Business security judgment method and system for novel power system

Abstract

The invention discloses a business security judgment method for a novel electric power system. The method comprises the following steps: acquiring business data information of a target novel electric power system; constructing a business safety judgment index of the target novel power system; calculating evaluation values of a platform protection aspect, an access protection aspect and a terminal protection aspect; and performing comprehensive calculation to obtain a business safety judgment evaluation value of the target novel power system and completing business safety judgment of the target novel power system. The invention also discloses a system for realizing the business security judgment method for the novel power system. According to the method, the service security evaluation system of the target novel electric power system is constructed, the evaluation value of each evaluation index in the evaluation system is calculated in a targeted manner, finally, the judgment of the service security of the novel electric power system is realized, and the method is higher in reliability, better in accuracy, more objective and more scientific.

Description

Technical Field

[0001] The present invention belongs to the field of electrical automation, and in particular relates to a method and system for determining business safety of a new power system. Background Art

[0002] With the development of economy and technology and the improvement of people's living standards, electricity has become an indispensable secondary energy source in people's production and life, bringing endless convenience to people's production and life. Therefore, ensuring the stable and reliable supply of electricity has become one of the most important tasks of the power system.

[0003] At present, the informationization of power system has been developed rapidly, and more and more new services have been connected to the power system. Therefore, the business security of the power system is of great significance to the power system.

[0004] At present, the commonly used business security determination solutions for power systems often only focus on the platform protection of power systems, and it is difficult to fully cover the complex business scenarios in power systems. Therefore, the current business security determination solutions for power systems do not meet the needs of business security determination for existing new power systems. Summary of the invention

[0005] One of the purposes of the present invention is to provide a business safety determination method for a new power system which is highly reliable, accurate, objective and scientific.

[0006] A second object of the present invention is to provide a system for implementing the business security determination method for the new power system.

[0007] The service safety determination method for a novel power system provided by the present invention comprises the following steps:

[0008] S1. Obtain business data information of the target new power system;

[0009] S2. According to the data information obtained in step S1, based on the platform protection, access protection and terminal protection, construct the business security judgment index of the target new power system;

[0010] S3. Calculate the evaluation values ​​of platform protection, access protection and terminal protection respectively according to the business security judgment index constructed in step S2;

[0011] S4. Based on the evaluation value obtained in step S3, a comprehensive calculation is performed to obtain a business security evaluation value of the target new power system;

[0012] S5. According to the business security assessment value obtained in step S4, complete the business security assessment of the target new power system.

[0013] According to the data information obtained in step S1, step S2 constructs the business security judgment index of the target new power system based on platform protection, access protection and terminal protection, which specifically includes the following steps:

[0014] The business security judgment indicators of the target new power system include platform protection indicators, access protection indicators and terminal protection indicators;

[0015] The platform protection indicators include border protection, network protection, host protection, data protection and application protection;

[0016] The access protection indicators include identity authentication protection, encryption and transmission protection, and terminal access protection;

[0017] The terminal protection indicators include access security protection, main body security protection and communication security protection.

[0018] The evaluation value of the computing platform protection aspect described in step S3 specifically includes the following steps:

[0019] Platform protection indicators include border protection, network protection, host protection, data protection, and application protection;

[0020] For border protection:

[0021] Evaluate the configuration and execution of the external access control policy and obtain the external access control policy score A1;

[0022] Evaluate firewall rule settings, log auditing functions, and intrusion prevention functions, and get a firewall configuration strategy score of A2;

[0023] Evaluate the configuration, deployment and response capabilities of the intrusion detection system and obtain an intrusion detection system configuration strategy score of A3;

[0024] Set the weight value a1 of the external access control policy score, the weight value a2 of the firewall configuration policy score, and the weight value a3 of the intrusion detection system configuration policy score, and a1+a2+a3=1;

[0025] The boundary protection score S is calculated using the following formula: 1-1 :

[0026]

[0027] Where Ai max is the full score of the corresponding Ai;

[0028] For network protection:

[0029] Evaluate the effectiveness of the grid isolation strategy and obtain a score of B1 for the internal network isolation strategy;

[0030] Evaluate the deployment and response capabilities of traffic monitoring tools and obtain a traffic monitoring strategy score of B2;

[0031] Evaluate the security and stability of the routing strategy and obtain a routing strategy score of B3;

[0032] Evaluate the rationality of VLAN division and obtain a VLAN division strategy score of B4;

[0033] Evaluate the security of the SDN architecture and obtain a SDN security strategy score of B5;

[0034] Set the weight value b1 of the internal network isolation policy score, the weight value b2 of the traffic monitoring policy score, the weight value b3 of the routing policy score, the weight value b4 of the VLAN division policy score, and the weight value b5 of the SDN security policy score, and b1+b2+b3+b4+b5=1;

[0035] The network protection score S is calculated using the following formula: 1-2 :

[0036]

[0037] In the formula Bi max is the corresponding full score of Bi;

[0038] Host protection:

[0039] Evaluate the access control list and role-based access control mechanism, and obtain the server access control policy score C1;

[0040] Evaluate the effectiveness of patch management policies and processes, and obtain a patch management policy score of C2;

[0041] Evaluate the deployment and protection capabilities of malware protection tools, and obtain a malware detection and protection strategy score of C3;

[0042] Set the weight value c1 of the server access control policy score, the weight value c2 of the patch management policy score, and the malware detection and protection policy score c3, and c1+c2+c3=1;

[0043] The host protection score S is calculated using the following formula: 1-3 :

[0044]

[0045] In the formula, max is the full score of the corresponding Ci;

[0046] For data protection:

[0047] Evaluate the encryption measures for data during storage and transmission, and obtain a data encryption strategy score of D1;

[0048] Evaluate the backup strategy and recovery test results, and obtain a data backup and recovery strategy score of D2;

[0049] Evaluate the data access control policy and obtain a data access control policy score D3;

[0050] Evaluate the data integrity protection measures and obtain a data integrity protection strategy score of D4;

[0051] Set the weight value d1 of the data encryption policy score, the weight value d2 of the data backup and recovery policy score, the weight value d3 of the data access control policy score, and the weight value d4 of the data integrity protection policy score, and d1+d2+d3+d4=1;

[0052] The data protection score S is calculated using the following formula: 1-4 :

[0053]

[0054] Where Di max is the full score of the corresponding Di;

[0055] For application protection:

[0056] Assess the secure coding standards in the application development process and obtain a secure coding standards strategy score of E1;

[0057] Evaluate the effectiveness and response speed of the vulnerability management process and obtain a vulnerability management strategy score of E2;

[0058] Evaluate the coverage and analysis capabilities of the log monitoring mechanism and obtain a log monitoring strategy score of E3;

[0059] Evaluate the strength and security of the user authentication method, and get an authentication mechanism strategy score of E4;

[0060] Set the weight value e1 of the security coding standard policy score, the weight value e2 of the vulnerability management policy score, the weight value e3 of the log monitoring policy score, and the weight value e4 of the authentication mechanism policy score, and e1+e2+e3+e4=1;

[0061] The application protection score S is calculated using the following formula: 1-5 :

[0062]

[0063] Where Ei maxis the corresponding full score of Ei;

[0064] Based on the obtained boundary protection score, network protection score, host protection score, data protection score and application protection score, the platform protection evaluation value S1 is calculated using the following formula:

[0065]

[0066] Where W 1-i The corresponding S 1-i The weight value of .

