【正文】 XX 電網(wǎng)信息安全平臺(tái)等級保護(hù)模塊安全技術(shù)架構(gòu)規(guī)劃方案目 錄第 1 章 信息安全背景 ..................................................................105 綜述 ...............................................................................105 電網(wǎng)現(xiàn)狀概況 .....................................................................105第 2 章 XX 電網(wǎng)工作方法說明 ............................................................107 工作方法流程 .......................................................................107 參考標(biāo)準(zhǔn) ...........................................................................109 工作方法參考 .......................................................................110 ESA 企業(yè)安全架構(gòu)模型 ........................................................110 企業(yè)安全架構(gòu)技術(shù)方法 ........................................................111第 3 章 XX 電網(wǎng)安全技術(shù)目標(biāo) ............................................................112 安全需求總結(jié) .......................................................................112 技術(shù)風(fēng)險(xiǎn)需求 ..................................................................112 南方電網(wǎng)考核需求 ..............................................................115 國家等保需求 ..................................................................116 安全技術(shù)目標(biāo) .......................................................................116 安全技術(shù)架構(gòu)設(shè)計(jì)原則 ...............................................................117第 4 章 XX 電網(wǎng)安全技術(shù)功能服務(wù)組件框架 ................................................118 安全技術(shù)功能服務(wù)組件目錄定義 .......................................................118 安全技術(shù)功能服務(wù)組件定義 ...........................................................119 身份與信任管理目錄 ............................................................119 訪問控制目錄 ..................................................................123 信息流控制目錄 ................................................................125 完整性控制目錄 ................................................................129 安全審計(jì)管理目錄 ..............................................................134第 5 章 XX 電網(wǎng)安全技術(shù)功能服務(wù)組件部署設(shè)計(jì) ............................................138 網(wǎng)絡(luò)安全區(qū)域劃分 ...................................................................138 省公司網(wǎng)絡(luò)區(qū)域 ................................................................140 地區(qū)供電局網(wǎng)絡(luò)區(qū)域 ............................................................142 電網(wǎng)安全技術(shù)部署設(shè)計(jì) .............................................................143 管理信息大區(qū)網(wǎng)絡(luò)區(qū)域安全技術(shù)部署設(shè)計(jì) ..........................................143 省公司網(wǎng)絡(luò)安全技術(shù)部署設(shè)計(jì) ....................................................145 地區(qū)網(wǎng)絡(luò)安全技術(shù)部署設(shè)計(jì) ......................................................156第 6 章 XX 電網(wǎng)安全技術(shù)建設(shè)規(guī)劃 ........................................................157 項(xiàng)目一 集中用戶管理、身份認(rèn)證及授權(quán)平臺(tái) ............................................157 安全現(xiàn)狀 ......................................................................157 項(xiàng)目目標(biāo) ......................................................................157 項(xiàng)目范圍 ......................................................................158 項(xiàng)目內(nèi)容 ......................................................................158 平臺(tái)接口要求 ..................................................................167 項(xiàng)目實(shí)施要點(diǎn) ..................................................................171 項(xiàng)目周期和推進(jìn)步驟 ............................................................172 項(xiàng)目二 終端安全管理及域管理 ........................................................173 安全現(xiàn)狀 ......................................................................173 項(xiàng)目目標(biāo) ......................................................................174 項(xiàng)目范圍 ......................................................................174 項(xiàng)目內(nèi)容 ......................................................................174 項(xiàng)目實(shí)施要點(diǎn) ..................................................................191 項(xiàng)目周期和推進(jìn)步驟 ............................................................192 項(xiàng)目三 網(wǎng)絡(luò)安全優(yōu)化 ................................................................193 安全現(xiàn)狀 ......................................................................193 項(xiàng)目目標(biāo) ......................................................................193 項(xiàng)目范圍 ......................................................................193 項(xiàng)目內(nèi)容 ......................................................................193 項(xiàng)目實(shí)施要點(diǎn) ..................................................................211 項(xiàng)目周期與推進(jìn)步驟 ............................................................211 項(xiàng)目四 應(yīng)用安全改進(jìn) ................................................................212 安全現(xiàn)狀 ......................................................................212 項(xiàng)目目標(biāo) ......................................................................213 項(xiàng)目范圍 ......................................................................213 項(xiàng)目內(nèi)容 ......................................................................213 項(xiàng)目實(shí)施要點(diǎn) ..................................................................219 項(xiàng)目實(shí)施規(guī)劃 ..................................................................219 項(xiàng)目五 主機(jī)及設(shè)備安全 ..............................................................220 安全現(xiàn)狀 ......................................................................220 項(xiàng)目目標(biāo) ......................................................................221 項(xiàng)目范圍 ......................................................................221 項(xiàng)目內(nèi)容 ......................................................................222 項(xiàng)目實(shí)施要點(diǎn) ..................................................................228 項(xiàng)目周期和推進(jìn)步驟 ............................................................228 項(xiàng)目六 統(tǒng)一安全事件與日志監(jiān)控中心 ..................................................230 項(xiàng)目目標(biāo) ......................................................................230 項(xiàng)目范圍 ......................................................................231 項(xiàng)目內(nèi)容 ......................................................................231 項(xiàng)目實(shí)施要點(diǎn) ..................................................................249 項(xiàng)目周期和推進(jìn)步驟 ............................................................249 項(xiàng)目七 電子文檔安全 .....