中山电网EMS系统信息安全管理及安全策略研究
|
摘要
当今社会,信息化的浪潮正在迅速渗透到国家建设的各个层面。信息化是一把双刃剑,它在为我们带来巨大便利的同时,也留下了信息安全隐患。
信息是一种资产,对一个组织而言具有重要价值,因而需要妥善保护。对于企业而言,信息安全保障商务的连续性,减少商务的损失,最大限度地获取投资和商务的回报。信息的保密性、完整性和可用性对保持竞争优势、资金流动、效益、法律符合性和商务形象都是至关重要的。
信息安全管理特别是网络信息安全管理对我们是一个全新的课题,还没有形成健全的法律、法规,也无章可循,管理工作比较混乱。要从根本上解决国家、企业和个人的信息安全问题,构筑起一套可靠的信息安全体系,就必须加强理论研究,分析现状,找到薄弱环节,指出症结所在,形成良好的、可行的管理规范。
本文从技术层面和人文角度阐述中山电网EMS系统的信息安全管理,在广泛研究国内外信息安全管理的基础上,从法律规范、技术防范、管理体制等方面,深入分析讨论现行管理的成败得失,找出严重威胁信息安全的问题并提出改进意见,并提炼出中山电网EMS系统安全管理策略,研究在中山电网EMS系统如何建立以人为本的信息安全管理机制,充分调动员工的积极性、主动性、创造性,确保信息的绝对安全。
Nowadays, the tide of information-based is rapidly infiltrating into various sides of nations’buildings. Information-based is a double-knife-edges sword. It brings us enormous benefits, and at the same time brings us the invisible problems of information security.
Information is a sort of asset. It is important for an organization. So it must be safeguarded properly. For the key organizations of the governments, information security may prevent the military and governmental secret to be revealed; for corporations, information security may ensure continuity of business affairs: reducing loss, obtaining the furthest return of investment. The integrity, availability, confidentiality, and reliability of information are vital to keep competitive advantages, capital fluxion, profit, law accordance and commerce figure.
The management of information security is a new topic, especially information security of network. There have no right law systems, and no rules to follow. The management is confusion. In order to solve the information security problem of nations, armies, enterprises and individuals, build a dependable management system of information security, we must investigate the actualities,build the feasible and favorable managing criterion.
This paper aims at information security to do subject research, to expatiate the management of information security on technical lay and humanistic point of view. Basing on researching widely the domestic and overseas administrant theory, this paper will analyze deeply existent success and failure on the sides of law criterion, technology defense, manage system and so on. And then it will find out the problem and tell how to solve it.
The paper makes use for reference of developed countries, such as U.S.A, to conclude the information security policies of key organizations, and investigates how to build a management system based on humanism, to inspire employee with enthusiasm, go-ahead’s and creativity, in order to insure information security.
信息是一种资产,对一个组织而言具有重要价值,因而需要妥善保护。对于企业而言,信息安全保障商务的连续性,减少商务的损失,最大限度地获取投资和商务的回报。信息的保密性、完整性和可用性对保持竞争优势、资金流动、效益、法律符合性和商务形象都是至关重要的。
信息安全管理特别是网络信息安全管理对我们是一个全新的课题,还没有形成健全的法律、法规,也无章可循,管理工作比较混乱。要从根本上解决国家、企业和个人的信息安全问题,构筑起一套可靠的信息安全体系,就必须加强理论研究,分析现状,找到薄弱环节,指出症结所在,形成良好的、可行的管理规范。
本文从技术层面和人文角度阐述中山电网EMS系统的信息安全管理,在广泛研究国内外信息安全管理的基础上,从法律规范、技术防范、管理体制等方面,深入分析讨论现行管理的成败得失,找出严重威胁信息安全的问题并提出改进意见,并提炼出中山电网EMS系统安全管理策略,研究在中山电网EMS系统如何建立以人为本的信息安全管理机制,充分调动员工的积极性、主动性、创造性,确保信息的绝对安全。
Nowadays, the tide of information-based is rapidly infiltrating into various sides of nations’buildings. Information-based is a double-knife-edges sword. It brings us enormous benefits, and at the same time brings us the invisible problems of information security.
Information is a sort of asset. It is important for an organization. So it must be safeguarded properly. For the key organizations of the governments, information security may prevent the military and governmental secret to be revealed; for corporations, information security may ensure continuity of business affairs: reducing loss, obtaining the furthest return of investment. The integrity, availability, confidentiality, and reliability of information are vital to keep competitive advantages, capital fluxion, profit, law accordance and commerce figure.
The management of information security is a new topic, especially information security of network. There have no right law systems, and no rules to follow. The management is confusion. In order to solve the information security problem of nations, armies, enterprises and individuals, build a dependable management system of information security, we must investigate the actualities,build the feasible and favorable managing criterion.
This paper aims at information security to do subject research, to expatiate the management of information security on technical lay and humanistic point of view. Basing on researching widely the domestic and overseas administrant theory, this paper will analyze deeply existent success and failure on the sides of law criterion, technology defense, manage system and so on. And then it will find out the problem and tell how to solve it.
The paper makes use for reference of developed countries, such as U.S.A, to conclude the information security policies of key organizations, and investigates how to build a management system based on humanism, to inspire employee with enthusiasm, go-ahead’s and creativity, in order to insure information security.
