摘要
针对国内外网络安全靶场的建设现状,结合我国铁路网络安全工作所面临的突出问题和实际需求,采用网络仿真与复现、网络流量行为模拟、试验数据采集与分析、安全隔离与控制等关键技术,提出了构建“两库五域”的铁路网络安全靶场设计方案,并对预期效果进行了分析。通过该靶场,可开展网络安全科研创新、攻防对抗演练、安全效能评估、教学实训等科研和试验任务。
Aiming at the construction status of network security shooting range at home and abroad,combined with the outstanding problems and actual needs of the railway network security work,this paper putted forward the design method about constructing"two storehouses and five domains"railway network security shooting range by research the key technologies such as network simulation and reproduction,network traffic and user behavior simulation,acquisition and analysis of testing data,security isolation and control,and analyzed the expected effect.With the help of the shooting range,scientific research and test tasks such as network security scientific research innovation,attack and defense confrontation drill,security efficiency evaluation and teaching training can be carried out,which is of great significance to the construction of railway network security shooting range.
作者
祝咏升
姚洪磊
崔伟健
ZHU Yongsheng;YAO Honglei;CUI Weijian(Institute of Computing Technologies,China Academy of Railway Sciences Corporation Limited,Beijing 100081,China)
出处
《铁路计算机应用》
2021年第8期52-56,共5页
Railway Computer Application
基金
中国铁道科学研究院集团有限公司技术研究重大课题(2019YJ108)。
关键词
铁路网络安全靶场
攻防演练
网络复现
安全隔离
效能评估
railway network security shooting range
attack and defense confrontation drill
network reproduction
security isolation
effectiveness evaluation
