铁路信息系统安全体系研究

详细信息

Security system of China Railway Information System

Institute of Computing Technologies, China Academy of Railway Sciences, Beijing 100081, China

摘要: 分析中国铁路信息系统的安全现状和面临的信息安全威胁,提出铁路信息安全系统的顶层建设构思,构建基于铁路安全管理中心和PKI/CA认证中心支持下的安全应用环境子系统、区域边界防护子系统、通信网络防护子系统三重防护技术体系,以客票系统为例检验该体系的适用性。
- 信息系统 /
- 安全体系 /
- 适用性
Abstract: This article analyzed the security of China Railway Information System, proposed a top level concept for the construction of the Railway Information Security System, three-layered protection architecture which was consisted of the subsystem of secure application environment, the subsystem of boundary protection, and the subsystem of communication network protection. The System was based on the support of railway security management center and the PKI/CA(Public Key Infrastructure/Certificate Authority) certificate authority. The TRS(Ticketing and Reservation System) was taken as an example to test the applicability.
- Information System /
- security system /
- applicability

[1]	铁路信息化领导小组办公室. 铁路信息化总体规划[Z]. 北京：铁道部,2004,12：9-11。
[2]	沈昌祥. 构造积极防御的安全保障框架[J]. 网络安全技术与应用,2003（11）.
[3]	刘永华. 网络信息安全技术[M]. 北京：中国铁道出版社,2011,7：96-99.