交通运输行业信息安全问题与应对策略研究  

Information Security and Handling Strategy for Transportation Industry

作　　者：殷林[1] 

机构地区：[1]中国交通通信信息中心,北京100011

出　　处：《信息安全与通信保密》2015年第7期92-94,98,共4页Information Security and Communications Privacy

摘　　要：交通运输行业作为各主要国家关键基础设施。在信息化融入到全球社会化发展的时代,交通运输行业信息安全备受各国重视。我国交通运输行业信息系统复杂多样,信息安全攻击与威胁严峻、安全漏洞与脆弱性隐蔽性强、安全风险聚集扩散性并存,构成行业信息安全风险态势严峻。产生安全风险的核心原因在于交通运输行业信息安全建设缺乏统筹规划、政策标准滞后、产业技术分散和安全保障能力不足。通过梳理行业信息安全特点、规划行业信息安全在统筹规划、秩序建设、平台构建和人才培养等方面应对策略,为行业信息安全工作提供关键支撑。Transportation industry is the pivotal infrastructure for major states. In the times of IT technology integrating into global socialization, information security of transportation industry attracts much attention from all countries. Information systems of China＇s trans- portation industry are complex and diverse, and encountered with serious information security attack and threats. However, the security loopholes and vulnerability are quite ulterior, the aggregation and diffusion of security risk still coexistent, all these constitute a severe infosec risk situatian of China＇s transportation industry. The core causes of security risk are the lack of overall planning, the hystere of policy standards, the dispersion of industrial technology and the inadequency of security assurance capability. Based on inofc characteristics of transportation industry, and by making overall plan of the industry infosec policy , the order construction, platform construction, talent cultivation, and other handling strategy could be realized, thus to provide critical supports to industry information secruity.

关 键 词：交通运输行业 信息安全 风险 策略 

分 类 号：F512[经济管理—产业经济] TP309[自动化与计算机技术—计算机系统结构]