测控网安全防护体系研究  

A Study on the Security Architecture of TT&C Networks

作　　者：郜晓亮[1] 王剑[1] 张权[1] 

机构地区：[1]国防科学技术大学电子科学与工程学院,长沙410073

出　　处：《飞行器测控学报》2013年第4期294-301,共8页Journal of Spacecraft TT&C Technology

摘　　要：从多个角度分析了测控网面临的安全威胁,研究了ESA(欧空局)和NASA(美国国家航空航天局)安全标准体系、安全技术应用和安全管理,总结了国外安全防护体系建设在顶层设计、制度建设、安全训练、威胁感知等方面的特点。基于我国测控网的特点,研究了边界安全、数据安全、终端安全以及备份与恢复等层面安全技术的部署,提出一个基于安全域划分的安全防护技术框架,其中各安全域可根据任务需要进行裁剪或扩展,具有一定灵活性。同时,在综合考虑规章制度、安全训练、安全技术以及安全审计与咨询等多种因素基础上,提出一个安全管理模型,该模型提供了安全管理与安全技术紧密结合的方法。Security threats facing TT＆C （Tracking, Telemetry and Command） networks are analyzed from different perspectives. Following study of the security standards architecture, application of security technologies and security management of ESA （European Space Agency） and NASA （National Aeronautics and Space Administration）, the paper summarizes the features of development of security protection systems of foreign space agencies in top level design, regulations, security training, awareness to threats, etc. Based on the characteristics of China＇s TT＆C networks and considerations for deployment of security technologies in terms of edge security, data security, terminal security and backup and recovery, a security protection technology framework based on security domain division is proposed. A certain degree of flexibility is provided by tailoring or extension of each security domain according to mission requirements. Meanwhile, a security management model is proposed based on comprehensive consideration for rules and regulations, security training, security technologies, security audits, consulting, etc. and the model facilitates an approach for close combination of security management and security technologies.

关 键 词：测控网 安全标准 安全体系 安全管理 

分 类 号：V57[航空宇航科学与技术—航空宇航推进理论与工程] TP393[自动化与计算机技术—计算机应用技术]