Risk-Driven Security Strategy Decision-Making for High-Speed Train Control and Monitoring System

With the extensive application of technologies like Ethernet and integrated control in high-speed trains, onboard networks encounter mounting security challenges, making the assurance of their secure and stable operation a pressing issue. Since train onboard control and monitoring systems require high reliability and continuous stability, implementing security strategies can compromise system functionality, resources, and costs. Therefore, this paper presents a risk-driven method for decision-making on security strategies, examining how to select suitable security measures that minimize security risks while maximizing security benefits. A risk assessment approach is proposed, which accounts for the propagation of attack impacts based on system topology and functional features. Finally, a network simulation system is established, referencing the topology and functional specifications of the CR300AF Fuxing EMU, and experimental outcomes confirm a close alignment between the analysis results and actual train operations.