[0067] The calculation of the access protection evaluation value described in step S3 specifically includes the following steps:

[0068] Indicators for access protection include identity authentication protection, encryption and transmission protection, and terminal access protection;

[0069] For identity authentication protection:

[0070] Evaluate the use, application scope, security strength and effectiveness of multi-factor authentication in the target new power system, and obtain the identity authentication method strategy score F1;

[0071] Evaluate whether the access control policy complies with the principle of least privilege, the rationality of privilege allocation, the dynamic adjustment capability of privilege management, and the frequency and effectiveness of privilege review, and obtain the access control policy score F2;

[0072] Set the weight value f1 of the identity authentication method strategy score, the nonlinear adjustment parameter αf1 of the identity authentication method strategy score, and the logarithmic function influence parameter βf1;

[0073] The weight value f2 of the access control policy score, the nonlinear adjustment parameter αf2 of the access control policy score, and the logarithmic function influence parameter βf2;

[0074] The identity authentication protection score S is calculated using the following formula: 2-1 :

[0075]

[0076] Where Fi max is the full score of the corresponding Fi;

[0077] For encryption and transmission protection:

[0078] Evaluate the version of the encryption protocol, key length, encryption algorithm selection and key management strategy implementation used in the target new power system, and obtain the encryption strength strategy score G1 of the data transmission channel;

[0079] Evaluate the key generation, storage, distribution and update strategies in the target new power system and obtain the key management strategy score G2;

[0080] Set the weight value g1 of the encryption strength strategy score of the data transmission channel, the nonlinear adjustment parameter αg1 of the encryption strength strategy score of the data transmission channel, and the logarithmic function influence parameter βg1;

[0081] Set the weight value g2 of the key management strategy score, the nonlinear adjustment parameter αg2 of the key management strategy score, and the logarithmic function influence parameter βg2;

[0082] The encryption and transmission protection score S is calculated using the following formula: 2-2 :

[0083]

[0084] Where Gi max is the full score of the corresponding Gi;

[0085] For terminal access protection:

[0086] Evaluate whether the equipment provided by the supplier has passed the NAC mechanism with a set level of strictness, NAC coverage, compliance check mechanism, and isolation measures, and obtain the network access control strategy score H1;

[0087] Evaluate the isolation measures of the target new power system for non-trusted devices, the effectiveness of the isolation strategy, the safety configuration of the isolation area and the monitoring measures of the isolation equipment, and obtain the non-trusted device isolation strategy score H2;

[0088] Evaluate the security protection measures, device security configuration, access point monitoring, dynamic protection strategy, and real-time response mechanism provided by the vendor when the device is accessed to the system, and obtain the device access protection measures strategy score H3;

[0089] Set the weight value h1 of the network access control strategy score, the nonlinear adjustment parameter αh1 of the network access control strategy score, and the logarithmic function influence parameter βh1;

[0090] Set the weight value h2 of the untrusted device isolation strategy score, the nonlinear adjustment parameter αh2 of the untrusted device isolation strategy score, and the logarithmic function influence parameter βh2;

[0091] Set the weight value h3 of the device access protection measure strategy score, the nonlinear adjustment parameter αh3 of the device access protection measure strategy score, and the logarithmic function influence parameter βh3;

[0092] The terminal access protection score S is calculated using the following formula: 2-3 :

[0093]

[0094] In the formula, Hi max is the corresponding full score of Hi;

[0095] Based on the obtained identity authentication protection score, encryption and transmission protection score, and terminal access protection score, the access protection evaluation value S2 is calculated using the following formula:

[0096]

[0097] Where W 2-i The corresponding S 2-3 The weight value of .

[0098] The calculation of the terminal protection evaluation value described in step S3 specifically includes the following steps:

[0099] Terminal protection indicators include access security protection, main body security protection and communication security protection;

[0100] For access security protection:

[0101] Evaluate whether the terminal equipment is connected to the management information area through a secure dedicated line and whether encryption authentication measures of a set strength are adopted, and obtain a score of I1 for dedicated line access and encryption authentication strategy;

[0102] Evaluate the security of terminal devices accessing the Internet region through the Internet channel and whether there are potential network threats, and obtain the Internet channel access strategy score I2;

[0103] Evaluate whether there is a situation of mixing terminal devices in different security zones and whether there are measures to ensure the effective implementation of the network isolation strategy, and obtain the security zone mixing principle strategy score I3;

[0104] Set the weight value i1 of the dedicated line access and encryption authentication policy score, the weight value i2 of the Internet channel access policy score, and the weight value i3 of the security zone hybrid principle policy score;

[0105] The access security protection score S is calculated using the following formula: 3-1

[0106]

[0107] Where Ij max is the full score of the corresponding Ij;

[0108] For the main body security protection:

[0109] Evaluate whether the terminal device complies with the requirements for closing the debug interface, the integrity and implementation of the interface closing, and obtain the debug interface closing strategy score J1;

[0110] Evaluate whether the device supports local and remote security upgrades, whether it can verify the legitimacy of the upgrade package and the implementation of the security upgrade function, and obtain a score of J2 for supporting the security upgrade strategy;

[0111] Evaluate whether the device performs identity authentication and encryption protection based on a unified password infrastructure and the security and compliance of encryption protection and identity authentication mechanisms, and obtain a score of J3 for identity authentication and encryption protection strategies;

[0112] Evaluate whether the device supports digital signature and verification of key software and firmware and the implementation of digital signature functions, and obtain a digital signature and verification capability strategy score of J4;

[0113] Evaluate the security monitoring and auditing functions of the equipment and the coverage and effectiveness of the monitoring and auditing functions, and obtain a security monitoring, auditing and analysis function strategy score of J5;

[0114] Evaluate the device's ability to manage secure access to IoT terminals and the effectiveness of access management functions, and obtain a score of J6 for IoT terminal secure access management strategy;

[0115] Set the weight value j1 of the debugging interface closing policy score, the weight value j2 of the security upgrade support policy score, the weight value j3 of the identity authentication and encryption protection policy score, the weight value j4 of the digital signature and verification capability policy score, the weight value j5 of the security monitoring, auditing and analysis function policy score, and the weight value j6 of the IoT terminal security access management policy score;

[0116] The following formula is used to calculate the main body safety protection score S 3-2 :

[0117]

[0118] In the formula max is the full score of the corresponding Ji;

[0119] For communication security protection:

