首页|期刊导航|铁路通信信号工程技术|天基列控系统网络安全风险分析

天基列控系统网络安全风险分析OA

Cybersecurity Risk Analysis of Space-based Train Control System

中文摘要英文摘要

天基列控系统将低轨卫星互联网与铁路列控系统相结合,在简化部署、提升抗灾能力的同时,也引入新的网络安全威胁.为有效防范天基列控系统网络安全问题,基于系统理论过程分析的安全分析框架(Systematic Theory Process Analysis-Security,STPA-Sec),开展网络安全风险分析.通过构建控制回路,识别不安全控制动作和致因场景.根据风险分析结果,提出天基列控系统可采取的风险缓解措施,对天基列控系统的车地卫星通信网络的通信保密性和完整性防护、列控及维护设备程序可信执行两个重点场景进行网络安全防护设计.研究结果表明,网络安全风险分析和风险缓解措施可有效保障天基列控系统的网络安全,为天基列控系统网络安全防护方案的设计提供理论和技术参考.

The space-based train control system combines low-orbit satellite Internet with train control system,simplifying the deployment and improving the disaster resistance capability of but introducing new cybersecurity threats to the train control system.To effectively prevent the cybersecurity issues faced by the space-based train control system,this paper employs the STPA-Sec security analysis framework to conduct a cybersecurity risk analysis.The control loop is established to identify unsafe control actions and causal scenarios.The cybersecurity risk analysis results are considered to propose feasible risk mitigation measures for the space-based train control system.The cybersecurity protection design is presented for two key scenarios,i.e.,communication confidentiality and integrity protection of the vehicle-ground satellite communication network of the space-based train control system,and trusted program execution of the train control and maintenance equipment.The research findings indicate that cybersecurity risk analysis and risk mitigation measures can provide effective cybersecurity guarantee for the space-based train control system,thereby providing theoretical and technical reference for the design of a cybersecurity protection scheme for the space-based train control system.

申翔宇;胡晓雅;杨雅涵;马卫红;陈红学

北京全路通信信号研究设计院集团有限公司,北京 100070||列车自主运行智能控制铁路行业工程研究中心,北京 100070北京全路通信信号研究设计院集团有限公司,北京 100070||列车自主运行智能控制铁路行业工程研究中心,北京 100070北京全路通信信号研究设计院集团有限公司,北京 100070||列车自主运行智能控制铁路行业工程研究中心,北京 100070北京全路通信信号研究设计院集团有限公司,北京 100070||列车自主运行智能控制铁路行业工程研究中心,北京 100070北京全路通信信号研究设计院集团有限公司,北京 100070||列车自主运行智能控制铁路行业工程研究中心,北京 100070

信息技术与安全科学

列控系统卫星网络网络安全风险分析STPA-Sec安全分析框架

train control systemsatellite networkcybersecurity risk analysisSTPA-Sec security analysis framework

《铁路通信信号工程技术》 2026 (5)

7-13,7

国家重点研发计划项目(2024YFB3108600)中国国家铁路集团有限公司科技研究开发计划项目(N2024G039)

10.3969/j.issn.1673-4440.2026.05.002

评论