引文
[1]蔡春元.基于EMS的地区电网混杂控制结构AVC系统.2008年中国电机工程学会年会论文集.中国电机工程学会.北京:中国电力出版社,2008:212-215
[2]王官书.信息安全管理及卫星发射中心信息安全对策研究:[工商管理硕士学位论文],四川成都:电子科技大学,2003
[3]蔡春元.电网调度自动化系统的安全运行问题探讨.继电器,2005,VOL33(No.7):33-35
[4]张红旗,王新昌,杨英杰,等.信息安全管理.北京:人民邮电出版社,2007:1-3
[5]戚文静,徐功文,赵莉等.网络安全与管理.北京:中国水利水电出版社,2008:2-4
[6]刘美兰.电力行业管理信息系统网络安全研究:[管理科学硕士学位论文],云南昆明:昆明理工大学,2003
[7] Raymond Mcleod.Jr. Management Information System. (张成洪等译).北京:电子工业出版社,2006:77-80
[8]姜绍燕.密罐技术及其在防火墙系统中的应用探讨.特区电力,2005,VOLl5(No.4):31-33
[9] Bruce Schneier .应用秘码学(吴世忠等译).北京:机械工业出版社,2000:81-90
[10] Andrew S.Tanenbaum.Computer Networks (Third Edition). U.S.A: Prentice–Hall Interntional,Inc.:641-642
[11] Gary P.Schneider. Electronic Commerce. (成栋,韩婷婷等译).北京:机械工业出版社,2006:259-280
[12]辛耀中.新一代电网调度自动化系统.电力系统自动化,1999,VOL23(No.2):13-16
[13]王士政.电网调度自动化与配网自动化技术.北京:中国水利水电出版社,2002:12-18
[14]李先彬.电力系统自动化.北京:中国电力出版社,2004:130-140
[15]王益民.调度自动化系统及数据网络的安全防护.电力系统自动化,1999,VOL23(No.2):13-16
[16] Markus Schumacher, Eduardo Fernandez-Buglioni, Duane Hybertson, et al. Security Patterns: Integrating Security and Systems Engineering. U.S.A: John Wiley&Sons, Inc, 2006:281-284
[17] Christopher M.king. Curtis E.Dalton.T.Ertom Osmanoglu.安全体系结构的设计、部署与操作.北京:清华大学出版社,2003:28-45
[18]吴昌伦.王毅刚.信息安全管理与管理体系.中国计算机用户. 2003,VOL141(No.41):41-42
[19] Andrew Nash,William Duane,Celia Joseph等.公钥基础设施(PKI).北京:清华大学出版社,2002:38-45
[20]曹国法.中小企业信息化问题研究.河南郑州:郑州大学出版社,2003:20-23
[21]余凯成,程文文,陈维政. MBA人力资源管理.辽宁大连:大连理工出版社,2006:135-144
[2]王官书.信息安全管理及卫星发射中心信息安全对策研究:[工商管理硕士学位论文],四川成都:电子科技大学,2003
[3]蔡春元.电网调度自动化系统的安全运行问题探讨.继电器,2005,VOL33(No.7):33-35
[4]张红旗,王新昌,杨英杰,等.信息安全管理.北京:人民邮电出版社,2007:1-3
[5]戚文静,徐功文,赵莉等.网络安全与管理.北京:中国水利水电出版社,2008:2-4
[6]刘美兰.电力行业管理信息系统网络安全研究:[管理科学硕士学位论文],云南昆明:昆明理工大学,2003
[7] Raymond Mcleod.Jr. Management Information System. (张成洪等译).北京:电子工业出版社,2006:77-80
[8]姜绍燕.密罐技术及其在防火墙系统中的应用探讨.特区电力,2005,VOLl5(No.4):31-33
[9] Bruce Schneier .应用秘码学(吴世忠等译).北京:机械工业出版社,2000:81-90
[10] Andrew S.Tanenbaum.Computer Networks (Third Edition). U.S.A: Prentice–Hall Interntional,Inc.:641-642
[11] Gary P.Schneider. Electronic Commerce. (成栋,韩婷婷等译).北京:机械工业出版社,2006:259-280
[12]辛耀中.新一代电网调度自动化系统.电力系统自动化,1999,VOL23(No.2):13-16
[13]王士政.电网调度自动化与配网自动化技术.北京:中国水利水电出版社,2002:12-18
[14]李先彬.电力系统自动化.北京:中国电力出版社,2004:130-140
[15]王益民.调度自动化系统及数据网络的安全防护.电力系统自动化,1999,VOL23(No.2):13-16
[16] Markus Schumacher, Eduardo Fernandez-Buglioni, Duane Hybertson, et al. Security Patterns: Integrating Security and Systems Engineering. U.S.A: John Wiley&Sons, Inc, 2006:281-284
[17] Christopher M.king. Curtis E.Dalton.T.Ertom Osmanoglu.安全体系结构的设计、部署与操作.北京:清华大学出版社,2003:28-45
[18]吴昌伦.王毅刚.信息安全管理与管理体系.中国计算机用户. 2003,VOL141(No.41):41-42
[19] Andrew Nash,William Duane,Celia Joseph等.公钥基础设施(PKI).北京:清华大学出版社,2002:38-45
[20]曹国法.中小企业信息化问题研究.河南郑州:郑州大学出版社,2003:20-23
[21]余凯成,程文文,陈维政. MBA人力资源管理.辽宁大连:大连理工出版社,2006:135-144