Abstract: According to the actual situation of the railway network security technology and security requirements, this article proposed and designed the railway network and information security management system. The system could implement centralized management of various network security devices and the host device, real-time monitoring of network security events and comprehensive assessment of security risks. This article analyzed and researched on the overall architecture of the system, main functions and the key technologies, proposed suggestions for the development trend of network and information security management and the next phase of work.