Baseline Test Technology for Electric Power Information System Security
Based on the comprehensive inspection of electric power information system network layout and security status quo,and combined with IS027001 international standards,this paper formulates the electric power enterprise information system security framework bsed on security baseline.The framework divides the complex environment of electric power information system into several key parts:network devices,the host,database,middleware and application system.With a focus on the key parts,the safe security baselines are set up respectively in order to eliminate most of the potential security hazards.The framework highlights the importance of online system daily maintenance and operator activities in the whole security system,achieving more comprehensive security measures by developing the original security measure only from the perspective of a single computer network into a technology-management integrated security framework.
electric power information systeminformation securitybaseline testsecurity framework