铁路网络安全漏洞管理平台建设与关键技术研究  

Construction of railway network security vulnerability management platform and and its key technologies

作　　者：王红伟 陈勋 殷颂棋 祁振亚 胡侠 WANG Hongwei;CHEN Xun;YIN Songqi;QI Zhenya;HU Xia(Institute of Computing Technologies,China Academy of Railway Sciences Corporation Limited,Beijing 100081,China;Information Technology Institute,China Railway Nanchang Group Co.Ltd.,Nanchang 330002,China)

机构地区：[1]中国铁道科学研究院集团有限公司电子计算技术研究所,北京100081 [2]中国铁路南昌局集团有限公司信息技术所,南昌330002

出　　处：《铁路计算机应用》2023年第10期59-62,共4页Railway Computer Application

基　　金：中国铁道科学研究院集团有限公司科研项目计划(2021YJ180)。

摘　　要：为提升铁路网络安全漏洞管理水平,设计了铁路网络安全漏洞管理平台,阐述了该平台的总体架构和功能,研究了异构漏洞数据标准化和漏洞处置优先级评估的关键技术。通过对资产数据、漏洞数据、威胁情报等多方数据的分析整合,实现铁路网络安全漏洞的全生命周期跟踪管理,能够实时掌握安全漏洞及风险态势,提升漏洞处置能力和运营维护的工作效率。To improve the level of railway network security vulnerability management,this paper designed a railway network security vulnerability management platform,elaborated on the overall architecture and functions of the platform,and studied the key technologies of heterogeneous vulnerability data standardization and vulnerability disposal priority evaluation.Through the analysis and integration of asset data,vulnerability data,threat intelligence and other multi-party data,the paper implemented the full lifecycle tracking and management of railway network security vulnerabilities,was able to grasp security vulnerabilities and risk situations in real-time,and improved vulnerability handling capabilities and operational maintenance efficiency.

关 键 词：网络安全 漏洞管理 安全漏洞 漏洞评估 资产管理 

分 类 号：U29[交通运输工程—交通运输规划与管理] TP393[交通运输工程—道路与铁道工程]