基于商用密码技术的铁路行业统计调查系统安全研究  

Security of Railway Industry Statistical Investigation System based on Commercial Cryptography Technology

作　　者：陆铖 LU Cheng(National Railway Administration Information Center,Beijing 100891,China)

机构地区：[1]国家铁路局信息中心,北京100891

出　　处：《信息安全与通信保密》2021年第12期77-84,共8页Information Security and Communications Privacy

摘　　要：随着铁路行业统计信息化深度发展,信息安全问题日益严重。为有效提升信息的真实性、机密性、完整性和不可否认性,通过详细剖析铁路行业统计调查系统的总体架构和实际承载业务,依据信息系统密码应用基本要求,从物理和环境安全、网络和通信安全、设备和计算安全、应用和数据安全、安全管理等方面进行安全风险分析。结合商用密码技术,设计铁路行业统计调查系统密码保障体系,并提出对应的保障措施。结果表明,采用该安全体系对铁路行业统计调查系统进行安全保障,能够显著减少系统中产生的安全事件,有助于提升铁路行业统计调查系统的信息安全。With the depth development of statistical information in railway industry,the problem of information security is becoming more and more serious.In order to effectively improve the authenticity,confidentiality,integrity and non repudiation of information,the overall architecture and actual carrying business of railway industry statistical investigation system are analyzed in detail.According to the basic requirements of information system cryptography application,this paper analyzes the security risks from the aspects of physical and environmental security,network and communication security,equipment and computing security,application and data security,and security management,etc.Combined with commercial cryptography technology,the cryptography security system of railway industry statistical investigation system is designed,and the safeguard measures are put forward.The results indicate that the security of the statistical investigation system can significantly reduce the security events and improve the information security of the railway statistical investigation system.

关 键 词：铁路行业 统计调查 安全风险 信息安全 商用密码 

分 类 号：TP309.1[自动化与计算机技术—计算机系统结构]