铁路通信骨干网云安全技术保障体系研究  

Research on Cloud Security Technical Guarantee System of Railway Communication Backbone Network

作　　者：陈丹晖 周耀胜[1] CHEN Danhui;ZHOU Yaosheng

机构地区：[1]北京铁路通信技术中心,北京100038

出　　处：《铁道通信信号》2023年第2期50-54,共5页Railway Signalling & Communication

基　　金：中国国家铁路集团有限公司科技研究开发计划(N2020G013)。

摘　　要：通过分析铁路通信骨干网云基础设施可能存在的网络安全风险,提出了基于WPDR3模型,以弹性自适应云安全体系为核心理念的铁路通信云安全技术保障体系架构;在贯彻落实等保2.0基本要求和云计算安全扩展要求的基础上,结合铁路通信骨干网业务特点,研究了以安全管理中心及云安全资源池为核心的云安全防护技术方案。By analyzing the possible network security risks in the cloud infrastructure of the railway communication backbone network,this paper proposes a railway communication cloud security technology guarantee system architecture based on WPDR3 model with elastic adaptive cloud security system as the core concept.On the basis of implementing the basic requirements of Classified Protection 2.0 and cloud computing security expansion,combined with the characteristics of railway communication backbone network services,the technical scheme of cloud security protection capability with security management center and cloud security resource pool as the core is studied.

关 键 词：铁路通信 云安全 安全资源池 按需服务 三重防护 

分 类 号：U285.8[交通运输工程—交通信息工程及控制]