
基本信息:
- 专利标题: 一种电力数据网络安全测试方法
- 专利标题(英):Security testing method for power data network
- 申请号:CN201711437621.6 申请日:2017-12-26
- 公开(公告)号:CN108055280A 公开(公告)日:2018-05-18
- 发明人: 王世文 , 舒新建 , 张勇 , 王春迎 , 吴利杰 , 盛磊 , 王慕维 , 王雷
- 申请人: 国网河南省电力公司信息通信公司 , 国家电网公司
- 申请人地址: 河南省郑州市嵩山南路87号;
- 专利权人: 国网河南省电力公司信息通信公司,国家电网公司
- 当前专利权人: 国网河南省电力公司信息通信公司,国家电网公司
- 当前专利权人地址: 河南省郑州市嵩山南路87号;
- 代理机构: 郑州金成知识产权事务所
- 代理人: 郭增欣
- 主分类号: H04L29/06
- IPC分类号: H04L29/06
The invention discloses a security testing method for a power data network. A security test is performed on the data network according to an operation state of the power data network; and a security test implementation process comprises a preparatory stage, an identification stage, an analysis stage and a risk control planning stage, wherein the preparatory stage comprises the steps of determiningan evaluation range, establishing an evaluation organization, determining an evaluation tool, determining a risk control strategy for a risk evaluation process, compiling a risk evaluation scheme, and performing risk evaluation training and evaluation object backup, so as to guarantee that risk evaluation can be implemented smoothly and orderly according to a plan and a risk is controllable; theidentification stage comprises the steps of finishing asset identification, threat identification, vulnerability identification and security measure identification, thereby providing a basis for the analysis stage; and the analysis stage comprises the steps of arranging on the basis of the identification and performing asset analysis, threat analysis, vulnerability analysis, security measure analysis and comprehensive risk analysis, thereby drawing a conclusion for a security risk level of the power data network.