智慧城轨网络安全综合防护体系研究

Research on the Comprehensive Security Protection System of Smart Rail Transit Network

城市轨道交通是城市发展的关键基础设施。随着“互联网+城市轨道交通”项目的研究与发展,研究智慧城轨网络安全保障技术具备重要意义。文中分析了智慧城轨网络架构和潜在的安全威胁,基于“分区分域、标识解析、可信验证、纵深防御”的安全防护思想,提出了智慧城轨网络安全综合防护体系,对列车网络、通信网络、智慧城轨控制网络进行分区、分域防护,建立基于资源标识解析和可信验证的纵深防御体系。

Urban rail transit is the key infrastructure of urban development.With the research and development of“Internet+urban rail transit”,it is of great significance to study the cyber security guarantee technology of smart urban rail.This paper analyzes the intelligent urban rail network architecture and potential security threats.Based on the security protection idea of“zoning and sub-domain,identity analysis,trust verification,and in-depth defense”,it proposes a comprehensive protection system for smart urban rail cyber security.The train network,communication network,and smart urban rail control network are zoned and sub-domain boundary protection,and a in-depth defense system based on resource identification analysis and trust verification is established.