摘要： 目前电网终端系统缺乏有效的信息安全评估机制。针对该问题，根据电网终端的特点，提出一种安全评估模型。研究安全评估的整体机制，使其满足安全评估的需求、目标和细化内容，利用层次化分析方法确定模型中各个组件的权重值，通过评估函数计算终端系统的检查结果。应用结果表明，该模型能实现检查过程的自动化，对设备的检查时间不到3 min。

关键词: 信息安全, 安全评估模型, 层次分析过程, 评估函数, 自动化评估工具, 电网终端

Abstract: Currently, grid terminal is lack of effective information security evaluation mechanisms and methods, according to the characteristic of grid terminal, this paper puts forward a comprehensive security evaluation model. The model can describe the demand for security evaluation, objectives and refined context, and uses hierarchical analysis method to determine the weights of each component, and calculates evaluation function results for the grid terminal system. Application results show that this model can realize the automatical checking process, only costs three minutes in checking equipments..

Key words: information security, security evaluation model, Analysis Hierarchy Process(AHP), evaluation function, automatic evaluation tool, grid terminal

中图分类号: 

• TP393.08