内容简介

本书结合作者组织和参加国家重大科技攻关项目“电力系统信息安全示范工程”、国家863项目“电力二次系统安全防护体系研究”以及国网公司SG186、SG-ERP信息安全等级保护及保障体系工程的实践经验，本着力求反映信息安全技术的最新发展和理论与工程实践相结合的原则而编写。

全书共分为10章，主要内容包括国内外网络信息安全工程技术发展趋势、我国信息安全重大政策及发展方向、网络信息安全工程基本原理、网络信息安全工程技术领域基础知识及最新技术、网络信息安全风险评估方法与应用分析、网络信息安全系统设计与应用分析、网络信息安全防护体系及应用分析、网络信息安全身份认证与授权管理系统及应用分析、数据存储备份与灾难恢复技术及应用分析、网络信息安全等级保护及应用分析、互联网络空间安全战略与应用分析，以及在网络信息安全工程实践中成功的案例。

本书的突出特点是系统总结了运用最新网络信息安全工程理论和最新研究成果，组织和参加网络信息安全工程实践取得的成功案例。读者通过本书既可以学习网络信息安全工程理论和基础知识，互联网络空间安全战略及网络信息安全最新技术，也可以通过大量实例掌握网络信息安全工程组织、管理和技术实现方法。本书可作为高等院校、能源电力等行业的培训教材，也可以作为企事业单位从事信息安全工程工作的管理人员和工程技术人员的参考工具用书。

This book is based on practical experience of organizing and participating in the major national scientific and technological project “Power System Information Security Demonstration project”, the National 863 project “Power Secondary System Security Protection System Research” and the State Grid Corporation of SG186, SG-ERP of hierarchical protection of information security and the security system projects, and in principle of reflecting the latest development of information security technology and engineering practice.

This book contains 10 chapters. The main content is as follows：the domestic and international development trends of information security engineering technology, China’s information security policy and the development direction of information security, the fundamental principle of information security engineering, the fundamental knowledge and the latest technology of information security engineering field, the design, application and analysis of information security system, identity authentication and authorization management system, data storage backup and disaster recovery system, network information security hierarchical protection, interconnection network space security strategy, and the successful cases in the network information security in engineering practice.

The outstanding feature of this book is to systematically summarize the application of the latest network information security engineering theory and the latest research results, and the successful cases from the personal organization and participation in network information security engineering practice. Readers can not only learn the network information security engineering theory and the fundamental knowledge, interconnection network space security strategy and the latest technology of network information security, but also grasp the method of organizing and managing the network information security engineering through a large number of practical examples. It is a valuable reference which elaborates network information security technology and engineering application analysis. It can be used as the textbook for institutions of higher learning or training materials for energy and electric power enterprises, or as the reference book for management and technical personnels of enterprises and institutions engaged in information security engineering.