[0120] Evaluate the security of local communication of terminal devices through different physical channels and the security and anti-interference ability of the channels, and obtain the local communication security strategy score K1;

[0121] Evaluate whether there is direct communication between terminals across regions and the effectiveness of restrictions on cross-regional communication, and obtain a score K2 for the cross-regional communication restriction strategy;

[0122] Evaluate the security and implementation of security measures of terminals that are not directly connected to the security zone when communicating with the management information zone terminals, and obtain the local communication filtering and verification strategy score K3;

[0123] Evaluate whether identity authentication and data encryption are implemented as required when communicating with Internet regional terminals and the effectiveness of identity authentication and encryption measures, and obtain a score of K4 for Internet regional communication security strategy;

[0124] Evaluate the anti-interference capability of the communication protocol on the management information area side, the security configuration of the channel, and the security configuration of the protocol and channel, and obtain the management information area communication security strategy score K5;

[0125] Set the weight value k1 of the local communication security policy score, the weight value k2 of the cross-region communication restriction policy score, the weight value k3 of the local communication filtering and verification policy score, the weight value k4 of the Internet region communication security policy score, and the weight value k5 of the management information region communication security policy score;

[0126] The communication security protection score S is calculated using the following formula: 3-3 :

[0127]

[0128] Where Ki max is the corresponding full score of Ki;

[0129] According to the obtained access security protection score, main body security protection score and communication security protection score, the terminal protection evaluation value S3 is calculated using the following formula:

[0130]

[0131] Where W 3-i The corresponding S 3-i The weight value of .

[0132] The step S4, according to the evaluation value obtained in step S3, comprehensively calculates and obtains the business security judgment evaluation value of the target new power system, which specifically includes the following steps:

[0133] Set the risk value R1 for the boundary protection score, the risk value R2 for the network protection score, the risk value R3 for the host protection score, the risk value R4 for the data protection score, the risk value R5 for the application protection score, the risk value R6 for the identity authentication protection score, the risk value R7 for the encryption and transmission protection score, the risk value R8 for the terminal access protection score, the risk value R9 for the access security protection score, the risk value R10 for the entity security protection score, and the risk value R11 for the communication security protection score;

[0134] Set the contribution f(B n ,R1), the contribution of network protection score f(B n ,R2), the contribution of host protection score f(B n,R3), the contribution of data protection score f(B n ,R4), the contribution of application protection score f(B n ,R5), the contribution of identity authentication protection score f(B n ,R6), the contribution of encryption and transmission protection scores f(B n ,R7), the contribution of terminal access protection score f(B n ,R8), the contribution of access security protection score f(B n ,R9), the contribution of the security protection score to the entity f(B n ,R10) and the contribution of communication security protection score f(B n ,R11);

[0135] The calculation constant K is obtained using the following formula:

[0136] K=max(f(B n ,Rn))+δ

[0137] Where max(f(B n ,Rn)) represents f(B n ,R1)~f(B n , R11); δ is a positive number set to ensure that K>max(f(B n ,Rn));

[0138] Calculate the platform protection weight value w 平台防护 for

[0139] Calculate the access protection weight value w 接入防护 for

[0140] Calculate the terminal protection weight value w 终端防护 for

[0141] Set the platform protection weight value w 平台防护 , access protection weight value w 接入防护 and terminal protection weight value w 终端防护 Normalize:

[0142] Calculate the normalized platform protection weight value w' 平台防护 for

[0143]

[0144] Calculate the normalized access protection weight value w' 接入防护 for

[0145]

[0146] Calculate the normalized terminal protection weight value w' 终端防护 for

[0147]

[0148] Finally, the business security assessment value R of the target new power system is calculated using the following formula: total :

[0149]

[0150] Where C1 is the normalized constant of platform protection; C2 is the normalized constant of access protection; C3 is the normalized constant of terminal protection; kk is the set scaling factor; γ1 is the nonlinear transformation coefficient of platform protection; γ2 is the nonlinear transformation coefficient of access protection; γ3 is the nonlinear transformation coefficient of terminal protection; δ is the interaction effect coefficient.

[0151] The step S5, according to the business security assessment value obtained in step S4, completes the business security assessment of the target new power system, which specifically includes the following steps:

[0152] According to the business security assessment value obtained in step S4, the business security assessment of the target new power system is completed:

[0153] Business security assessment value R total The larger it is, the better the risk protection capability of the target new power system and the better the business security.

[0154] The present invention also provides a system for implementing the business security determination method for a new type of power system, comprising a data acquisition module, an indicator construction module, an aspect evaluation module, an evaluation calculation module and a safety determination module; the data acquisition module, the indicator construction module, the aspect evaluation module, the evaluation calculation module and the safety determination module are connected in series in sequence; the data acquisition module is used to acquire the business data information of the target new type of power system, and upload the data information to the indicator construction module; the indicator construction module is used to construct the business security determination index of the target new type of power system based on the platform protection aspect, the access protection aspect and the terminal protection aspect according to the received data information and the acquired data information, and upload the data information to the aspect evaluation module; the aspect evaluation module is used to calculate the evaluation values ​​of the platform protection aspect, the access protection aspect and the terminal protection aspect respectively according to the received data information and the constructed business security determination index, and upload the data information to the evaluation calculation module; the evaluation calculation module is used to comprehensively calculate the business security determination evaluation value of the target new type of power system according to the received data information and the obtained evaluation value, and upload the data information to the safety determination module; the safety determination module is used to complete the business security determination of the target new type of power system according to the received data information and the obtained business security determination evaluation value.

[0155] The business security determination method and system for a new power system provided by the present invention not only realizes the determination of the business security of the new power system by constructing a business security assessment system for the target new power system and calculating the assessment value of each assessment indicator in the assessment system in a targeted manner, but also has higher reliability, better accuracy, and is more objective and scientific. BRIEF DESCRIPTION OF THE DRAWINGS

[0156] Figure 1 The figure is a schematic diagram of the method flow of the present invention.

