作者：

谢增孝，张信情，冯丰业，朱继峰，徐昊（浙江浙能中煤舟山煤电有限责任公司，浙江 舟山 316100）

孙科达（浙江省能源集团有限公司，浙江 杭州 310063）

摘要：当前，新的攻击手段和攻击方式不断出现，要求防护体系不断加 强以应对新形势。电力系统是最早关注网络信息安全问题的行业，历经 10余年电力工控系统安全防护建设，已经初步建成了安全分区、专网专 用、横向隔离、纵向认证的电力监控系统安防体系。然而，电力监控系 统信息安全危机应急处置的水平及能力还存在较大不足，具体体现在应 急机制不完善、应急保障缺失、应急演练不到位、事故处置经验不足等 方面。电力监控系统信息安全应急管理体系的标准化研究有助于在各个 发电厂进一步推广应用，有助于应急处置经验的分享，有助于进一步提 高电力工控领域的应急管理水平。

关键词：电力系统；工控系统；应急处置

Abstract: In the new period , new cyber attack methods continue to appear, which inevitably requires the protection system to constantly updated and strengthened. Electric power system is the first to follow network information security. After more than 10 years of security protection construction of power control system, a security system of power supervisory system with security zoning, private network, horizontal isolation and vertical certification has been preliminarily established. However, with the gradual improvement of the information security protection system of the power supervisory system, there are still great deficiencies in ability of the information security crisis emergency response of the power supervisory system, which are embodied in the imperfect emergency mechanism, the lack of emergency support, the lack of emergency drill, the lack of experience in accident disposal and so on. The research on the standardization of information security emergency management system of power supervisory system will help to further promote the application in various power plants, share the experience of emergency disposal, and further improve the level of emergency management in the field of electric industrial control system.

Key words: Power system; Industrial control system; Emergency response

在线预览：电厂网络安全应急处置研究.pdf

摘自《自动化博览》2021年11月刊