method comprises the following steps: establishing a detection indexbase aiming to network environment, main frame, data base, middleware, application system and data, and confirming the risk grade of each index; combining and forming corresponding detection modules based on different indexes; pre-defining and building in various detection scripts, and associating script detection contents and indexes in the detection modules; according to detection objects selected by a user, automatically transferring corresponding detection scripts, detecting the information system according to the six types of detection module contents in sequence, carrying out mapping for the detection result and the detection indexes in the detection modules, and judging demands are met or not; and automatically generating a problem list for incongruent detection indexes. The method is automatic and intelligent, improves the efficiency and the accuracy of automatic detection to the electric power industry information system networking safety evaluation, and is easy to operate and implement.

Description

technical field [0001] The invention relates to the technical field of power system network access security detection, in particular to an automatic detection method and device for network security assessment of an information system in the electric power industry. Background technique [0002] Network access security assessment is to implement security testing according to the information security protection level defined in the design stage before the new system of the power enterprise goes online. The purpose is to provide a measurement basis for whether the system can enter trial operation. The main content of detection includes six categories: network environment, host, database, middleware, application system and data. [0003] The current network security assessment work is completed by the following steps: [0004] 1. Formulate six types of testing documents for network environment, host, database, middleware, application system and data, which record the indicators...

AI Technical Summary

Problems solved by technology

[0006] 3. Collect non-conforming indicators, compile a list of problems, and hand them over to the developer of the tested system for rectification;

[0010] According to the analysis of the current network security evaluation business process and the goal of informatization construction, there is no good detection tool for the network security evaluation of the power industry information system in the prior art, so that the existing technology for the automatic network security evaluation of the power industry information system The following flaws exist in the detection:

[0011] 1. Inspection engineers manually formulate inspection documents, which are quite random and may not meet the requirements of power enterprise specifications;

[0012] 2. Messy detection scripts, human subjective judgment factors are relatively large;

[0013] 3. The workload of issuing various reports is heavy, and there are often cases of missed reports and false reports;

[0014] 4. Poor retrospective work ability, it is inconvenient to consult electronic documents or paper documents

Images