铁路综合信息网区域边界风险及防护策略  

Regional boundary risk and protection strategy of railway integrated information network

作　　者：王一芃 田海波 季宏志 WANG Yipeng;TIAN Haibo;JI Hongzhi(Department of Network Security,China Railway Information Technology Group Co.Ltd.,Beijing100038,China)

机构地区：[1]中国铁路信息科技集团有限公司网信安全处,北京100038

出　　处：《铁路计算机应用》2021年第11期32-37,共6页Railway Computer Application

基　　金：中国国家铁路集团有限公司科技研究开发计划重大课题(N2020W004)。

摘　　要：针对铁路综合信息网内区域划分的复杂化及边界安全防护策略的多样化,文章从铁路综合信息网区域划分现状以及跨区域通信特点出发,依据网络安全等级保护2.0系列标准对区域边界的防护要求,提出了5种铁路信息网中典型的区域边界类型,并结合业内主流边界安全防护技术,为不同类型区域边界提供相应的安全防护措施建议。所提出的典型区域边界类型及防护措施将为铁路综合信息网日常运维工作提供模板化的参考,为安全防护体系建设提供参考。In view of the complexity of regional division in railway integrated information network and the diversification of boundary security protection strategies,starting from the current situation of regional division of railway integrated information network and the characteristics of cross regional communication,and according to the protection requirements of network security level protection 2.0 series standards for regional boundaries,this paper put forward five typical regional boundary types in railway information network.Combined with the mainstream boundary safety protection technology in the industry,it provided corresponding safety protection measures and suggestions for different types of regional boundaries.The proposed typical regional boundary types and protection measures would provide a template reference for the daily operation and maintenance of railway comprehensive information network and provide some ideas for the construction of safety protection system.

关 键 词：铁路网络安全 网络安全域 风险识别 安全防护策略 网络安全等级保护2.0 

分 类 号：U29[交通运输工程—交通运输规划与管理]