铁路设计企业管理信息化系统网络安全关键技术研究  

Key technologies for network security of railway design enterprise management information system

作　　者：刘峰 韩寓 LIU Feng;HAN Yu(China Railway Design Group Co.Ltd.,Tianjin 300308,China)

机构地区：[1]中国铁路设计集团有限公司,天津300308

出　　处：《铁路计算机应用》2023年第11期68-72,共5页Railway Computer Application

摘　　要：针对企业管理信息化系统建设项目,通过风险评估方法全面地剖析存在的内、外部安全风险,以网络安全等级保护(简称:等级保护)2.0中“一个中心、三重防护”框架为指导,设计网络安全防御技术体系。在Web应用安全、数据安全、威胁自动化响应等方面开展关键技术研究,落实Web应用安全防护技术、集中数据监测与审计技术、综合威胁分析及响应技术,满足等级保护和攻防实战要求。该安全防御技术体系已在某铁路设计企业得到应用,有效提升了企业管理信息化系统纵深防御能力。This paper focused on the construction project of enterprise management information system,comprehensively analyzed the existing internal and external security risks through risk assessment methods,and designed a network security defense technology system guided by the"one center,three layers of protection"framework in classified protection 2.0 of cybersecurity.The paper conducted key technology research in areas such as Web application security,data security,and threat automation response,implemented Web application security protection technology,centralized data monitoring and auditing technology,comprehensive threat analysis and response technology,and met the requirements of level protection and offensive and defensive combat.This network security defense technology system has been applied in a railway design enterprise,effectively enhances the depth defense and active defense capabilities of the enterprise management information system.

关 键 词：网络安全等级保护 WEB应用安全 数据安全 威胁分析 安全编排自动化响应(SOAR) 

分 类 号：U29[交通运输工程—交通运输规划与管理] F530.6[交通运输工程—道路与铁道工程] TP393[经济管理—产业经济]