重载铁路云平台安全防护研究

Research on Security Protection of Heavy-Haul Railway CloudPlatforms

当前重载铁路业务系统部署至云平台是发展趋势,为探讨重载铁路云平台的安全防护问题,保障重载铁路云平台及云上业务系统安全稳定地运行,通过分析云平台架构在重载铁路应用环境下的安全性需求,以防范隐私数据泄露、防范互联网入侵及攻击、保障云平台自身安全性、保障业务系统安全性为核心要点,从云平台架构安全保障、数据隐私保护、业务系统云安全保障3个方面制定了相应的安全策略,实现对云平台架构中物理层、云平台层以及云端应用层的安全防护,全面覆盖云平台侧及云用户侧,构建出一个安全纵深防护体系,有效保护重载铁路云端业务系统及隐私数据的安全。

Given the current trend of deploying heavy-haul railway business systems onto cloud platforms,this paper explored the security protection issues of heavy-haul railway cloud platforms to ensure that the heavy-haul railway cloud platforms and business systems on the cloud platforms operate safely and stably.The paper analyzed the security requirements of cloud platform architecture in heavyhaul railway application environments,with a focus on preventing privacy data leaks,guarding against internet intrusions and attacks,and ensuring the security of the cloud platform itself and the business systems.The paper formulated corresponding security strategies from three aspects:guaranteeing the security of cloud platform architecture,protecting data privacy,and ensuring the security of business systems on the cloud platforms.These strategies achieved security protection for the physical layer,cloud platform layer,and cloud application layer within the cloud platform architecture,covering both the cloud platform side and the cloud user side.Consequently,a deep and comprehensive security protection system was established to better safeguard the security of heavy-haul railway business systems on the cloud platforms and private data.