列车通信网络安全现状分析及应对方案研究

Current status analysis and countermeasure exploration for train communication network security

随着以太网技术在列车网络控制系统中的深入应用,列车通信网络面临的安全挑战日益增加。文章结合列车网络控制系统的业务特点及网络架构,对列车通信网络中存在的各种网络安全隐患和风险进行了分析,同时参考GB/T 22239《信息安全技术网络安全等级保护基本要求》和IEC 62443《工业过程测量、控制和自动化网络与系统信息安全》系列标准中的安全要求,研究了适合列车网络控制系统的网络安全防护方案,为后续列车通信网络安全体系建设提供指导。

With the in-depth application of Ethernet technology in the train networked control system,the train communication network is facing increasing cybersecurity challenges.Based on the analysis on various cybersecurity vulnerabilities and risks in the train communication network,considering the service characteristics and network architecture of the train networked control system,this paper explored a cybersecurity protection solution tailored to the train networked control system,referring to the security requirements specified in the Information Security Technology-Baseline for Classified Protection of Cybersecurity(GB/T 22239)and IEC 62443 series of standards for industrial process measurement/control automatic network and system information security,as a guidance for the subsequent security system construction over the train communication network.