轨道交通工业控制系统信息安全：分析与展望

doi:10.11959/j.issn.2096-6652.202114

Abstract

Abstract:

As one of the important national infrastructures, more and more attentions are attracted by the industrial control system for rail (ICS-R), with the rapid development of information technology and the increasingly severe network situation.The system composition of ICS-R was analyzed, the types of security threats faced by the ICS-R were summarized and analyzed, the practical cases of threat propagation were given, and the information security threat trend of ICS-R was analyzed considering the development trend of technology.Finally, several development suggestions were prospected as promising techniques.

Key words: industrial control system for rail, information security of industrial control system, threat analysis

CLC Number:

TP309

Yidong LI, Zikai ZHANG, Hairong DONG, et al. Information security of the industrial control system for rail：analysis and prospect[J]. Chinese Journal of Intelligent Science and Technology, 2021, 3(2): 139-148.

Figures/Tables 4

References 30

[1]	中国铁路总公司. CTCS-3级列车运行控制系统[M]. 北京: 中国铁道出版社, 2013.
	China Railway Corporation. CTCS-3 train operation control system[M]. Beijing: China Railway Publishing, 2013.
[2]	钱清泉, 高仕斌, 何正友 ,等. 中国高速铁路牵引供电关键技术[J]. 中国工程科学, 2015(4): 9-20.
	QIAN Q Q , GAO S B , HE Z Y ,et al. Study of China high-speed railway traction power supply key technology[J]. Engineering Science, 2015(4): 9-20.
[3]	中华人民共和国交通运输部. 城市轨道交通运营技术规范:GB/T 38707-2020[S]. 2020.
	Ministry of Transport of the People’s Republic of China. Regulation for operation technology of urban rail transit:GB/T 38707-2020[S]. 2020.
[4]	梁建英, 杨中平, 张济民 . 中国高铁丛书:高速列车[M]. 上海: 上海科学技术文献出版社, 2019.
	LIANG J Y , YANG Z P , ZHANG J M . China high speed rail series:high speed train[M]. Shanghai: Shanghai Scientific and Technological Literature Press, 2019.
[5]	马化洲 . 城市轨道交通线路轨道系统安全风险评价[D]. 北京:北京交通大学, 2011.
	MA H Z . Safety risk assessment of urban rail transit line rail system[D]. Beijing:Beijing Jiaotong University, 2011.
[6]	梁建英, 杨中平, 张济民 . 中国高铁丛书:高铁线路工程[M]. 上海: 上海科学技术文献出版社, 2019.
	LIANG J Y , YANG Z P , ZHANG J M . China high speed rail series:high speed rail line engineering[M]. Shanghai: Shanghai Scientific and Technological Literature Press, 2019.
[7]	李晓宇, 刘敬辉 . 高速铁路自然灾害及异物侵限监测系统可靠性分析与优化研究[J]. 中国铁路, 2019(5): 27-32.
	LI X Y , LIU J H . Reliability analysis and optimization of HSR natural disaster and intrusion monitoring system[J]. China Railways, 2019(5): 27-32.
[8]	王俊, 王江丽 . 高速铁路防灾安全监控系统设计[J]. 中国安全科学学报, 2018,28(S1): 39-45.
	WANG J , WANG J L . Design of disaster prevention and safety monitoring system for high-speed railway[J]. China Safety Science Journal, 2018,28(S1): 39-45.
[9]	侯智雄, 李颖, 魏世斌 ,等. 城市轨道交通轨道检测系统关键设备研制及应用[J]. 铁道建筑, 2020,60(1): 103-107.
	HOU Z X , LI Y , WEI S B ,et al. Development and application of key equipments for urban rail transit track detection system[J]. Railway Engineering, 2020,60(1): 103-107.
[10]	孙汉武 . 铁路安全检查监测保障体系及其应用研究[D]. 成都:西南交通大学, 2010.
	SUN H W . Study on railway safety inspection and monitoring of security system[D]. Chengdu:Southwest Jiaotong University, 2010.
[11]	赵治国, 徐跃, 马谢 ,等. 雷电电磁环境对高速列车影响分析方法研究[J]. 通信技术, 2019,52(9): 2207-2211.
	ZHAO Z G , XU Y , MA X ,et al. Analysis method of impact of lightning electromagnetic environment on high-speed trains[J]. Communications Technology, 2019,52(9): 2207-2211.
[12]	廖喜 . 铁路防灾安全监控系统的组成[J]. 铁道运营技术, 2017,23(2): 67-70.
	LIAO X . The composition of railway disaster prevention and safety monitoring system[J]. Railway Operation Technology, 2017,23(2): 67-70.
[13]	陈超群, 陈勃, 刘布麒 ,等. 轨道交通网络信息安全防护系统研究与设计[J]. 电气技术, 2020,21(2): 50-55.
