基于纵深防御与智能分析的AFC安全增强方案研究OA

As a critical Cyber-Physical System(CPS),the Automatic Fare Collection(AFC)system faces unprecedented cybersecurity challenges.Building on existing schemes based on Information security technology—Baseline for classified protection of cybersecurity(GB/T 22239-2019),this study proposes an enhanced cybersecurity framework that complies with the IEC 62443 and CLC/TS 50701 standards.This framework integrates the MITRE ATT&CK framework with the Attack-Fault Tree(AFT)methods to enable intelligent risk assessment,thereby countering stealthy targeted attacks.It incorporates the Multiple Independent Levels of Security(MILS)architecture and the Security Development Lifecycle for CPPS(SDL-CPPS)concept to strengthen inherent system and supply chain security.It also combines the Zero Trust Network Access(ZTNA)framework with the intelligent Cyber Security Operations Center(CSOC)technologies to establish a dynamic defense-in-depth system across the entire AFC system lifecycle.This study provides forward-looking guidance for improving AFC cybersecurity schemes,to ensure the safety,stability,and resilience of critical infrastructure in urban rail transit against Advanced Persistent Threats(APTs).