System and method for management and control of access control policy of security domain boundary equipment of smart grid

Abstract

The invention provides a system for management and control of an access control policy of security domain boundary equipment of a smart grid. The system comprises a strategy compliance detection rule storage unit, a detection template editing unit, a detection task editing unit, a detection task execution unit, a detection result analysis unit and a detection result display unit. According to the system and the method, security detection templates for different types of security domain boundary equipment of the smart grid can be defined quickly and accurately, and the detection templates for new intelligent security domain boundary equipment needing to be introduced in the future introduced of the smart grid can be also subjected to customization of the security detection templates through the system, so that the security detection range of the security domain boundary equipment of the smart grid and the flexibility for making a security detection rule are greatly improved, and the security detection task can be quickly issued to the appointed security domain boundary equipment of the smart grid for collecting the scattered configuration information of the security domain boundary equipment of the smart grid through a structural data format.

Description

Technical field [0001] The invention relates to the technical field of power grid security, in particular to a smart grid security domain boundary device access control strategy management and control system and method. Background technique [0002] In order to ensure the safety of the power monitoring system and power dispatching data network, and prevent hackers and malicious codes from attacking the power secondary system and causing power system accidents, the power secondary system security protection work is based on security partitions, network dedicated, and horizontal Isolation and vertical certification are the basic principles. [0003] According to the characteristics of the power secondary system, the importance of each related business system and the data flow, current status and safety requirements, the entire power secondary system is divided into four safety areas: I real-time control area, II non-control production area, III Production management area, IV managem...

AI Technical Summary

Problems solved by technology

[0005] At present, there is no general-purpose tool in China that can support the centralized management and control of access control policies for smart grid security domain border devices, and cannot check the effectiveness and compliance of access control policies, resulting in garbage policies in smart grid security domain border device access control policies , redundancy strategy, conflict strategy, etc.

Images