Journal of Information Security Reserach ›› 2022, Vol. 8 ›› Issue (11): 1092-.

Previous Articles     Next Articles

Research and Thinking on the Technical Framework of Data Security  in the Field of Transportation

  

  • Online:2022-11-06 Published:2022-11-03

交通运输领域数据安全技术框架研究与思考

贺志生1张远云2董绍岩3
  

  1. 1(360政企安全集团北京100016)
    2(卫士通信息产业股份有限公司成都610095)
    3(北京控股集团大数据公司北京100023)
  • 通讯作者: 贺志生 硕士.主要研究方向为数据安全、网络安全、零信任、智慧城市网络空间安全及云安全. hzs726@126.com
  • 作者简介:贺志生 硕士.主要研究方向为数据安全、网络安全、零信任、智慧城市网络空间安全及云安全. hzs726@126.com 张远云 高级工程师.主要研究方向为商用密码、智慧城市网络空间安全、云安全、网络安全、数据安全、工业互联网安全. zhang_00125@163.com 董绍岩 高级工程师.主要研究方向为混合云平台、智慧城市网络空间安全、云安全、网络安全、数据安全. dsy310@126.com

Abstract: In recent years, in the continuous advancement of the construction of “digital government”, the “data gap” and “data island” between government departments have been gradually broken. As the core resource of digital government, data is an important driving force for national development,and also the most valuable core asset. With the largescale aggregation, integration and sharing of various data resources, a series of data securityrelated problems have emerged. For example, due to the high concentration of data, data is more likely to become the target of attacks, and a large number of illegal operations by internal personnel lead to data tampering and greatly increase. In order to solve the problem of data security in the field of transportation, this paper makes an indepth analysis of the main challenges of data security in the field of transportation technology and transportation, and proposes to create an “overall technical architecture of data security management and control”, and focuses on thinking and discussing the full life cycle security of data and data security operation    in the field of transportation. Data security management is not within the scope of this paper.

Key words: digital government, data gap, data silos, primary power, attack target, core assets, data tampering, data leakage

摘要: 近年来,在“数字政府”建设的不断推进过程中,政府部门之间的“数据鸿沟”“数据孤岛”现象逐渐被打破,数据作为数字政府的核心资源,是国家发展的重要原生动力,也是最有价值的核心资产.随着各类数据资源的大量汇聚、整合共享,延伸出一系列数据安全相关问题,如因数据高度集中导致数据更容易成为攻击的目标,内部人员的大量违规操作导致数据篡改、极大程度增加数据在流动和共享交换过程中数据泄露风险等.为了解决交通运输领域数据安全的问题,对交通技术运输领域面临的数据安全主要挑战进行了深入分析,提出打造“数据安全管控整体技术体系架构”,重点围绕交通运输领域的数据全生命周期安全和数据安全运营进行思考和探讨,数据安全管理不在此讨论范围内.

关键词: 数字政府, 数据鸿沟, 数据孤岛, 原生动力, 攻击目标, 核心资产, 数据篡改, 数据泄露