Abstract: With the construction and development of the electric power informatization, electric power enterprise has established the basic information security protection system, take a lot of security measures, its increasingly important for security monitoring and management According to GB/T 22239-2008 and baseline for classified protection of power industry information system, the framework of electric power information security protection monitoring system based on classified protection is presented, and security event correlation analysis rules arc designed in this paper. Using the electric power system's security monitoring system, security events can be quickly and accurately locate and enhance emergency handling ability of the electric power system security protection system.

Key words: Security even, Classified protection, Security knowledge base, Correlation analysis