[0157] Figure 2 Schematic diagram of the functional modules of the system of the present invention. DETAILED DESCRIPTION

[0158] like Figure 1 The method flow chart of the method of the present invention is shown as follows: The service safety determination method for a new power system disclosed in the present invention comprises the following steps:

[0159] S1. Obtain business data information of the target new power system;

[0160] S2. According to the data information obtained in step S1, based on the platform protection, access protection and terminal protection, construct the business security judgment index of the target new power system; specifically, it includes the following steps:

[0161] The business security judgment indicators of the target new power system include platform protection indicators, access protection indicators and terminal protection indicators;

[0162] The platform protection indicators include border protection, network protection, host protection, data protection and application protection;

[0163] The access protection indicators include identity authentication protection, encryption and transmission protection, and terminal access protection;

[0164] The terminal protection indicators include access security protection, main body security protection and communication security protection;

[0165] S3. Calculate the evaluation values ​​of platform protection, access protection and terminal protection respectively according to the business security judgment index constructed in step S2;

[0166] In specific implementation, the evaluation value of the computing platform protection aspect specifically includes the following steps:

[0167] Platform protection indicators include border protection, network protection, host protection, data protection, and application protection;

[0168] For border protection: Ensure that the power business system has sufficient security protection measures at the network border to prevent unauthorized external access and network attacks; as the first line of defense for system security, border protection is crucial to the security of the overall system;

[0169] Evaluate the configuration and execution of the external access control policy and obtain the external access control policy score A1;

[0170] Evaluate firewall rule settings, log auditing functions, and intrusion prevention functions, and get a firewall configuration strategy score of A2;

[0171] Evaluate the configuration, deployment and response capabilities of the intrusion detection system and obtain an intrusion detection system configuration strategy score of A3;

[0172] Set the weight value a1 of the external access control policy score, the weight value a2 of the firewall configuration policy score, and the weight value a3 of the intrusion detection system configuration policy score, and a1+a2+a3=1;

[0173] The boundary protection score S is calculated using the following formula: 1-1 :

[0174]

[0175] Where Ai max is the full score of the corresponding Ai;

[0176] Network protection: ensure the security of the internal network in the new power business system, guarantee the integrity, confidentiality and availability of data transmission, and the rationality of the network architecture;

[0177] Evaluate the effectiveness of the grid isolation strategy and obtain a score of B1 for the internal network isolation strategy;

[0178] Evaluate the deployment and response capabilities of traffic monitoring tools and obtain a traffic monitoring strategy score of B2;

[0179] Evaluate the security and stability of the routing strategy and obtain a routing strategy score of B3;

[0180] Evaluate the rationality of VLAN division and obtain a VLAN division strategy score of B4;

[0181] Evaluate the security of the SDN architecture and obtain a SDN security strategy score of B5;

[0182] Set the weight value b1 of the internal network isolation policy score, the weight value b2 of the traffic monitoring policy score, the weight value b3 of the routing policy score, the weight value b4 of the VLAN division policy score, and the weight value b5 of the SDN security policy score, and b1+b2+b3+b4+b5=1;

[0183] The network protection score S is calculated using the following formula: 1-2 :

[0184]

[0185] In the formula Bi max is the corresponding full score of Bi;

[0186] Host protection: Ensure the security of core servers and other computing devices in the new power business system to prevent these hosts from being attacked by malware, unauthorized access, and other potential security threats during operation;

[0187] Evaluate the access control list and role-based access control mechanism, and obtain the server access control policy score C1;

[0188] Evaluate the effectiveness of patch management policies and processes, and obtain a patch management policy score of C2;

[0189] Evaluate the deployment and protection capabilities of malware protection tools, and obtain a malware detection and protection strategy score of C3;

[0190] Set the weight value c1 of the server access control policy score, the weight value c2 of the patch management policy score, and the malware detection and protection policy score c3, and c1+c2+c3=1;

[0191] The host protection score S is calculated using the following formula: 1-3 :

[0192]

[0193] In the formula, max is the full score of the corresponding Ci;

[0194] Data protection: Ensure the security of data processed, stored and transmitted in the new power business system to prevent data leakage, tampering, loss or unauthorized access;

[0195] Evaluate the encryption measures for data during storage and transmission, and obtain a data encryption strategy score of D1;

[0196] Evaluate the backup strategy and recovery test results, and obtain a data backup and recovery strategy score of D2;

[0197] Evaluate the data access control policy and obtain a data access control policy score D3;

[0198] Evaluate the data integrity protection measures and obtain a data integrity protection strategy score of D4;

[0199] Set the weight value d1 of the data encryption policy score, the weight value d2 of the data backup and recovery policy score, the weight value d3 of the data access control policy score, and the weight value d4 of the data integrity protection policy score, and d1+d2+d3+d4=1;

[0200] The data protection score S is calculated using the following formula: 1-4 :

[0201]

[0202] Where Di max is the full score of the corresponding Di;

[0203] Application protection: Ensure the security of various software applications and services running in the new power business system, and prevent applications from being attacked due to code vulnerabilities, improper configuration or weak authentication mechanisms;

[0204] Assess the secure coding standards in the application development process and obtain a secure coding standards strategy score of E1;

[0205] Evaluate the effectiveness and response speed of the vulnerability management process and obtain a vulnerability management strategy score of E2;

[0206] Evaluate the coverage and analysis capabilities of the log monitoring mechanism and obtain a log monitoring strategy score of E3;

[0207] Evaluate the strength and security of the user authentication method, and get an authentication mechanism strategy score of E4;

[0208] Set the weight value e1 of the security coding standard policy score, the weight value e2 of the vulnerability management policy score, the weight value e3 of the log monitoring policy score, and the weight value e4 of the authentication mechanism policy score, and e1+e2+e3+e4=1;

[0209] The application protection score S is calculated using the following formula: 1-5 :

[0210]

[0211] Where Ei max is the corresponding full score of Ei;

[0212] Based on the obtained boundary protection score, network protection score, host protection score, data protection score and application protection score, the platform protection evaluation value S1 is calculated using the following formula:

[0213]

[0214] Where W 1-i The corresponding S 1-i The weight value of

[0215] The calculation of the access protection evaluation value specifically includes the following steps:

[0216] Indicators for access protection include identity authentication protection, encryption and transmission protection, and terminal access protection; they assess the security measures taken by users and devices when accessing new power business systems;

[0217] Identity authentication protection: Ensure that access devices in the new power business system meet strict identity authentication and permission control requirements; the assessment focuses on verifying the security and complexity of identity authentication methods, as well as the rationality and effectiveness of access control policies; these measures ensure that only authenticated users and devices are allowed to access the system, and ensure that all users and devices can only perform operations within their authorized scope;

[0218] Evaluate the use, application scope, security strength and effectiveness of multi-factor authentication in the target new power system, and obtain the identity authentication method strategy score F1;

[0219] Evaluate whether the access control policy complies with the principle of least privilege, the rationality of privilege allocation, the dynamic adjustment capability of privilege management, and the frequency and effectiveness of privilege review, and obtain the access control policy score F2;

[0220] Set the weight value f1 of the identity authentication method strategy score, the nonlinear adjustment parameter αf1 of the identity authentication method strategy score, and the logarithmic function influence parameter βf1;

[0221] The weight value f2 of the access control policy score, the nonlinear adjustment parameter αf2 of the access control policy score, and the logarithmic function influence parameter βf2;

[0222] The identity authentication protection score S is calculated using the following formula: 2-1 :

[0223]

[0224] Where Fi max is the full score of the corresponding Fi;

[0225] Regarding encryption and transmission protection: ensure the security of data in the transmission process of the new power business system; the focus of the assessment is on the encryption strength of the data transmission channel and the effectiveness of the key management strategy; these measures ensure that the data is not eavesdropped, tampered with or accessed without authorization during the transmission process, and protect the confidentiality, integrity and availability of the data;

