民航通信网TDM业务承载网安全加固方案设计  

Design of Security Solution for Civil Aviation Communication TDM Network

作　　者：牛犇 NIU Ben(North China Regional ATM Bureau of CAAC,Beijing 100621,China)

机构地区：[1]中国民用航空华北地区空中交通管理局,北京100621

出　　处：《民航学报》2021年第6期54-58,共5页Journal of Civil Aviation

摘　　要：民航通信网作为全民航范围的网络传输基础设施子网之一的TDM业务承载网(简称为TDM网)负责传输雷达、转报、甚高频等空管重要业务。针对TDM网现网设计中未包含网络安全相关的产品及技术应用的问题,随着TDM网的上线运行,网络安全方面引发的风险越来越突出,特别是出现过运维人员误删设备配置的典型案例,存在较大的安全隐患。在以往安全加固方案设计中,大量的安全设备叠加但并不实用,本文结合TDM网上线近一年的运行经验,结合案例分析,提出了一种侧重于接入层的网络安全加固方案,降低安全改造对现网运行的影响,有针对性地防范终端安全风险和区域边界风险。As the network transmission infrastructure of civil aviation,Civil Aviation Communication TDM Network is responsible for transmitting important air traffic control services such as radar,telegram and VHF.Because of the problem that the current TDM network does not include the products and technical applications related to network security,the risks in network security have become prominent,a typical case is equipment configuration deleted by operation and maintenance personnel by mistake.Combined with the operation status of TDM network,this paper proposes a security solution focusing on the access layer to reduce the impact of security transformation on the current network operation and prevent terminal security risks and regional boundary risks.

关 键 词：民航通信网 安全加固方案 

分 类 号：U8[交通运输工程]