铁路应急通信系统网络安全防护技术研究  

Research on Network Security Protection Technology for Railway Emergency Communication System

作　　者：项伟 XIANG Wei(China Railway Harbin Bureau Group Co.,Ltd.,Harbin 150016,China)

机构地区：[1]中国铁路哈尔滨局集团有限公司,黑龙江哈尔滨150016

出　　处：《通信电源技术》2025年第6期172-174,共3页Telecom Power Technology

摘　　要：铁路应急通信系统作为保障铁路运输安全的关键基础设施,其网络安全防护具有重要意义。随着系统与外部网络互联互通日益紧密,面临的网络安全威胁不断增加。针对分布式拒绝服务(Distributed Denial of Service,DDoS)攻击、数据窃听、病毒入侵等安全问题,提出基于分层防护的安全体系架构,包含物理安全、网络安全以及应用安全3个层面。通过部署基于深度包检测的入侵防御机制、公钥基础设施(Public Key Infrastructure,PKI)身份认证体系等技术方案,建立防火墙集群、入侵检测、访问控制等多重防护机制。Railway emergency communication system is the key infrastructure to ensure the safety of railway transportation,and its network security protection is of great significance.With the increasingly close interconnection between the system and the external network,the network security threats are increasing.Aiming at the security problems such as Distributed Denial of Service(DDoS)attack,data eavesdropping and virus intrusion,a security architecture based on layered protection is proposed,which includes physical security,network security and application security.By deploying the intrusion prevention mechanism based on deep packet detection,Public Key Infrastructure(PKI)authentication system and other technical solutions,multiple protection mechanisms such as firewall cluster,intrusion detection and access control are established.

关 键 词：铁路应急通信 网络安全 分层防护 入侵防御 身份认证 

分 类 号：TP3[自动化与计算机技术—计算机科学与技术]