铁路关键信息基础设施安全保护框架研究

通过对铁路关键信息基础设施安全保护现状的研究,在网络安全等级保护2.0要求的基础上,结合中国国家铁路集团有限公司网络安全需要,以铁路关键信息基础设施为重点保护对象,以风险管控为出发点,建立一套以识别、保护、检测、响应、恢复为核心的铁路关键信息基础设施安全保护框架.巩固网络安全基础设施保护能力,夯实网络安全合规建设基础,...

Research on security protection framework of railway key information infrastructure

Through the research on the current situation of the security protection of railway critical information infrastructure, based on the design requirements of Classified Protection 2.0 of Cybersecurity, combining with the network security needs of CHINA RAILWAY, taking the railway key information infrastructure as the important protection object and risk control as the starting point, this paper established a security protection framework of railway key information infrastructure with the core of identification, protection, detection, response and recovery. The framework helps to consolidate the network security infrastructure protection ability, consolidate the foundation of network security compliance construction, strengthen the network security key protection ability, carry out the measures of key information infrastructure security protection, and gradually realize the protection of railway key information infrastructure security with solid foundation, smooth links, efficient measures and strong response.