基于二维结构熵的CBTC系统信息安全风险评估方法

A 2D Structure Entropy-based Approach to Security Assessment of Communication-based Train Control System

随着计算机技术、通信技术和控制技术在城市轨道交通列车运行控制系统中的应用,城市轨道交通的自动化和信息化程度不断提升.然而,基于通信的列车运行控制(Communication-based train control, CBTC)技术采用的通用计算机设备和通信技术带来的信息安全漏洞,给CBTC系统带来了日益严峻的信息安全风险,因此,对CBTC系统的信息安全风险进行量化、动态评估具有重要意义.本文根据设备及通信链路的差异性构建了CBTC网络拓扑模型,结合信息安全风险下线路列车运行性能变化导致的运能损失,采用综合表征信息域和物理域特征的二维结构信息熵对CBTC系统信息安全风险进行建模分析.最后,基于城市轨道交通列控系统半实物仿真平台对评估方法进行验证,表明所提方法对CBTC系统信息安全量化评估的有效性和准确性.

With the wide application of computer,communication and control technologies in train operation control system,the degree of automation and informatization of urban rail transit is continuously improved.However,universal computer equipment and communication technologies adopted by the method of CBTC(communication-based train control)bring serious security risks to the CBTC system.In view of this,it is of great significance to quantify and dynamically evaluate the information security risks of CBTC system.In this paper,a topology model of CBTC networks is built according to the characteristics of equipment and communication links.Combining the capacity loss from performance changes of train control under security risks,the 2D structural information entropy is constructed,which can comprehensively characterize the cyber space and physical space features,to model and evaluate the information security risks of CBTC system.Finally,with a hardware-in-the-loop simulation platform for urban rail transit CBTC security,the effectiveness and accuracy of the proposed approach are verified.