	CHEN C Q , CHEN B , LIU B Q ,et al. Research and design of information security protection system for rail transit network[J]. Electrical Engineering, 2020,21(2): 50-55.
[14]	戎志杰 . 轨道交通车辆 MVB 总线安全态势感知方法的仿真研究[D]. 太原:太原科技大学, 2018.
	RONG Z J . Simulation research on MVB security situational awareness method of rail vehicles[D]. Taiyuan:Taiyuan University of Science and Technology, 2018.
[15]	万海, 孙雷, 王恬 ,等. 列车通信网络 WTB 链路层攻击方法研究[J]. 清华大学学报(自然科学版), 2016,56(1): 42-50.
	WAN H , SUN L , WANG T ,et al. Analysis of a method for attacking WTB link layers in a train communication network[J]. Journal of Tsinghua University (Science and Technology), 2016,56(1): 42-50.
[16]	华鹏, 李艳娇, 辛久元 . 高速列车门系统FMEA及风险评估案例研究[J]. 现代城市轨道交通, 2018(3): 18-21.
	HUA P , LI Y J , XIN J Y . Case study on FMEA and risk assessment of high speed train door system[J]. Modern Urban Transit, 2018(3): 18-21.
[17]	付淳川 . 高速铁路信号系统网络安全风险评估方法研究[D]. 成都:西南交通大学, 2017.
	FU C C . Research on network security risk assessment method for high-speed railway signal system[D]. Chengdu:Southwest Jiaotong University, 2017.
[18]	王朋成 . 电铁牵引变电所内部数据传输网络安全防护研究[J]. 电气化铁道, 2020,31(z2): 66-68.
	WANG P C . Research on internal data transmission network security protection of electric railway traction substation[J]. Electric Railway, 2020,31(z2): 66-68.
[19]	廖元媛, 王剑, 田开元 ,等. 基于贝叶斯推理的铁路信号安全数据网信息安全动态风险评估[J]. 铁道学报, 2020,42(11): 84-93.
	LIAO Y Y , WANG J , TIAN K Y ,et al. Dynamic information security risk assessment for railway signaling safety data network based on Bayesian inference[J]. Journal of the China Railway Society, 2020,42(11): 84-93.
[20]	郭亮, 余骞, 袁雪冰 . 典型地面信号系统的信息安全分析[J]. 中国铁路, 2020(2): 11-16.
	GUO L , YU Q , YUAN X B . Information security analysis of typical ground signal system[J]. Chinese Railways, 2020(2): 11-16.
[21]	张伟, 李宁, 杨康 . Windows 快捷方式漏洞分析[J]. 网络安全技术与应用, 2011(1): 29-31.
	ZHANG W , LI N , YANG K . Analysis of Windows shortcuts vulnerability[J]. Network Security Technology and Application, 2011(1): 29-31.
[22]	田思 . 网络打印机应用层协议安全检测技术研究与实现[D]. 北京:北京邮电大学, 2019.
	TIAN S . Research and implementation of network printer application layer protocol security detection technology[D]. Beijing:Beijing University of Posts and Telecommunications, 2019.
[23]	National Security Agency. Commercial solutions for classified Hanbook[S]. 2017.
[24]	高尚省, 郭勇, 高智伟 ,等. 广东省数字政府网络安全评估体系与实践[J]. 大数据, 2021,7(2): 182-188.
	GAO S X , GUO Y , GAO Z W ,et al. Practice of digital government network security index evaluation system in Guangdong Province[J]. Big Data Research, 2021,7(2): 182-188.
[25]	何正友, 冯玎, 林圣 ,等. 高速铁路牵引供电系统安全风险评估研究综述[J]. 西南交通大学学报, 2016,51(3): 418-429.
	HE Z Y , FENG D , LIN S ,et al. Research on security risk assessment for traction power supply system of high-speed railway[J]. Journal of Southwest Jiaotong University, 2016,51(3): 418-429.
[26]	王捷, 王晋, 刘畅 . 电力调度自动化网络安全防护系统研究[J]. 电力系统装备, 2017(11): 88-89.
	WANG J , WANG J , LIU C . Research on network security protection system of power dispatching automation[J]. Electric Power System Equipment, 2017(11): 88-89.
[27]	马英晅 . 高速铁路牵引供电系统安全风险综述[J]. 区域治理, 2018(46): 198.
	MA Y X . Research on security risk for traction power supply system of high-speed railway[J]. Regional Govenance, 2018(46): 198.
[28]	李浥东, 张俊, 陶耀东 ,等. 平行安全:基于CPSS的生成式对抗安全智能系统[J]. 智能科学与技术学报, 2020,2(2): 194-202.
	LI Y D , ZHANG J , TAO Y D ,et al. Parallel security:generative adversarial systems for intelligent security in CPSS[J]. Chinese Journal of Intelligent Science and Technology, 2020,2(2): 194-202.
[29]	赵亚楠 . 工业控制系统信息安全 2020 年十大发展趋势[J]. 自动化博览, 2020,37(3): 14-17.
	ZHAO Y N . Ten development trends of industrial control system information security in 2020[J]. Automation Panorama, 2020,37(3): 14-17.
[30]	TVERDYSHEV S , . Security by design:introduction to MILS[C]// MILS Workshop.[S.l.:s.n.], 2017.

