Abstract: In order to improve the ability of network security protection of railway communication network, the current situation of application of railway communication network and the existing network security risks were summarized and analyzed. Guided by Cybersecurity Law of the People's Republic of China and Baseline for Classified Protection of Cybersecurity, research on system architecture, core capabilities and key technologies was carried out. The railway operation management system was taken into consideration, and the management requirements of centralized monitoring of network security, early warning of events, security situation awareness, security compliance detection and unified operation and maintenance of security business were discussed. The overall technical framework and deployment proposal of network security center were proposed. The results show that the proposed technology scheme can provide technical support for the construction and implementation of ″one center, three protection″ network security protection system of railway communication network.

Key words: railway communication, network security, active defense, situational awareness, technical architecture