基于以太网的列车控制网络信息安全技术研究  

Research on Information Security Technology of Train Control Network Based on Ethernet

作　　者：谭康柏 Tan Kangbai(Beijing Urban Rail Transit Consulting Co.,Ltd,Beijing 100068;Beijing National Engineering Laboratory of Safety Assurance Technology for Urban Rail Transit Systems,Beijing 100068;Beijing Key Laboratory of Fully Automatic Operation and Safety Monitoring for Urban Rail Transit,Beijing 100068)

机构地区：[1]北京城市轨道交通咨询有限公司,北京100068 [2]城市轨道交通系统安全保障技术国家工程实验室,北京100068 [3]城市轨道交通全自动运行系统与安全监控北京市重点实验室,北京100068

出　　处：《设备监理》2023年第5期29-33,共5页Plant Engineering Consultants

摘　　要：基于以太网的列车控制网络存在非法外联、网络攻击等信息安全隐患。本文结合轨道交通信息安全技术、相关技术标准的要求,总结了以太网列车控制网络的相关特点,阐述了信息安全相关防护技术及相关要求;针对以太网列车控制网络的主要信息安全风险因素,提出了边界防护、访问控制、入侵及恶意代码防范、安全审计等信息安全防护措施,并提出一套车载信息安全防护系统技术方案,解决以太网列车控制网络的信息安全问题。The train control network based on Ethernet has information security risks such as illegal external connections and network attacks.This article combines the requirements of information security technology and related technical standards in rail transit,summarizes the relevant characteristics of Ethernet train control network,and elaborates on information security related protection technology and related requirements.In response to the main information security risk factors of Ethernet train control network,information security protection measures such as boundary protection,access control,intrusion and malicious code prevention,security audit,etc.have been proposed,and a set of onboard information security protection system technical solutions have been proposed to solve the information security issues of Ethernet train control network.

关 键 词：以太网列车控制网 访问控制 入侵及恶意代码防范 安全审计 

分 类 号：TB497[一般工业技术]