新形势下铁路关键信息基础设施安全保护工作建议

Proposals on the Security Protection of Railway Critical Information Infrastructure Under New Situations

为提高铁路关键信息基础设施安全防护水平,促进《铁路关键信息基础设施安全保护管理办法》深入贯彻执行,针对我国铁路关键信息基础设施的安全保护问题展开研究,提出关于安全保护工作的针对性建议。通过分析铁路关键信息基础设施的分类与系统特征,以及面临的高级持续性威胁、政策合规压力、供应链风险等安全形势,在当前安全保护体系的基础上,提出5点安全保护工作建议:强化安全检查评估,提升态势感知能力,健全密码应用保障体系,加强供应链自主可控,优化安全培训制度。旨在紧跟新技术趋势、政策要求与实际安全需求,持续优化和完善铁路关键信息基础设施的安全保护体系,促进政策要求的落实。

In order to improve the security protection level of railway critical information infrastructure and promote the in-depth implementation of the Administrative Measures for Security Protection of Railway Critical Information Infrastructure,the security protection of railway critical information infrastructure in China is studied firstly,and targeted suggestions on the direction of security protection are put forward.By analyzing the classification and system characteristics of railway critical information infrastructure,the security situation faced by advanced persistent threats,policy compliance pressure,supply chain risks,etc.,based on the existing security protection system,five suggestions for security protection are discussed including strengthening security inspection and evaluation,improving situational awareness,perfecting password application guarantee system,strengthening independent control of supply chain,and optimizing security training system.The aim is to keep up with the new technology trends,policy requirements and actual security needs,continuously optimize and improve the security protection system of railway critical information infrastructure,and promote the implementation of the policy requirements.