一种轨道列车车载通信系统信息安全风险评估方法  

Cyber Security Risk Assessment Approach for Rolling Stock Onboard Communication Systems

作　　者：阎士奇 Yan Shiqi(CRRC Qingdao Sifang Rolling Stock Research Institute Co.,Ltd.,Qingdao 266000,China)

机构地区：[1]中车青岛四方车辆研究所有限公司,山东青岛266000

出　　处：《铁路通信信号工程技术》2024年第4期57-62,95,共7页Railway Signalling & Communication Engineering

基　　金：中车青岛四方车辆研究所有限公司系统研制项目(2021SRI146)。

摘　　要：提出一种基于通用漏洞评价系统(Common Vulnerability Scoring System,CVSS)的列车车载通信系统信息安全风险评估方法,详细介绍该方法的工作流程,开展缺陷概率评估、缺陷影响评估,得出各系统缺陷的风险范围所对应的信息安全等级,并最终应用到某国外地铁车载通信系统项目的信息安全风险评估活动中,为后续开展系统优化活动以及采取优化措施后的信息安全风险再定位奠定基础。This paper proposes a cyber security risk assessment methodology for rolling stock onboard communication systems based on the Common Vulnerability Scoring System(CVSS),introduces the workflow of the method in detail,and carries out defect probability and impact assessment,and also derives the cyber security level corresponding to the risk range of each system defect.Finally,it is applied to cyber security risk assessment activities of an overseas metro onboard communication system project,laying a foundation for the subsequent system optimization activities and cyber security risk repositioning after taking optimization measures.

关 键 词：信息安全风险 缺陷概率和影响评估 CVSS 列车车载通信系统 

分 类 号：U285.8[交通运输工程—交通信息工程及控制]