基于AMP的ATM信息安全在线评估系统的研究

ON AMP-BASED ON-LINE EVALUATION SYSTEM FOR ATM INFORMATION SECURITY

民航空中交通管理ATM(Air Traffic Management)信息系统是航空交通运输安全保障的核心。利用系统安全工程的理论,针对ATM信息系统的信息安全评估,提出了一种基于AMP(Apache+MySQL+PHP)的ATM信息安全在线评估系统。该评估系统从系统工程的角度,从战略、管理、技术和工程四个方面综合考虑,通过对ATM信息系统进行运行数据统计、安全专项测试和安全管理规范检查三项内容的评估,实现ATM信息系统的在线评估;完成针对ATM信息系统可能存在的安全隐患和系统漏洞进行分析,并根据评估结果给出相关的改进建议和措施。该系统的研究有助于加强ATM信息系统的安全性,保障航空交通运输的安全。

Air traffic management（ATM） information system of civil aviation is the core of safety assurance in aviation traffic and transportation.An AMP（Apache＋MySQL＋PHP） technique-based on-line evaluation system for ATM information security is proposed in this paper using the theory of system security engineering and in light of information security evaluation for ATM information system.The proposed system realises on-line evaluation of ATM information system by taking four aspects into comprehensive consideration including strategy,management,technique and engineering in terms of system engineering,and through evaluating three items of the ATM information system such as the operational data statistics,special test on security attribute and security management criterion examination,and achieves the analyses on possible security risks and system vulnerabilities in ATM information system,moreover,it gives out the corresponding proposals and measures for the improvement according to the evaluation results.The study of such a system is helpful in strengthening the safety of ATM information system,and guarantees the safety of aviation traffic and transportation.