[0226] Evaluate the version of the encryption protocol, key length, encryption algorithm selection and key management strategy implementation used in the target new power system, and obtain the encryption strength strategy score G1 of the data transmission channel;

[0227] Evaluate the key generation, storage, distribution and update strategies in the target new power system and obtain the key management strategy score G2;

[0228] Set the weight value g1 of the encryption strength strategy score of the data transmission channel, the nonlinear adjustment parameter αg1 of the encryption strength strategy score of the data transmission channel, and the logarithmic function influence parameter βg1;

[0229] Set the weight value g2 of the key management strategy score, the nonlinear adjustment parameter αg2 of the key management strategy score, and the logarithmic function influence parameter βg2;

[0230] The encryption and transmission protection score S is calculated using the following formula: 2-2 :

[0231]

[0232] Where Gi max is the full score of the corresponding Gi;

[0233] Terminal access protection: Ensure that access devices in the new power business system have taken adequate security measures when accessing the system to avoid potential security risks; this assessment includes a comprehensive assessment of network access control, isolation measures for untrusted devices, and security protection measures when devices are accessed; the effectiveness of these measures directly affects the overall security and stability of the system;

[0234] Evaluate whether the equipment provided by the supplier has passed the NAC mechanism with a set level of strictness, NAC coverage, compliance check mechanism, and isolation measures, and obtain the network access control strategy score H1;

[0235] Evaluate the isolation measures of the target new power system for non-trusted devices, the effectiveness of the isolation strategy, the safety configuration of the isolation area and the monitoring measures of the isolation equipment, and obtain the non-trusted device isolation strategy score H2;

[0236] Evaluate the security protection measures, device security configuration, access point monitoring, dynamic protection strategy, and real-time response mechanism provided by the vendor when the device is accessed to the system, and obtain the device access protection measures strategy score H3;

[0237] Set the weight value h1 of the network access control strategy score, the nonlinear adjustment parameter αh1 of the network access control strategy score, and the logarithmic function influence parameter βh1;

[0238] Set the weight value h2 of the untrusted device isolation strategy score, the nonlinear adjustment parameter αh2 of the untrusted device isolation strategy score, and the logarithmic function influence parameter βh2;

[0239] Set the weight value h3 of the device access protection measure strategy score, the nonlinear adjustment parameter αh3 of the device access protection measure strategy score, and the logarithmic function influence parameter βh3;

[0240] The terminal access protection score S is calculated using the following formula: 2-3 :

[0241]

[0242] In the formula, Hi max is the corresponding full score of Hi;

[0243] Based on the obtained identity authentication protection score, encryption and transmission protection score, and terminal access protection score, the access protection evaluation value S2 is calculated using the following formula:

[0244]

[0245] Where W 2-i The corresponding S 2-3 The weight value of

[0246] In the above calculation process, the indicator value is divided by its full score to standardize the scores of each sub-indicator so that the scores of different sub-indicators can be compared fairly. Then, the nonlinear adjustment parameter is set to amplify or reduce the score influence of a certain sub-indicator. The logarithmic function influence parameter is set to further adjust the smoothness of the score, especially when the score is close to the full score or lower. The set parameters make the score calculation more flexible and can accurately reflect the relative importance of each sub-indicator.

[0247] The calculation of the terminal protection evaluation value specifically includes the following steps:

[0248] Terminal protection indicators include access security protection, main body security protection and communication security protection;

[0249] For access security protection:

[0250] Evaluate whether the terminal equipment is connected to the management information area through a secure dedicated line and whether encryption authentication measures of a set strength are adopted, and obtain a score of I1 for dedicated line access and encryption authentication strategy;

[0251] Evaluate the security of terminal devices accessing the Internet region through the Internet channel and whether there are potential network threats, and obtain the Internet channel access strategy score I2;

[0252] Evaluate whether there is a situation of mixing terminal devices in different security zones and whether there are measures to ensure the effective implementation of the network isolation strategy, and obtain the security zone mixing principle strategy score I3;

[0253] Set the weight value i1 of the dedicated line access and encryption authentication policy score, the weight value i2 of the Internet channel access policy score, and the weight value i3 of the security zone hybrid principle policy score;

[0254] The access security protection score S is calculated using the following formula: 3-1

[0255]

[0256] Where Ij max is the full score of the corresponding Ij;

[0257] For the main body security protection:

[0258] Evaluate whether the terminal device complies with the requirements for closing the debug interface, the integrity and implementation of the interface closing, and obtain the debug interface closing strategy score J1;

[0259] Evaluate whether the device supports local and remote security upgrades, whether it can verify the legitimacy of the upgrade package and the implementation of the security upgrade function, and obtain a score of J2 for supporting the security upgrade strategy;

[0260] Evaluate whether the device performs identity authentication and encryption protection based on a unified password infrastructure and the security and compliance of encryption protection and identity authentication mechanisms, and obtain a score of J3 for identity authentication and encryption protection strategies;

[0261] Evaluate whether the device supports digital signature and verification of key software and firmware and the implementation of digital signature functions, and obtain a digital signature and verification capability strategy score of J4;

[0262] Evaluate the security monitoring and auditing functions of the equipment and the coverage and effectiveness of the monitoring and auditing functions, and obtain a security monitoring, auditing and analysis function strategy score of J5;

[0263] Evaluate the device's ability to manage secure access to IoT terminals and the effectiveness of access management functions, and obtain a score of J6 for IoT terminal secure access management strategy;

[0264] Set the weight value j1 of the debugging interface closing policy score, the weight value j2 of the security upgrade support policy score, the weight value j3 of the identity authentication and encryption protection policy score, the weight value j4 of the digital signature and verification capability policy score, the weight value j5 of the security monitoring, auditing and analysis function policy score, and the weight value j6 of the IoT terminal security access management policy score;

[0265] The following formula is used to calculate the main body safety protection score S 3-2 :

[0266]

[0267] In the formula max is the full score of the corresponding Ji;

[0268] For communication security protection:

[0269] Evaluate the security of local communication of terminal devices through different physical channels and the security and anti-interference ability of the channels, and obtain the local communication security strategy score K1;

[0270] Evaluate whether there is direct communication between terminals across regions and the effectiveness of restrictions on cross-regional communication, and obtain a score K2 for the cross-regional communication restriction strategy;

[0271] Evaluate the security and implementation of security measures of terminals that are not directly connected to the security zone when communicating with the management information zone terminals, and obtain the local communication filtering and verification strategy score K3;

[0272] Evaluate whether identity authentication and data encryption are implemented as required when communicating with Internet regional terminals and the effectiveness of identity authentication and encryption measures, and obtain a score of K4 for Internet regional communication security strategy;

[0273] Evaluate the anti-interference capability of the communication protocol on the management information area side, the security configuration of the channel, and the security configuration of the protocol and channel, and obtain the management information area communication security strategy score K5;

