A New Security Baseline Reinforcement Method for the Power Information System

Abstract

Power information is a typical distributed interconnect system, faced with a complex network security problems. It still lacks a systematic method for the design and evaluation of system security. The authors comprehensively survey the layout of the power network and also ISO27001 international standards, and proposed a new security baseline reinforcement method for the power information system. By using the multi-class fuzzy comprehensive judgment model and the SSE-CMM method, the authors proved the reinforcement method is reliable in theory. This method combines ISO27001 PDCA model with the security baseline testing process, and applies ITU-T X.805 security architecture to the testing indicators extraction process, which makes the security evaluation process for the power information system quick and practical.