基于IPDRR安全框架的智慧机场关键信息基础设施网络安全建设项目
Smart Airport Key Information Infrastructure Network Security Construction Project Based on IPDRR Security Framework
马霄 1董保开 1宋锐 1白彦茹 1田晓扬1
作者信息
摘要
随着民航行业快速发展,我国智慧机场建设规模不断扩大,然而,大数据、人工智能、物联网、云计算等新一代信息技术的应用,在提升智慧机场信息化水平的同时,也给机场信息系统带来了一系列安全威胁,为"智慧机场"信息系统的正常运行及业务顺利开展埋下安全隐患.本文结合民航机场生产网业务场景的网络安全防护需求,应用"以白名单为主要防护措施,以黑名单为辅助验证手段"的技术路线,构建基于IPDRR安全框架的"智慧机场"综合防御体系,形成全方位、多层次、动态闭环的深度防护能力.
Abstract
As the civil aviation industry rapidly develops,the scale of smart airport construction in China continues to expand.However,while the application of emerging new generation information technologies such as big data,artificial intelligence,Internet of Things and cloud computing has not only improved the informationization level of smart airports,but also brought a series of security threats to airport information systems,l posing hidden security risks to the normal operation and smooth business development of"smart airports"information systems.In this paper,combined with the network security protection requirements of civil aviation airport production network business scenario,the technical route of"whitelist as the main protection measure and blacklist as the auxiliary verification means"is applied to establish a'smart airport'comprehensive defense system of"smart airport"based on IPDRR security framework,forming an all-round,multi-level and dynamic closed-loop depth protection capability.
关键词
机场网络安全/关键信息基础设施/纵深防御Key words
Airport cybersecurity/Critical information infrastructure/Defense in depth引用本文复制引用
出版年
2024
NETL
NSTL
万方数据