The invention discloses an intelligent optimization method for security protection strategies based on an electric power information network, which comprises the steps of data acquisition, that is, acquisition analysis is performed on operating states, strategy scheduling, logs and job execution of firewalls, and analysis results are put in storage; audit processing, that is, analysis management is performed on the operating states, strategy life cycles and logs of the firewalls, a jog execution result is audited, and an analysis report and an alarm report are generated; and visual display, that is, the operating state values, alarm information, strategy life cycles, log analysis results and execution results are displayed. The invention further discloses an optimization device which realizes automatic extraction of security log data of the electric power information network, enriches the information volume of a security log database, performs big data analysis and performs visual display on network security threats.