【正文】 ..........................................................................2 相關(guān)的安全防護(hù)法規(guī) ...................................................................................................4 電力二次系統(tǒng)安全防護(hù)策略 .......................................................................................5 電力二 次系統(tǒng)的安全區(qū)劃分 .......................................................................................5 電力二次系統(tǒng)四安全區(qū)拓?fù)浣Y(jié)構(gòu) ...............................................................................8 電力二次系統(tǒng)安全防護(hù)方案的實(shí)施 ...........................................................................9 3. 電力二次系統(tǒng)安全防護(hù)技術(shù) .................................................................................................10 電力數(shù)據(jù)通信網(wǎng)絡(luò)的安全防護(hù) .................................................................................10 備份與恢復(fù) ................................................................................................................. 11 防病毒措施 .................................................................................................................12 防火墻 .........................................................................................................................12 入侵檢測 IDS.............................................................................................................12 主機(jī)防護(hù) .....................................................................................................................12 數(shù)字證書與認(rèn)證 .........................................................................................................13 專用安全隔離裝置 .....................................................................................................15 IP 認(rèn)證加密裝置 ........................................................................................................16 WEB 服務(wù)的使用與防護(hù) ............................................................................................17 EMAIL 的使用 .............................................................................................................17 計算機(jī)系統(tǒng)本地訪問控制 .........................................................................................17 遠(yuǎn)程撥號訪問 .............................................................................................................18 線路加密設(shè)備 .............................................................................................................19 安全 “蜜罐 ”.............................................................................................................19 應(yīng)用程序安全 .............................................................................................................19 關(guān)鍵應(yīng)用系統(tǒng)服務(wù)器安全增強(qiáng) .................................................................................20 安全審計 .....................................................................................................................21 安全產(chǎn)品整體部署 .....................................................................................................22 4. 調(diào)度中心（地調(diào)及以上）二次系統(tǒng)安全防護(hù)方案 .............................................................22 調(diào)度中心各系統(tǒng)安全區(qū)的劃分 .................................................................................22 業(yè)務(wù)系統(tǒng)分析 .............................................................................................................23 調(diào)度控制中心的安全部署 .........................................................................................35 5. 配電二次系統(tǒng)安全防護(hù)方案 .................................................................................................37 配電二次系統(tǒng)典型配置 .............................................................................................37 配電二次系統(tǒng)邊界分析 ............................................................................................. 38 i 配電二次系統(tǒng)物理邊界和安全部署參考圖 .............................................................41 6. 變電站二次系統(tǒng)安全防護(hù)方案 .............................................................................................42 變電站二次應(yīng)用系統(tǒng)環(huán)境分析 .................................................................................42 變電站二次系統(tǒng)邊界分析 .........................................................................................44 變電站二次系統(tǒng)安全整體部署圖 .............................................................................46 7. 發(fā)電廠二次系統(tǒng)安全防護(hù)方案 .............................................................................................47 參考邏輯結(jié)構(gòu) .............................................................................................................47 整體安全部署 .............................................................................................................51 8. 安全管理 .................................................................................................................................53 附錄一 附錄二 附錄三 附錄四 附錄五 建立完善的安全管理組織機(jī)構(gòu) .................................................................................53 安全評估的管理 .........................................................................................................54 具體安全策略的管理 .................................................................................................54 工程實(shí)施的安全管理 .................................................................................................54 設(shè)備、應(yīng)用及服務(wù)的接入管理 .................................................................................54 建立完善的安全管理制度 .........................................................................................55 運(yùn)行管理 .....................................................................................................................55 應(yīng)急處理 .....................................................................................................................57 聯(lián)合防護(hù) .....................................................................................................................57 數(shù)據(jù)資源安全等級的 CIA 測度 .....