信息安全研究 ›› 2021, Vol. 7 ›› Issue (8): 745-753.

• 学术论文 • 上一篇    下一篇

广域信息管理SWIM信息安全隐患研究#br#

聂嘉1徐新然2雷缙2   

  1. 1(中国民航大学安全科学与工程学院天津300300)
    2(中国民航大学电子信息与自动化学院天津300300)
  • 出版日期:2021-08-12 发布日期:2021-08-12
  • 通讯作者: 聂嘉
  • 作者简介:聂嘉 硕士研究生.主要研究方向为网络与信息安全. 2019071004@cauc.edu.cn 徐新然 硕士.主要研究方向为网络与信息安全. 1078923734@qq.com 雷缙 博士,讲师.主要研究方向为网络与信息安全. jlei@cauc.edu.cn

  • Online:2021-08-12 Published:2021-08-12

摘要: 随着民航业信息化建设的不断推广和深入,民航各业务系统之间高效的信息共享和资源交互成为民航业进一步发展的关键.广域信息管理系统(system wide information management, SWIM)作为全球性空中交通管理平台,正是针对上述问题提出广泛性适用的解决思路.在SWIM进行数据交互的同时,许多重要数据和敏感信息也被暴露出来,成为黑客恶意入侵的目标,SWIM面临较大的信息安全隐患.首先介绍了SWIM的研究现状,接着从功能角度介绍了SWIM的概念架构,并逐层研究了SWIM面临的主要安全隐患,同时有针对性地设计了安全防护框架,从防护技术和安全管理2个角度提出了应对措施.

关键词: 广域信息管理系统, 体系结构, 安全隐患, 安全建议, 防护框架

Abstract: With the continuous promotion and deepening of civil aviation industry informatization construction, efficient information sharing and resource interaction among various business systems of civil aviation have become the key to the further development of the civil aviation industry. System Wide Information Management (SWIM), as a global air traffic management platform, puts forward broadly applicable solutions to the abovementioned problems. While the SWIM is carrying out data exchange, many important data and sensitive information are also exposed, becoming the target of malicious intrusion by hackers, which brings greater information security hazards. This paper first introduces the research status of SWIM. Then it introduces the conceptual architecture of SWIM from a functional point of view and studies the main security risks faced by SWIM layer by layer. At the same time, it designs a targeted security protection framework and proposes countermeasures from the perspective of protection technology and safety management.

Key words: system wide information management, architecture, security potential hazards, security recommendations, protection framework