基于二维结构熵的CBTC系统信息安全风险评估方法  

A 2D Structure Entropy-based Approach to Security Assessment of Communication-based Train Control System

作　　者：董慧宇 唐涛[2] 王洪伟 DONG Hui-Yu;TANG Tao;WANG Hong-Wei(School of Electronics and Information Engineering,Beijing Jiaotong University,Beijing 100044;State Key Laboratory of Rail Tra±c Control and Safety,Beijing 100044;National Research Center of Railway Safety Assessment,Beijing 100044)

机构地区：[1]北京交通大学电子信息工程学院,北京100044 [2]轨道交通控制与安全国家重点实验室,北京100044 [3]国家轨道交通安全评估研究中心,北京100044

出　　处：《自动化学报》2019年第1期153-162,共10页Acta Automatica Sinica

基　　金：北京市自然科学基金(L161006;4164094);国家自然科学基金(61603031;61790575;61790573);国家重点实验室项目(RCS2018K008;RCS2017ZZ003)资助~~

摘　　要：随着计算机技术、通信技术和控制技术在城市轨道交通列车运行控制系统中的应用,城市轨道交通的自动化和信息化程度不断提升.然而,基于通信的列车运行控制(Communication-based train control, CBTC)技术采用的通用计算机设备和通信技术带来的信息安全漏洞,给CBTC系统带来了日益严峻的信息安全风险,因此,对CBTC系统的信息安全风险进行量化、动态评估具有重要意义.本文根据设备及通信链路的差异性构建了CBTC网络拓扑模型,结合信息安全风险下线路列车运行性能变化导致的运能损失,采用综合表征信息域和物理域特征的二维结构信息熵对CBTC系统信息安全风险进行建模分析.最后,基于城市轨道交通列控系统半实物仿真平台对评估方法进行验证,表明所提方法对CBTC系统信息安全量化评估的有效性和准确性.With the wide application of computer,communication and control technologies in train operation control system,the degree of automation and informatization of urban rail transit is continuously improved.However,universal computer equipment and communication technologies adopted by the method of CBTC(communication-based train control)bring serious security risks to the CBTC system.In view of this,it is of great significance to quantify and dynamically evaluate the information security risks of CBTC system.In this paper,a topology model of CBTC networks is built according to the characteristics of equipment and communication links.Combining the capacity loss from performance changes of train control under security risks,the 2D structural information entropy is constructed,which can comprehensively characterize the cyber space and physical space features,to model and evaluate the information security risks of CBTC system.Finally,with a hardware-in-the-loop simulation platform for urban rail transit CBTC security,the effectiveness and accuracy of the proposed approach are verified.

关 键 词：基于通信的列车运行控制 信息安全风险评估 结构信息熵 列车运行性能 半实物仿真平台 

分 类 号：TP309[自动化与计算机技术—计算机系统结构]