城轨交通列控系统渗透测试方法研究

Penetration Test Method for URT Train Control System

随着城市轨道交通列控系统信息化、网络化、自动化程度的不断提升,系统面临的信息安全风险也日益加剧。长期以来,列控系统信息安全领域研究较少,更少有针对列控系统的渗透测试研究,因此难以对列控系统信息安全程度作出合理分析。综合列控系统的功能特点,分析列控系统存在的信息安全隐患和风险,借鉴一般互联网、工业控制网络渗透测试领域的测试方法,提出适用于列控系统的测试方法,并给出测试案例验证。

The URT train control system is seeing rising information safety risks along with its improvement in informationization, networking and automation. The information safety of train control system has been ruled out from the study priority for a long time, let alone the penetration test dedicated for the system, and that’s why it’s hard to come up with an appropriate analysis on the information safety of train control system. The paper integrates the functional features of the system, analyzes potential hazards and risks regarding information safety, and puts forth a test method for train control system by learning experience from the internet and industrial control network for their penetration tests, and presents the test case validation.