analysis is the quantification of risk factors. Taking
into account both the probability and the severity of
accidents, the risk measure can accumulate the risks
of all components, which constitutes the overall risk
signal of the electrical system. At the same time, the
risk signal is time sensitive and can accumulate over
a period of time to provide system operators with
information for decision making. From a risk
management perspective, qualitative and quantitative
analysis methods are used to systematically analyze
the vulnerabilities of information systems and the risk
factors they face. Then propose adjusted risk
management to minimize negative impacts and
economic losses. The measurement of information
system risk should contain 4 main factors, including
information assets.
System, vulnerability of information resources,
threats to information resources and implemented
security measures (Egorova, 2015). The vulnerability
level represents the severity of the vulnerability of an
asset, and the threat level is represented by the object
threatened by the threat, the subject of the threat, the
frequency of the threat, etc. Based on the risk
management model, the measurement of the risk of
an information system can quantify the risk signal
through the analysis of potential accidents. With the
development of information and communication
technologies and automatic control technologies, the
traditional power system has turned into a complex
interactive large system consisting of three parts: a
global physical system, a modern information and
communication system, and a developed monitoring
system. However, the introduction and widespread
use of advanced information technologies can also
adversely affect the reliability and safety of the
electrical system. In this large system, the failure of
one component of the information system can affect
the entire power system. Therefore, it is important to
monitor the information system in real time and
ensure fast and accurate delivery of information about
the power system to the system operator. In a highly
coupled physical information system, risks in both the
physical system and the information system can lead
to disasters (Porfiriev, 2010).
The risk factors of information systems can be
divided into three aspects, namely: human attacks,
communication quality problems and natural
disasters. The risks of the GEI information system
have increased significantly due to the
interconnection of physical systems and information
systems. Attacks against GEI information systems
can not only damage information systems, but also
cause failures of physical systems beyond the
physical boundaries of the information systems. In
addition to human attacks, communication quality
issues and natural disasters also cause problems for
the GEI. In order to realize the properties of high
efficiency, self-healing, high reliability and security
in the smart grid, the amount of information that
needs to be transmitted and processed will be much
larger than the current one. Due to the high
connectivity of physical-information systems,
information security is becoming increasingly
important, and human attacks can be dangerous.
Information intruders can attack one or more
communication nodes in an information network,
which can lead to a failure to download and transfer
information. Human attacks most often target
important nodes (Nikoláeva, 2018). Attackers try to
inflict as much damage as possible with minimal cost.
3 RESULTS AND DISCUSSION
By evaluating the risk of an information system, it is
possible to refine the security status of an information
system. Information systems risk assessment is the
basis for the optimal distribution of information
systems protection tools. Based on the results of the
risk assessment, information system security policies
and security problem solving strategies can be
proposed to control the operation of the information
system. At present, the main power lines of China's
regional power systems are made of optical fiber.
When sudden natural disasters occur, such as
hurricanes, floods, earthquakes, or landslides, the
communication network may be destroyed, resulting
in reduced or even paralyzed communication network
capacity. The probability that a natural disaster will
damage all communications in the area of the event
can be obtained from historical data statistics
(Porfiriev, 2010). Power system risk assessment has
been focused since the 1980s, but most research is
focused on the primary system. Currently, the
primary systemic risk assessment of the power system
is being systematically studied. There are relatively
advanced methods of analysis and evaluation, and
they have been applied to the operation of electrical
networks. But from the point of view of information
systems, studies on the overall risk assessment of the
system are still lacking. And there is still little
research on the role of information system risk in the
primary power supply system.
In accordance with various risk factors, a model
of the probability of failure of an information system
node is created. From the point of view of the human
attack factor, information intruders, as a rule, attack
the most important communication nodes. From the
MMTGE 2022 - I International Conference "Methods, models, technologies for sustainable development: agroclimatic projects and carbon
neutrality", Kadyrov Chechen State University Chechen Republic, Grozny, st. Sher
170