【摘要】：隨著網(wǎng)絡(luò)信息技術(shù)的飛速發(fā)展,計(jì)算機(jī)控制的網(wǎng)絡(luò)在鐵路行業(yè)中呈現(xiàn)出巨大需求。通過網(wǎng)絡(luò),分散在各處的列車控制系統(tǒng)被聯(lián)系在一起,它們之間共享程序、數(shù)據(jù)、文檔等各種資源,進(jìn)行協(xié)同控制,大大提升了工作效率。計(jì)算機(jī)網(wǎng)絡(luò)在方便鐵路信號(hào)控制系統(tǒng)的同時(shí)也因自身存在的開放性、連通性和共享性等特征使得鐵路控制網(wǎng)絡(luò)中隱藏著各種各樣的安全風(fēng)險(xiǎn)。鐵路信號(hào)控制網(wǎng)絡(luò)隸屬于鐵路運(yùn)輸網(wǎng),是以普通計(jì)算機(jī)網(wǎng)絡(luò)為基礎(chǔ)的工業(yè)控制專網(wǎng),其網(wǎng)絡(luò)地理跨度大、子網(wǎng)多、結(jié)構(gòu)相對(duì)復(fù)雜,實(shí)時(shí)性要求高,一旦病毒或攻擊入侵則會(huì)造成不可估量的損失或?yàn)?zāi)難性后果,為此鐵路信號(hào)控制網(wǎng)絡(luò)對(duì)網(wǎng)絡(luò)安全提出了全新的要求。 在上述背景下,論文首先分析了我國鐵路信號(hào)控制網(wǎng)絡(luò)的發(fā)展現(xiàn)狀和所面臨的安全問題,闡述了這些安全威脅的嚴(yán)重性和防護(hù)技術(shù)的局限性,進(jìn)而針對(duì)鐵路信號(hào)控制網(wǎng)絡(luò)的特點(diǎn)提出了一種網(wǎng)絡(luò)安全防護(hù)方案,設(shè)計(jì)了基于μC/OS-II面向鐵路控制網(wǎng)絡(luò)安全協(xié)議的隔離平臺(tái),包括該平臺(tái)的硬件電路設(shè)計(jì)和嵌入式μC/OS-II系統(tǒng)的移植與相關(guān)程序的編寫。最后,介紹了所述安全隔離平臺(tái)的整體性能與測(cè)試方法。 綜合控制網(wǎng)絡(luò)協(xié)議安全隔離平臺(tái)采用DUAL-MCU(LPC3250)+DUAL-PORT STATIC RAM的系統(tǒng)構(gòu)架,集成了以太網(wǎng)、CAN、 PROFIBUS、422以及232等網(wǎng)絡(luò)協(xié)議標(biāo)準(zhǔn)和現(xiàn)場(chǎng)總線技術(shù),有助于鐵路信號(hào)控制系統(tǒng)的終端加固和邊界防護(hù)。通過大量的模擬測(cè)試與仿真驗(yàn)證,結(jié)果表明,該平臺(tái)不但能較好地保證通信的實(shí)時(shí)性,還有較高的系統(tǒng)吞吐量,為提高鐵路信號(hào)控制網(wǎng)絡(luò)安全提供參考。
[Abstract]:With the rapid development of network information technology, the computer-controlled network presents a huge demand in the railway industry. Through the network, the train control systems scattered in various places are linked together, and they share programs, data, documents and other resources to carry out collaborative control, which greatly improves the working efficiency. Computer network not only facilitates the railway signal control system, but also because of its own characteristics of openness, connectivity and sharing, there are various security risks hidden in the railway control network. The railway signal control network belongs to the railway transportation network. It is a special industrial control network based on the ordinary computer network. The network has a large geographical span, many subnets, relatively complex structure and high real-time requirements. Once a virus or attack is invaded, it will cause incalculable losses or disastrous consequences. Therefore, the railway signal control network has put forward a new requirement for network security. Under the above background, the paper first analyzes the present situation of railway signal control network in China and the security problems it faces, and expounds the seriousness of these security threats and the limitation of protection technology. Then, according to the characteristics of railway signal control network, a network security protection scheme is proposed, and an isolation platform for railway control network security protocol based on 渭 C/OS-II is designed. Including the hardware circuit design of the platform, the embedded 渭 C/OS-II system transplant and the programming of related programs. Finally, the overall performance and testing method of the security isolation platform are introduced. The integrated control network protocol security isolation platform adopts the system framework of DUAL-MCU (LPC3250) DUAL-PORT STATIC RAM, and integrates network protocol standards, such as Ethernet, CAN, PROFIBUS,422 and 232, and fieldbus technology. It is helpful for terminal reinforcement and boundary protection of railway signal control system. Through a large number of simulation tests and simulations, the results show that the platform not only can ensure the real-time communication, but also has a higher system throughput, which provides a reference for improving the safety of railway signal control network.
【學(xué)位授予單位】：西南交通大學(xué)
【學(xué)位級(jí)別】：碩士
【學(xué)位授予年份】：2014
【分類號(hào)】：U284;TP393.08

【參考文獻(xiàn)】

相關(guān)期刊論文 前10條

1 胡屏,柏軍;單片機(jī)應(yīng)用系統(tǒng)中的看門狗技術(shù)[J];吉林大學(xué)學(xué)報(bào)(信息科學(xué)版);2003年02期

2 龔炯;李驥群;;區(qū)間軌道電路分路不良情況下的防護(hù)處理研究[J];高速鐵路技術(shù);2012年03期

3 翟紅兵;;關(guān)于鐵路信號(hào)控制系統(tǒng)故障導(dǎo)向安全的探討[J];信息安全與技術(shù);2013年02期

4 伏曉;蔡圣聞;謝立;;網(wǎng)絡(luò)安全管理技術(shù)研究[J];計(jì)算機(jī)科學(xué);2009年02期

5 沈金榮;劉翔;;μC/OS-II內(nèi)核結(jié)構(gòu)分析及多任務(wù)調(diào)度實(shí)現(xiàn)[J];計(jì)算機(jī)工程;2006年23期

6 俞勤豐;孫涌;;μC/OS-Ⅱ中內(nèi)存管理方法的分析及改進(jìn)[J];計(jì)算機(jī)工程;2009年11期

7 薛安琪;屈玉貴;趙寶華;;一種新的實(shí)時(shí)系統(tǒng)內(nèi)核調(diào)度算法[J];計(jì)算機(jī)工程;2011年06期

8 安靜;王令群;吳汶麒;;基于Turbo碼的CBTC系統(tǒng)安全信息傳輸研究[J];計(jì)算機(jī)仿真;2008年09期

9 馬建軍;許紅;楊浩;;鐵路信息化發(fā)展戰(zhàn)略規(guī)劃研究[J];交通與計(jì)算機(jī);2006年03期

10 張威;潘小鳳;;防火墻與入侵檢測(cè)技術(shù)探討[J];南京工業(yè)職業(yè)技術(shù)學(xué)院學(xué)報(bào);2008年02期

相關(guān)博士學(xué)位論文 前2條

1 馬俊;面向內(nèi)部威脅的數(shù)據(jù)泄漏防護(hù)關(guān)鍵技術(shù)研究[D];國防科學(xué)技術(shù)大學(xué);2011年

2 閆璽璽;開放網(wǎng)絡(luò)環(huán)境下敏感數(shù)據(jù)安全與防泄密關(guān)鍵技術(shù)研究[D];北京郵電大學(xué);2012年

，

本文編號(hào)：2403970