In-depth Security Defense Strategy for Rail Transit Vehicle Communication Network System

Objective The vehicle communication network contains a wide variety and a large quantity of internal and external network communication interfaces, resulting in continuous rising of the vehicle information security risks. As the traditional physical isolation can′t meet the high-level security requirements of the vehicle communication network, a multi-level protection design method should be adopted to upgrade the security protection level of this network. Method The external and internal security risks in the vehicle communication network are analyzed. Establishing an in-depth security defense strategy for the communication network system of the rail transit vehicle is proposed. A security protection system of the strategy based on security technology and security management measures is established from five aspects, i.e. security criteria, security requirement specification, security design, security implementation, security certification, and confirmation testing. Result & Conclusion The proposed strategy can achieve the whole life cycle management of the vehicle communication network system from security requirements to system design, from secure product development to operation and maintenance. It can comprehensively enhance the security protection capability of the vehicle communication network system, meeting the information security requirements.