交通运输领域数据安全技术框架研究与思考

Research and Thinking on the Technical Framework of Data Security in the Field of Transportation

近年来,在“数字政府”建设的不断推进过程中,政府部门之间的“数据鸿沟”“数据孤岛”现象逐渐被打破,数据作为数字政府的核心资源,是国家发展的重要原生动力,也是最有价值的核心资产.随着各类数据资源的大量汇聚、整合共享,延伸出一系列数据安全相关问题,如因数据高度集中导致数据更容易成为攻击的目标,内部人员的大量违规操作导致数据篡改、极大程度增加数据在流动和共享交换过程中数据泄露风险等.为了解决交通运输领域数据安全的问题,对交通技术运输领域面临的数据安全主要挑战进行了深入分析,提出打造“数据安全管控整体技术体系架构”,重点围绕交通运输领域的数据全生命周期安全和数据安全运营进行思考和探讨,数据安全管理不在此讨论范围内.

In recent years,in the continuous advancement of the construction of“digital government”,the“data gap”and“data island”between government departments have been gradually broken.As the core resource of digital government,data is an important driving force for national development,and also the most valuable core asset.With the largescale aggregation,integration and sharing of various data resources,a series of data securityrelated problems have emerged.For example,due to the high concentration of data,data is more likely to become the target of attacks,and a large number of illegal operations by internal personnel lead to data tampering and greatly increase.In order to solve the problem of data security in the field of transportation,this paper makes an indepth analysis of the main challenges of data security in the field of transportation technology and transportation,and proposes to create an“overall technical architecture of data security management and control”,and focuses on thinking and discussing the full life cycle security of data and data security operation in the field of transportation.Data security management is not within the scope of this paper.