铁路行业关键信息基础设施数据安全防护平台研究

为弥补铁路行业关键信息基础设施数据安全防护方面的薄弱环节,分析铁路行业关键信息基础设施数据安全现状,研究了数据安全防护平台的架构、特点及功能,提出了动态数据安全防护思路,运用轻量级数据加密算法与安全传输协议集成技术,对关键信息基础设施数据全生命周期进行安全防护。平台具备对关键信息基础设施数据流动过程事前感知、事中响应、事后溯源的能力。对铁路关键信息基础设施的数据安全防护具有参考价值。

Data security protection platform of critical information infrastructures in railway industry

In order to make up for the weak links in data security protection of critical information infrastructures in railway industry, this paper analyzed the current situation of data security of critical information infrastructures in railway industry, studied the framework, characteristics and functions of data security protection platform, and put forward the idea of dynamic data security protection, used the integration technology of lightweight data encryption algorithm and secure transmission protocol to protect the life cycle of critical information infrastructures data. The platform had the ability of pre perception, in-process response and post traceability to the data flow process of critical information infrastructures. It has reference value for railway critical information infrastructures in data security protection.