GB/Z 25320.1-2010Power systems management and associated information exchange - Data and communications security - Part 1: Communication network and system security - Introduction to security issues (English PDF)

1.1 Scope

The scope of this part of GB /Z 25320 is the information security of power system control operation. The main purpose of this section is "as IEC TC57 Safety of communication protocols developed, in particular safety of IEC 60870-5, IEC 60870-6, IEC 61850, IEC 61970 and IEC 61968 All, to undertake the development of standards; commitment to end-to-end safety standards and technical report of the development. "

1.2 Purpose

Specific purpose includes.

- GB /Z 25320.1 introduced the other parts of GB /Z 25320, the main introduction to the reader applied to the power system operation information All aspects of safety knowledge - GB /Z 25320.3 ~ GB /Z 25320.6 specifies the IEC TC57 communication protocol safety standards. Can use these standards mentioned It is safe for protocols at all levels, depending on the protocols and parameters selected for a particular implementation. Again, they have been designed For backward compatibility and can be phased implementation;

- GB /Z 25320.7 relates to one of many possible areas of end-to-end information security that enhances support for power system transport Line communication network to conduct a comprehensive management;

- The rest of GB /Z 25320 follow more areas of information security.

Safety, security and reliability in the power industry are always important issues in system design and operation. As the industry grows more and more dependent on Depending on the information infrastructure, the information security is becoming increasingly important, which is the reason for the development of information security standards. Some new threats are already around To deregulated electricity markets, where knowledge of competitors' assets and their systems operations may benefit, intercepted Such information is very likely to happen. In addition, unintended behavior (such as carelessness and natural disasters) can create information Into danger. The additional threats now posed by terrorism have become apparent.

1) ATIS (Aliance for Telecommunications Industry Solutions) [The United States for Communication and Related Information Technology rapid development and promotion of technology And running standards organizations. ATIS has been accredited by the American National Standards Institute (ANSI). ].FS-1037C expansion, US federal government telecommunications items Purpose Standard terminology.

Although there are many definitions of "end-to-end" security, a standard definition (multiple representations) is. "1. The use of cryptographic technology Security of information in a messaging system or a protected distribution system means protection from the point of origin to the point of destination. 2. Information system In the information from the starting point to the point of security "1). Based on this definition to start the four standards for IEC TC57 The security of communication protocol sets is enhanced because these communication protocol sets are considered to be the obvious first for security control of power system control operations step. However, these security enhancements address only the security needs between the two systems and do not address the real "end-to-end" End "security, including security measures, security enforcement, intrusion detection, robustness of internal systems and applications, and broader security needs.

Therefore, the present concluding remarks of this chapter is very important.I recognize the addition of a firewall or simply the use of protocol encryption, such as adding links Bump-in-the-wire or even Virtual Private Network (VPN) technology does not seem to be sufficient in many cases. Security is True "end-to-end" requirements to ensure certified access to sensitive power system equipment, authorized access to sensitive market data, Rely on timely and timely implementation of equipment functions and equipment failure information, backup of critical systems and audits that allow the detection and reproduction of decisive events