Abstract: AbstractWith the advance of smart grid construction, the number of users increases, and the twoway interactive communication is stronger and stronger, application system is more integrated, and there are risks that the system integrity, confidentiality and availability of business system integrity is destroyed and smart devices, intelligent terminals and users' terminals are illegally fraudulent, illegally remotely controlled and illegally operated. The lifecycle security framework of smart grid applications is proposed, which defines seven aspects of security requirements including the planning, requirements, designment, development, testing, online operation and maintenance and the abandoned part, making information security technology and management measures cover the entire software life cycle.

Key words: smart grid, information security, lifecycle, classified protection, security design

摘要： 摘要随着智能电网建设的推进，用户数量越来越多，双向交流互动性越来越强，应用系统集成度越来越高，存在业务系统完整性、保密性、可用性被破坏，智能设备、智能终端和用户终端被非法冒用、远程控制和违规操作等风险.提出了智能电网应用系统全生命周期安全保障框架，从规划、需求、设计、开发、测试、上线运维、废弃7个环节提出了详细的安全要求，使信息安全技术及管理措施可以覆盖应用软件的整个生命周期.

关键词: 智能电网, 信息安全, 全生命周期, 等级保护, 安全设计