基于城轨云的网络安全纵深 防御体系研究

针对城轨云网络安全问题，对城轨云网络架构、业务承载和安全风险进行梳理分析，从城轨云网络安全 技术和网络安全运维两个体系进行研究和设计，将云平台及应用系统网络安全防护措施与企业管理相结合，提出 城轨云网络安全纵深防御体系建设思路和方案。研究结果表明，构建城轨云网络安全纵深防御体系可以在面对多 层面网络可疑攻击事件时，确保城轨云具备相适应的防护能力，限制恶意或意外破坏的行为，并最大限度地提高 快速识别潜在安全漏洞的能力，减少城轨行业的经济损失和生产活动的信息泄露。

Investigation of an In-Depth Urban Rail Cloud Network Security Defense System

The architecture of an urban rail cloud network was analyzed to address the security issues and determine the business carrying capacity and security risks of the network, wherein research and design were conducted on two systems: urban rail cloud network security technology and network security operation and maintenance. Combining cloud platform and application system network security protection measures with enterprise management, a construction idea and plan are proposed for an in-depth urban rail cloud network security defense system. Research has shown that building an in-depth defense system for urban rail cloud network security can ensure the appropriate protective capabilities of the urban rail cloud in case of suspicious attacks from multiple levels of the network, which limits malicious or accidental damage behavior, maximizes the ability to quickly identify potential security vulnerabilities, and reduces economic losses and production activity information leakage in the urban rail industry.