Abstract: This article designed the railway network security attack and defense simulation experiment platform by research and use flexible virtual and real interconnection technology, heterogeneous data fusion technology, attack detection and traceability technology. With the help of the platform, the article carried out scientific research experiments such as network security technology research, network security attack and defense drill, security defense ability verification, security event forensics analysis to implement timely and effective early warning, rapid forensics, precise positioning and analysis of railway network security events, and provide technical and data support for the construction of a comprehensive defense system of railway network security with controllable security and both attack and defense.