Research on Security Baseline Standard of Electric Power System

Information assets of electric power system are currently under increasing security risks. An important reason causing the problem is that IT manager does not configure and manage system according to the required security strategy. Moreover, the traditional manual security monitoring is inefficient. Aiming at the problem, we present a set of power system security baseline standard, mainly figuring out baseline standard of physical security, network devise, host, database, application, and management. Furthermore, we propose a process of security baseline monitoring and a framework of security baseline acquisition based on the security baseline standard. The security baseline monitoring system can accurately detect and identify security flaws of system and devices. Eventually, the system can help to improve the security management of electric power enterprise.