ICS35.030 CCSI6440T/CAGX 团 体 标 准 T/CAGX003—2026 电力行业数据权限管控技术和数据访问 异常监控指南 Guidefordatapermissioncontroltechnologyandabnormaldataaccess monitoringintheelectricpowerindustry 2026-02-28发布 2026-02-28实施 广西计算机学会发布 全国团体标准信息平台 T/CAGX003—2026 Ⅰ目  次 前言................................................................................III 1范围................................................................................1 2规范性引用文件......................................................................1 3术语和定义..........................................................................1 3.1权限模型AccessControlModel......................................................1 3.2基于角色的访问控制RBAC(RoleBasedAccessControl)..................................1 3.3基于属性的访问控制ABAC（AttributeBasedAccessControl）...........................1 3.4访问审计AccessAudit.............................................................1 3.5数据访问异常监控DataAccessAnomalyMonitoring.....................................1 3.6强制访问控制MAC（MandatoryAccessControl）.......................................2 3.7自主访问控制DAC（DiscretionaryAccessControl）...................................2 3.8访问日志AccessLogs..............................................................2 3.9数据访问行为DataAccessBehavior..................................................2 3.10数据敏感性DataSensitivity......................................................2 3.11访问模式AccessPattern..........................................................2 3.12单点登录SSO（SingleSignOn）....................................................2 3.13数据访问异常AnomalousDataAccess................................................2 3.14最小权限原则LeastPrivilegePrinciple............................................2 3.15行为基线BehavioralBaseline）...................................................2 3.16用户与实体行为分析UEBA（UserandEntityBehaviorAnalytics）.......................2 3.17多因素认证MFA（Multi-FactorAuthentication）....................................2 3.18动态权限调整DynamicPrivilegeAdjustment.........................................2 4基本原则............................................................................3 4.1合法合规原则....................................................................3 4.2最小权限原则....................................................................3 4.3动态调整原则....................................................................3 4.4多层防护原则....................................................................3 4.5以人为核心、以数据为边界........................................................3 4.6智能化分析原则..................................................................3 4.7持续优化原则....................................................................3 5数据权限管控........................................................................3 5.1总体指引........................................................................3 5.2权限管控模型....................................................................3 5.3权限设计要求....................................................................4 5.4用户身份验证....................................................................4 5.5权限管控生命周期管理............................................................4 5.6权限管控安全要求................................................................4 全国团体标准信息平台 T/CAGX003—2026 Ⅱ5.7权限管控方法....................................................................4 6数据访问异常监控....................................................................5 6.1一般规则........................................................................5 6.2监控对象与范围..................................................................6 6.3异常行为定义与分类..............................................................6 6.4异常识别指标与方法..............................................................6 6.5异常监控技术体系................................................................6 6.6日志采集与分析..................................................................6 6.7告警与响应机制..................................................................6 6.8数据访问异常规则配置方法和流程..................................................7 6.9异常响应方法和流程.........................