The invention relates to the technical field of
network security operation and maintenance, and discloses an SCCD-plus model-based
network security equipment unified digital governance method, which comprises the following steps of: constructing information following IEC 61850
system standards, expanding asset ledgers,
network topology and the like, redefining SCCD model files of
network security equipment and a
station control layer host model, and establishing an SCCD model file of the network security equipment and the
station control layer host model; the method comprises the following steps: acquiring actual operation configuration values of network security equipment and a
station level host, checking and merging with a configuration fixed value baseline in an SCCD model file, generating an SCCD-plus archived file, instantiating a model of target equipment, generating a CID-plus file, and applying the CID-plus file to complete automatic configuration. According to the invention, unified acquisition and management of incremental equipment and stock equipment are realized, automatic configuration,
compliance check and
security policy deployment of network security equipment are supported, the efficiency and accuracy of
network security management are effectively improved, and the operation and maintenance cost is reduced.