[0274] Set the weight value k1 of the local communication security policy score, the weight value k2 of the cross-region communication restriction policy score, the weight value k3 of the local communication filtering and verification policy score, the weight value k4 of the Internet region communication security policy score, and the weight value k5 of the management information region communication security policy score;

[0275] The communication security protection score S is calculated using the following formula: 3-3 :

[0276]

[0277] Where Ki max is the corresponding full score of Ki;

[0278] According to the obtained access security protection score, main body security protection score and communication security protection score, the terminal protection evaluation value S3 is calculated using the following formula:

[0279]

[0280] Where W 3-i The corresponding S 3-i The weight value of

[0281] S4. Based on the evaluation value obtained in step S3, a comprehensive calculation is performed to obtain a business security determination evaluation value of the target new power system; specifically comprising the following steps:

[0282] Set the risk value R1 of the boundary protection score, the risk value R2 of the network protection score, the risk value R3 of the host protection score, the risk value R4 of the data protection score, the risk value R5 of the application protection score, the risk value R6 of the identity authentication protection score, the risk value R7 of the encryption and transmission protection score, the risk value R8 of the terminal access protection score, the risk value R9 of the access security protection score, the risk value R10 of the main body security protection score and the risk value R11 of the communication security protection score; the risk value can be set by expert scoring;

[0283] Set the contribution f(B n ,R1), the contribution of network protection score f(B n ,R2), the contribution of host protection score f(Bn ,R3), the contribution of data protection score f(B n ,R4), the contribution of application protection score f(B n ,R5), the contribution of identity authentication protection score f(B n ,R6), the contribution of encryption and transmission protection scores f(B n ,R7), the contribution of terminal access protection score f(B n ,R8), the contribution of access security protection score f(B n ,R9), the contribution of the security protection score to the entity f(B n ,R10) and the contribution of communication security protection score f(B n ,R11); the contribution degree can be set by expert evaluation;

[0284] The calculation constant K is obtained using the following formula:

[0285] K=max(f(B n ,Rn))+δ

[0286] Where max(f(B n ,Rn)) represents f(B n ,R1)~f(B n , R11); δ is a positive number set to ensure that K>max(f(B n ,Rn));

[0287] Calculate the platform protection weight value w 平台防护 for

[0288] Calculate the access protection weight value w 接入防护 for

[0289] Calculate the terminal protection weight value w 终端防护 for

[0290] Set the platform protection weight value w 平台防护 , access protection weight value w 接入防护 and terminal protection weight value w 终端防护 Normalize:

[0291] Calculate the normalized platform protection weight value w' 平台防护 for

[0292]

[0293] Calculate the normalized access protection weight value w' 接入防护 for

[0294]

[0295] Calculate the normalized terminal protection weight value w' 终端防护 for

[0296]

[0297] Finally, the business security assessment value R of the target new power system is calculated using the following formula: total :

[0298]

[0299] Where C1 is the normalized constant of platform protection; C2 is the normalized constant of access protection; C3 is the normalized constant of terminal protection; kk is the set scaling factor; γ1 is the nonlinear transformation coefficient of platform protection; γ2 is the nonlinear transformation coefficient of access protection; γ3 is the nonlinear transformation coefficient of terminal protection; δ is the interaction effect coefficient;

[0300] S5. According to the business security assessment value obtained in step S4, the business security assessment of the target new power system is completed; specifically, the following steps are included:

[0301] According to the business security assessment value obtained in step S4, the business security assessment of the target new power system is completed:

[0302] Business security assessment value R total The larger it is, the better the risk protection capability of the target new power system and the better the business security.

[0303] like Figure 2The functional module schematic diagram of the system of the present invention is shown as follows: the system disclosed in the present invention for implementing the business security determination method for the new power system comprises a data acquisition module, an indicator construction module, an aspect evaluation module, an evaluation calculation module and a safety determination module; the data acquisition module, the indicator construction module, the aspect evaluation module, the evaluation calculation module and the safety determination module are connected in series in sequence; the data acquisition module is used to acquire the business data information of the target new power system, and upload the data information to the indicator construction module; the indicator construction module is used to construct the business security determination index of the target new power system based on the platform protection aspect, the access protection aspect and the terminal protection aspect according to the received data information and the acquired data information, and upload the data information to the aspect evaluation module; the aspect evaluation module is used to calculate the evaluation values ​​of the platform protection aspect, the access protection aspect and the terminal protection aspect according to the received data information and the constructed business security determination index, and upload the data information to the evaluation calculation module; the evaluation calculation module is used to comprehensively calculate the business security determination evaluation value of the target new power system according to the received data information and the obtained evaluation value, and upload the data information to the safety determination module; the safety determination module is used to complete the business security determination of the target new power system according to the received data information and the obtained business security determination evaluation value.

Claims

1. A method for determining business security of a new power system, comprising the following steps: S1. Obtain business data information of the target new power system; S2. According to the data information obtained in step S1, based on the platform protection, access protection and terminal protection, construct the business security judgment index of the target new power system; S3. Calculate the evaluation values ​​of platform protection, access protection and terminal protection respectively according to the business security judgment index constructed in step S2; S4. Based on the evaluation value obtained in step S3, a comprehensive calculation is performed to obtain a business security evaluation value of the target new power system; S5. According to the business security assessment value obtained in step S4, complete the business security assessment of the target new power system.

2. The method for determining the service security of a new power system according to claim 1, characterized in that According to the data information obtained in step S1, step S2 constructs the business security judgment index of the target new power system based on platform protection, access protection and terminal protection, which specifically includes the following steps: The business security judgment indicators of the target new power system include platform protection indicators, access protection indicators and terminal protection indicators; The platform protection indicators include border protection, network protection, host protection, data protection and application protection; The access protection indicators include identity authentication protection, encryption and transmission protection, and terminal access protection; The terminal protection indicators include access security protection, main body security protection and communication security protection.

