Abstract: In the era of global connectivity and network tools to enhance accessibility, cyber warfare has become an important part of conventional warfare, a new military field. In June 2017, the British think tank AngloAmerican Security Information Committee (BASIC) released a survey report “Hacking UK Trident, A Growing Threat”, saying that the British “Trident” nuclear submarine has serious cyber security risks and is vulnerable to catastrophic cyber attacks. According to the report, a successful cyber attack may completely offset the submarine operation instructions, causing casualties and may even cause nuclear warheads to be launched directly or indirectly. This growing threat of cyberattacks against strategic missile nuclear submarines may have a serious impact on strategic stability between countries and the second strike capability of nuclear warfare. This paper analyzes the security risks in the various stages of the Trident nuclear submarine supply chain, proposes countermeasures from the national strategic level, and guides the safety of the Trident system.

Key words: information security, cyber security, risk assessment, injection attack, network worms

摘要： 在全球互联互通和网络工具增强可访问性时代，网络战争已经成为常规战争的一个重要组成部分，或称之为一个新的军事领域.2017年6月，伦敦智库英美安全信息委员会(BASIC)发布名为“Hacking UK Trident, A Growing Threat”的调查报告称，英国“三叉戟”核潜艇存在严重网络安全隐患，易遭受灾难性网络攻击.报告指出：成功的网络攻击可能会完全抵消潜艇操作指令，造成人员伤亡，甚至有可能直接或间接地引起核弹头发射.这种日益发展的针对战略导弹核潜艇的网络攻击威胁，可能会对国家间战略稳定状态和核战二次打击能力造成严重影响.分析了“三叉戟”核潜艇供应链各个阶段存在的安全风险，从国家战略层面提出应对策略，以指导“三叉戟”系统的安全.

关键词: 信息安全, 网络安全, 风险评估, 注入攻击, 网络蠕虫