Establishing Smart Grid Load Balancing Information Security Threat Model Based on Threat Classification and Risk Assessment Mechanism

• Main Authors: HUANG, CHUANG-CHIAO, 黃莊喬
• Other Authors: CHEN, YU-TSO
• Format: Others
• Language: zh-TW
• Published: 2018
• Online Access: http://ndltd.ncl.edu.tw/handle/48bqzs

碩士 === 國立聯合大學 === 資訊管理學系碩士班 === 107 === In the past decade, the advancement of information and communication technology has driven the development of the industry and the convenience of life. The information system handles large and small affairs such as ticketing systems, payment systems, power supply systems, etc., and people's lives cannot be separated from such information. System, and when these information systems are abnormal, not only will it cause inconvenience, but it will also cause huge losses. Pre-existing prevention is better than remediation after the incident occurs. In order to avoid system anomalies and threats caused by threats, threat analysis when designing the information system can help to solve the problem, identify the threats the system may face, and avoid losses. The threat model can be used to resolve this issue. The threat model can be used to examine threats that may be faced in the system, allowing the system to prescribe the right medicine at the design stage, identify possible high-risk items, and prevent it early. Different from the previous threat model modeling method, this study proposes that the threat modeling method utilizes the threat decomposition structure, examines the threat attack items that the information system may encounter, and adds influences and possibilities to examine the risk of the project and conduct threat projects. filter. In order to verify the process proposed in this study, a case demonstration will also be conducted with applications in the smart grid. The power-related industry is an inseparable important industry in life. After the power system is added to the information system, the smart grid is proposed. Information systems make grid efficiency, energy management improvement, and power supply and demand smarter. However, before designing and promoting smart grids, how to identify information security threats and ensure the reliability of applications and the availability of system operations is a Important practical issues. This study will use the application in the smart grid as an example to establish an information security model and evaluate the risk of each threat attack project to verify the threat modeling process proposed in this study.