随着无人驾驶技术、城轨云技术、互联互通等网络化新技术在城市轨道交通中的广泛应用，导致信号系统内外部接口大量增加，随之带来内部与外界对系统网络环境的恶意攻击。作为地铁的“大脑”，信号系统的信息安全尤为重要。通过分析信号系统的整体网络架构，针对信号系统信息网络的安全隐患及防护现状，提出了信号系统信息安全的主被动防御体系，将现有的主动防御和被动防御技术相结合，建立基于等级保护的被动防御模型，并从安全技术、安全策略、安全管理3个维度出发，提出主动防御模型，达到充分保障信号系统的信息网络安全的效果。

With the extensive application of new networking technologies, such as self-driving technology, urban rail cloud technology, and interconnection in urban rail transit, the number of internal and external interfaces of the signal system has increased. This has resulted in malicious attacks on the system network environment from both the inside and outside. As the “brain” of the subway, the information security of the signal system is particularly important. By analyzing the overall network architecture of the signal system, the active and passive defense systems of the information network security of the signal system are proposed based on the hidden dangers and protection status. A passive defense model based on hierarchical protection was established by combining existing active and passive defense technologies. In addition, an active defense model was proposed from three dimensions: security technology, security policy, and security management, which can fully guarantee the information network security of the signal system.

U284