电力系统管理和相关信息交换数据和通信安全第90-3部分:网络和系统管理指南

[中文适用范围]： 本部分是IEC 62351技术报告，提供了关于有效处理IT（信息技术）和OT（运营技术）数据的指南，包括对这些数据进行监控、分类和相关性分析，以推断关于电力系统状态的有用结果。文档提供了基于IT/OT融合系统对电网组件进行全面安全监控的指南。重点是开发和推荐一套方法和建议，帮助公用事业运营商基于从不同IT和OT系统收集的数据进行分析，构建通用监控框架。该框架依赖于使用IEC 62351-7（网络与系统管理数据对象模型）和IEC 62351-14（网络安全事件日志）获取的管理和日志信息的集成。此外，还将考虑来自IT和OT的其他系统数据源，例如通过简单网络管理协议（SNMP）进行的IT网络管理数据、被动网络监控以及控制和自动化过程的功能特征。本文件的建议包括实施数据收集、过滤和关联机制。本文件不包括数据分析算法的开发，这部分留给了公用事业运营商和所有者。最后，针对不同的电力系统环境（即IEC 61850变电站和分布式能源资源（DER）系统），提供了通用监控框架指南和建议的应用。 [外文原描述]： IEC TR 62351-90-3:2021, which is a technical report, provides guidelines for efficiently handling both IT and OT data in terms of their monitoring, classification and correlations on them to deduce any possible useful outcomes about the state of the power system. The convergence of information technologies (IT) and operational technologies (OT) refers to the integration of the systems, processes and data associated with the domains of IT and OT. This document provides guidelines for a comprehensive security monitoring for power grid components based on IT/OT convergent systems. The emphasis is about the development of a methodology and a set of recommendations for utility operators to build a general monitoring framework based on the analysis of the data collected from different IT and OT systems through network management, traffic inspection, and system activity readings. As such, the monitoring framework that this document introduces relies on the integration of management and logging information obtained using IEC 62351-7 and IEC 62351-14, respectively. Further systems and data sources from IT and OT would be considered such as the data obtained, for instance, through the IT network management using the Simple Network Management Protocol (SNMP), the passive network monitoring, and the functional characterization of control and automation processes. This document's recommendations include the implementation of data collection, filtering and correlation mechanisms. The development of data analytics algorithms is out of the scope of this document and would be left to utility operators and owners. Finally, applications of the general monitoring framework guidelines and recommendations are provided for different power grid environments, namely for IEC 61850 substations and for Distributed Energy Resources (DER) systems.