Metrics

Recommended 0

No Suggested Reading articles found!

对比项	传统IT信息系统	一般工业控制系统	轨道交通工业控制系统
性能要求	不要求实时	实时通信	部分子系统对实时通信要求更高
	可以忍受高时延和抖动	响应时间很关键	部分子系统可以忍受高时延和抖动，但是要求高吞吐量
	高吞吐量	时延和抖动都在一定阈值内适度吞吐量
风险管理	数据机密性和完整性最重要，可用性和容错次要，允许停机重启	操作人员的人身安全最重要，生产过程的保护和容错其次，不允许暂时停机	旅客和操作人员的人身安全最重要，生产过程的保护和容错其次，部分系统允许暂时停机
网络结构	扁平化结构主从关系不明显	纵向高度集成主从关系明显	庞大混杂的结构，既存在扁平化结构，也存在纵向高度集成
网络边缘	通用计算机	传感器和远动装置	工业计算机、服务器、传感器、远动装置
	物理安全需求不高	对物理环境有要求	物理环境复杂多样，对物理安全有更高的要求
		对员工区域有限制，可以进行设备隔离	部分设备容易被非操作人员接触到
通信内容	一般信息	遥测、遥信、遥控、遥调信息	既有用于操作人员间及操作人员与设备间合作联络的一般信息，也有遥测、遥信、遥控、遥调信息
系统业务	信息的传播、处理、存储	离散工业或流程工业业务	人员运输业务，其每个子过程都可以被看作流程工业业务
			旅客服务业务、离散工业业务以及一般信息服务业务

Information security of the industrial control system for rail：analysis and prospect

RichHTML

PDF下载

Knowledge

Abstract

Cite this article

share this article

Figures/Tables 4

References 30

Related Articles 3

Metrics

Recommended 0

[1]	Qiuyun LYU, Shaopeng CHENG, Manzhi YANG, Xiaoguang CHEN, Zhen WANG. A metaverse-oriented digital citizen authentication scheme [J]. Chinese Journal of Intelligent Science and Technology, 2022, 4(3): 396-409.
[2]	Yidong LI,Jun ZHANG,Yaodong TAO,Wei WANG,Yuanxiang GU,Fei-Yue WANG. Parallel security:generative adversarial systems for intelligent security in CPSS [J]. Chinese Journal of Intelligent Science and Technology, 2020, 2(2): 194-202.
[3]	Junhao LIN,Dongqin FENG. Process stability modeling and attack protection of industrial control system based on reverse cloud algorithm model [J]. Chinese Journal of Intelligent Science and Technology, 2020, 2(1): 53-61.