3. The method for determining the service security of a new power system according to claim 2, characterized in that The evaluation value of the computing platform protection aspect described in step S3 specifically includes the following steps: Platform protection indicators include border protection, network protection, host protection, data protection, and application protection; For border protection: Evaluate the configuration and execution of the external access control policy and obtain the external access control policy score A1; Evaluate firewall rule settings, log auditing functions, and intrusion prevention functions, and get a firewall configuration strategy score of A2; Evaluate the configuration, deployment and response capabilities of the intrusion detection system and obtain an intrusion detection system configuration strategy score of A3; Set the weight value a1 of the external access control policy score, the weight value a2 of the firewall configuration policy score, and the weight value a3 of the intrusion detection system configuration policy score, and a1+a2+a3=1; The boundary protection score S is calculated using the following formula: 1-1 : Where Ai max is the corresponding full score of Ai; For network protection: Evaluate the effectiveness of the grid isolation strategy and obtain a score of B1 for the internal network isolation strategy; Evaluate the deployment and response capabilities of traffic monitoring tools and obtain a traffic monitoring strategy score of B2; Evaluate the security and stability of the routing strategy and obtain a routing strategy score of B3; Evaluate the rationality of VLAN division and obtain a VLAN division strategy score of B4; Evaluate the security of the SDN architecture and obtain a SDN security strategy score of B5; Set the weight value b1 of the internal network isolation policy score, the weight value b2 of the traffic monitoring policy score, the weight value b3 of the routing policy score, the weight value b4 of the VLAN division policy score, and the weight value b5 of the SDN security policy score, and b1+b2+b3+b4+b5=1; The network protection score S is calculated using the following formula: 1-2 : In the formula Bi max is the corresponding full score of Bi; Host protection: Evaluate the access control list and role-based access control mechanism, and obtain the server access control policy score C1; Evaluate the effectiveness of patch management policies and processes, and obtain a patch management policy score of C2; Evaluate the deployment and protection capabilities of malware protection tools, and obtain a malware detection and protection strategy score of C3; Set the weight value c1 of the server access control policy score, the weight value c2 of the patch management policy score, and the malware detection and protection policy score c3, and c1+c2+c3=1; The host protection score S is calculated using the following formula: 1-3 : In the formula, max is the full score of the corresponding Ci; For data protection: Evaluate the encryption measures for data during storage and transmission, and obtain a data encryption strategy score of D1; Evaluate the backup strategy and recovery test results, and obtain a data backup and recovery strategy score of D2; Evaluate the data access control policy and obtain a data access control policy score D3; Evaluate the data integrity protection measures and obtain a data integrity protection strategy score of D4; Set the weight value d1 of the data encryption policy score, the weight value d2 of the data backup and recovery policy score, the weight value d3 of the data access control policy score, and the weight value d4 of the data integrity protection policy score, and d1+d2+d3+d4=1; The data protection score S is calculated using the following formula: 1-4 : Where Di max is the full score of the corresponding Di; For application protection: Assess the secure coding standards in the application development process and obtain a secure coding standards strategy score of E1; Evaluate the effectiveness and response speed of the vulnerability management process and obtain a vulnerability management strategy score of E2; Evaluate the coverage and analysis capabilities of the log monitoring mechanism and obtain a log monitoring strategy score of E3; Evaluate the strength and security of the user authentication method, and get an authentication mechanism strategy score of E4; Set the weight value e1 of the security coding standard policy score, the weight value e2 of the vulnerability management policy score, the weight value e3 of the log monitoring policy score, and the weight value e4 of the authentication mechanism policy score, and e1+e2+e3+e4=1; The application protection score S is calculated using the following formula: 1-5 : Where Ei max is the corresponding full score of Ei; Based on the obtained boundary protection score, network protection score, host protection score, data protection score and application protection score, the platform protection evaluation value S1 is calculated using the following formula: Where W 1-i The corresponding S 1-i The weight value of .

4. The method for determining the service security of a new power system according to claim 3 is characterized in that The calculation of the access protection evaluation value described in step S3 specifically includes the following steps: Indicators for access protection include identity authentication protection, encryption and transmission protection, and terminal access protection; For identity authentication protection: Evaluate the use, application scope, security strength and effectiveness of multi-factor authentication in the target new power system, and obtain the identity authentication method strategy score F1; Evaluate whether the access control policy complies with the principle of least privilege, the rationality of privilege allocation, the dynamic adjustment capability of privilege management, and the frequency and effectiveness of privilege review, and obtain the access control policy score F2; Set the weight value f1 of the identity authentication method strategy score, the nonlinear adjustment parameter αf1 of the identity authentication method strategy score, and the logarithmic function influence parameter βf1; The weight value f2 of the access control policy score, the nonlinear adjustment parameter αf2 of the access control policy score, and the logarithmic function influence parameter βf2; The identity authentication protection score S is calculated using the following formula: 2-1 : In the formula, Fi max is the full score of the corresponding Fi; For encryption and transmission protection: Evaluate the version of the encryption protocol, key length, encryption algorithm selection and key management strategy implementation used in the target new power system, and obtain the encryption strength strategy score G1 of the data transmission channel; Evaluate the key generation, storage, distribution and update strategies in the target new power system and obtain the key management strategy score G2; Set the weight value g1 of the encryption strength strategy score of the data transmission channel, the nonlinear adjustment parameter αg1 of the encryption strength strategy score of the data transmission channel, and the logarithmic function influence parameter βg1; Set the weight value g2 of the key management strategy score, the nonlinear adjustment parameter αg2 of the key management strategy score, and the logarithmic function influence parameter βg2; The encryption and transmission protection score S is calculated using the following formula: 2-2 : Where Gi max is the full score of the corresponding Gi; For terminal access protection: Evaluate whether the equipment provided by the supplier has passed the NAC mechanism with a set level of strictness, NAC coverage, compliance check mechanism, and isolation measures, and obtain the network access control strategy score H1; Evaluate the isolation measures of the target new power system for non-trusted devices, the effectiveness of the isolation strategy, the safety configuration of the isolation area and the monitoring measures of the isolation equipment, and obtain the non-trusted device isolation strategy score H2; Evaluate the security protection measures, device security configuration, access point monitoring, dynamic protection strategy, and real-time response mechanism provided by the vendor when the device is accessed to the system, and obtain the device access protection measures strategy score H3; Set the weight value h1 of the network access control strategy score, the nonlinear adjustment parameter αh1 of the network access control strategy score, and the logarithmic function influence parameter βh1; Set the weight value h2 of the untrusted device isolation strategy score, the nonlinear adjustment parameter αh2 of the untrusted device isolation strategy score, and the logarithmic function influence parameter βh2; Set the weight value h3 of the device access protection measure strategy score, the nonlinear adjustment parameter αh3 of the device access protection measure strategy score, and the logarithmic function influence parameter βh3; The terminal access protection score S is calculated using the following formula: 2-3 : In the formula, Hi max is the corresponding full score of Hi; Based on the obtained identity authentication protection score, encryption and transmission protection score, and terminal access protection score, the access protection evaluation value S2 is calculated using the following formula: Where W 2-i The corresponding S 2-3 The weight value of .

