铁路通信信号工程技术2026，Vol.23Issue(6)：10-15,6.DOI:10.3969/j.issn.1673-4440.2026.06.002
基于纵深防御与智能分析的AFC安全增强方案研究
Research on AFC Security Enhancement Scheme Based on Defense-in-Depth and Intelligent Analysis
摘要
Abstract
As a critical Cyber-Physical System(CPS),the Automatic Fare Collection(AFC)system faces unprecedented cybersecurity challenges.Building on existing schemes based on Information security technology—Baseline for classified protection of cybersecurity(GB/T 22239-2019),this study proposes an enhanced cybersecurity framework that complies with the IEC 62443 and CLC/TS 50701 standards.This framework integrates the MITRE ATT&CK framework with the Attack-Fault Tree(AFT)methods to enable intelligent risk assessment,thereby countering stealthy targeted attacks.It incorporates the Multiple Independent Levels of Security(MILS)architecture and the Security Development Lifecycle for CPPS(SDL-CPPS)concept to strengthen inherent system and supply chain security.It also combines the Zero Trust Network Access(ZTNA)framework with the intelligent Cyber Security Operations Center(CSOC)technologies to establish a dynamic defense-in-depth system across the entire AFC system lifecycle.This study provides forward-looking guidance for improving AFC cybersecurity schemes,to ensure the safety,stability,and resilience of critical infrastructure in urban rail transit against Advanced Persistent Threats(APTs).关键词
城市轨道交通/AFC系统/纵深防御/智能化风险评估/MILS/零信任/网络安全运营Key words
urban rail transit/AFC system/defense-in-depth/intelligent risk assessment/MILS/zero trust/cybersecurity operation分类
交通工程引用本文复制引用
刘明,张国慧,何平..基于纵深防御与智能分析的AFC安全增强方案研究[J].铁路通信信号工程技术,2026,23(6):10-15,6.基金项目
中铁二院工程集团有限责任公司重点司控科研项目(KSNQ233007) （KSNQ233007）