5. The method for determining the service security of a new power system according to claim 4, characterized in that The calculation of the terminal protection evaluation value described in step S3 specifically includes the following steps: Terminal protection indicators include access security protection, main body security protection and communication security protection; For access security protection: Evaluate whether the terminal equipment is connected to the management information area through a secure dedicated line and whether encryption authentication measures of a set strength are adopted, and obtain a score of I1 for dedicated line access and encryption authentication strategy; Evaluate the security of terminal devices accessing the Internet region through the Internet channel and whether there are potential network threats, and obtain the Internet channel access strategy score I2; Evaluate whether there is a situation of mixing terminal devices in different security zones and whether there are measures to ensure the effective implementation of the network isolation strategy, and obtain the security zone mixing principle strategy score I3; Set the weight value i1 of the dedicated line access and encryption authentication policy score, the weight value i2 of the Internet channel access policy score, and the weight value i3 of the security zone hybrid principle policy score; The access security protection score S is calculated using the following formula: 3-1 Where Ij max is the full score of the corresponding Ij; For the main body security protection: Evaluate whether the terminal device complies with the requirements for closing the debug interface, the integrity and implementation of the interface closing, and obtain the debug interface closing strategy score J1; Evaluate whether the device supports local and remote security upgrades, whether it can verify the legitimacy of the upgrade package and the implementation of the security upgrade function, and obtain a score of J2 for supporting the security upgrade strategy; Evaluate whether the device performs identity authentication and encryption protection based on a unified password infrastructure and the security and compliance of encryption protection and identity authentication mechanisms, and obtain a score of J3 for identity authentication and encryption protection strategies; Evaluate whether the device supports digital signature and verification of key software and firmware and the implementation of digital signature functions, and obtain a digital signature and verification capability strategy score of J4; Evaluate the security monitoring and auditing functions of the equipment and the coverage and effectiveness of the monitoring and auditing functions, and obtain a security monitoring, auditing and analysis function strategy score of J5; Evaluate the device's ability to manage secure access to IoT terminals and the effectiveness of access management functions, and obtain a score of J6 for IoT terminal secure access management strategy; Set the weight value j1 of the debugging interface closing policy score, the weight value j2 of the security upgrade support policy score, the weight value j3 of the identity authentication and encryption protection policy score, the weight value j4 of the digital signature and verification capability policy score, the weight value j5 of the security monitoring, auditing and analysis function policy score, and the weight value j6 of the IoT terminal security access management policy score; The following formula is used to calculate the main body safety protection score S 3-2 : In the formula max is the full score of the corresponding Ji; For communication security protection: Evaluate the security of local communication of terminal devices through different physical channels and the security and anti-interference ability of the channels, and obtain the local communication security strategy score K1; Evaluate whether there is direct communication between terminals across regions and the effectiveness of restrictions on cross-regional communication, and obtain a score K2 for the cross-regional communication restriction strategy; Evaluate the security and implementation of security measures of terminals that are not directly connected to the security zone when communicating with the management information zone terminals, and obtain the local communication filtering and verification strategy score K3; Evaluate whether identity authentication and data encryption are implemented as required when communicating with Internet regional terminals and the effectiveness of identity authentication and encryption measures, and obtain a score of K4 for Internet regional communication security strategy; Evaluate the anti-interference capability of the communication protocol on the management information area side, the security configuration of the channel, and the security configuration of the protocol and channel, and obtain the management information area communication security strategy score K5; Set the weight value k1 of the local communication security policy score, the weight value k2 of the cross-region communication restriction policy score, the weight value k3 of the local communication filtering and verification policy score, the weight value k4 of the Internet region communication security policy score, and the weight value k5 of the management information region communication security policy score; The communication security protection score S is calculated using the following formula: 3-3 : Where Ki max is the corresponding full score of Ki; According to the obtained access security protection score, main body security protection score and communication security protection score, the terminal protection evaluation value S3 is calculated using the following formula: Where W 3-i The corresponding S 3-i The weight value of .

6. The method for determining the service security of a new power system according to claim 5, characterized in that The step S4, according to the evaluation value obtained in step S3, comprehensively calculates and obtains the business security judgment evaluation value of the target new power system, which specifically includes the following steps: Set the risk value R1 for the boundary protection score, the risk value R2 for the network protection score, the risk value R3 for the host protection score, the risk value R4 for the data protection score, the risk value R5 for the application protection score, the risk value R6 for the identity authentication protection score, the risk value R7 for the encryption and transmission protection score, the risk value R8 for the terminal access protection score, the risk value R9 for the access security protection score, the risk value R10 for the entity security protection score, and the risk value R11 for the communication security protection score; Set the contribution f(B n ,R1), the contribution of network protection score f(B n ,R2), the contribution of host protection score f(B n ,R3), the contribution of data protection score f(B n ,R4), the contribution of application protection score f(B n ,R5), the contribution of identity authentication protection score f(B n ,R6), the contribution of encryption and transmission protection scores f(B n ,R7), the contribution of terminal access protection score f(B n ,R8), the contribution of access security protection score f(B n ,R9), the contribution of the security protection score to the entity f(B n ,R10) and the contribution of communication security protection score f(B n ,R11); The calculation constant K is obtained using the following formula: K=max(f(B n ,Rn))+δ Where max(f(B n ,Rn)) represents f(B n ,R1)~f(B n , R11); δ is a positive number set to ensure that K>max(f(B n ,Rn)); Calculate the platform protection weight value w 平台防护 for Calculate the access protection weight value w 接入防护 for Calculate the terminal protection weight value w 终端防护 for Set the platform protection weight value w 平台防护 , access protection weight value w 接入防护 and terminal protection weight value w 终端防护 Normalize: Calculate the normalized platform protection weight value w' 平台防护 for Calculate the normalized access protection weight value w' 接入防护 for Calculate the normalized terminal protection weight value w' 终端防护 for Finally, the business security assessment value R of the target new power system is calculated using the following formula: total : Where C1 is the normalized constant of platform protection; C2 is the normalized constant of access protection; C3 is the normalized constant of terminal protection; kk is the set scaling factor; γ1 is the nonlinear transformation coefficient of platform protection; γ2 is the nonlinear transformation coefficient of access protection; γ3 is the nonlinear transformation coefficient of terminal protection; δ is the interaction effect coefficient.

7. The method for determining the service security of a new power system according to claim 6, characterized in that The step S5, according to the business security assessment value obtained in step S4, completes the business security assessment of the target new power system, which specifically includes the following steps: According to the business security assessment value obtained in step S4, the business security assessment of the target new power system is completed: Business security assessment value R total The larger it is, the better the risk protection capability of the target new power system and the better the business security.

8. A system for implementing the service security determination method for a new power system according to any one of claims 1 to 7, characterized in that It includes a data acquisition module, an indicator construction module, an aspect evaluation module, an evaluation calculation module and a safety determination module; the data acquisition module, the indicator construction module, the aspect evaluation module, the evaluation calculation module and the safety determination module are connected in series in sequence; the data acquisition module is used to acquire the business data information of the target new power system, and upload the data information to the indicator construction module; The indicator construction module is used to construct the business security judgment index of the target new power system based on the platform protection aspect, the access protection aspect and the terminal protection aspect according to the received data information, and upload the data information to the aspect evaluation module; the aspect evaluation module is used to calculate the evaluation values ​​of the platform protection aspect, the access protection aspect and the terminal protection aspect according to the received data information and the constructed business security judgment index, and upload the data information to the evaluation calculation module; The evaluation and calculation module is used to comprehensively calculate the business safety judgment evaluation value of the target new power system according to the received data information and the obtained evaluation value, and upload the data information to the safety judgment module; The safety determination module is used to complete the business safety determination of the target new power system according to the received data information and the obtained business safety determination evaluation value.

Images