Risk assessment method for information safety of train operation control system

doi:10.16265/j.cnki.issn1003-3033.2020.S1.030

Abstract

Abstract: In order to evaluate information safety level of the train operation control system of urban rail transit, some suggestions on risk management were put forward, information safety risk assessment method for train operation control system was studied. Firstly, equipment composition and train control principle of train operation control system based on communication were introduced. Then, complex network model of train control system was constructed, and the mobile authorization transmission path was proposed to analyze the impact of network attack on train control. Secondly, the attack tree method was used to determine the possibility of network attack events. Finally, method of information safety risk assessment of train operation control system was given, and the simulation was carried out by the semi-physical simulation platform.The research shows that this method can find the weak links in the system and reflect information safety state of system.

Key words: communication-based train control(CBTC), cyber safety, risk assessment, complex network, attack tree

CLC Number:

X913.4

ZHANG Fan, BU Bing, ZHAO Junyi. Risk assessment method for information safety of train operation control system[J]. China Safety Science Journal, 2020, 30(S1): 172-178.

References

[1] 秦国英. 城市轨道交通列控系统信息安全入侵检测方法研究[D].北京:北京交通大学,2019.
QIN Guoying. Cyber security intrusion detection methods of urban rail transit control system[D].Beijing: Beijing Jiaotong University, 2019.
[2] KIM S, WON Y, PARK I H, et al. Cyber-physical vulnerability analysis of communication-based train control[J]. IEEE Internet of Things Journal, 2019, 6(4): 6 353-6 362.
[3] REKIK M, GRANSART C, BERBINEAU M. Cyber-physical security risk assessment for train control and monitoring systems[C]. 2018 IEEE Conference on Communications and Network Security (CNS). IEEE, 2018: 1-9.
[4] 张维,步兵,王洪伟.基于KF的列控系统数据篡改攻击检测方法[J].中国安全科学学报,2019,29(增1):32-37.
ZHANG Wei, BU Bing, WANG Hongwei. An intrusion detection method of date tampering attack in train control system based on KF[J]. China Safety Science Journal, 2019,29(S1):32-37.
[5] 董慧宇,唐涛,王洪伟.基于二维结构熵的CBTC系统信息安全风险评估方法[J].自动化学报,2019,45(1):153-162.
DONG Huiyu, TANG Tao, WANG Hongwei. A 2D structure entropy-based approach to security assessment of communication-based train control system[J]. Acat Automatica Sinica,2019,45(1):153-162.
[6] WANG Lijian, WANG Bin, PENG Yongjun. Research the information security risk assessment technique based on Bayesian network[C]. 2010 3rd International Conference on Advanced Computer Theory and Engineering (ICACTE). IEEE, 2010, 3: V3-600-V3-604.
[7] MURATA T. Petri nets: properties, analysis and applications[J]. Proceedings of the IEEE, 1989, 77(4): 541-580.
[8] KAMIL M Z, TALEB-BERROUANE M, KHAN F, et al. Dynamic domino effect risk assessment using petri-nets[J]. Process Safety and Environmental Protection, 2019, 124: 308-316.
[9] 余敬芝,燕飞,牛儒.基于Petri网的形式化安全分析方法[J].中国安全科学学报,2019,29(增2):138-143.
YU Jingzhi, YAN Fei, NIU Ru. Formal safety analysis method based on Petri net [J]. China Safety Science Journal, 2019,29(S2):138-143.
[10] SCHNEIER B. Attack trees modeling security threats[J]. Dr. Dobb′s Journal, 1999, 24(12): 21-29.
[11] 熊文泽,靳江红,唐军梅.SCADA系统信息安全定量风险评估方法[J].中国安全科学学报,2019,29(8):157-163.
XIONG Wenze, JIN Jianghong, TANG Junmei. Quantitative risk assessment method for information security of SCADA systems [J]. China Safety Science Journal, 2019,29(8):157-163.
[12] 陈荣武,诸昌钤,刘莉.CBTC系统列车追踪间隔计算及优化[J].西南交通大学学报,2011,46(4):579-585.
CHEN Rongwu, ZHU Changqian, LIU Li. Calculation and optimization of train headway in CBTC system[J]. Journal of Southwest Jiaotong University,2011,46(4):579-585.
[13] BOCCALETTI S, LATORA V, MORENO Y, et al. Complex networks: Structure and dynamics[J]. Physics Reports, 2006, 424(4/5): 175-308.
[14] 黄慧萍,肖世德,孟祥印.基于攻击树的工业控制系统信息安全风险评估[J].计算机应用研究,2015,32(10):3022-3025.
HUANG Huiping, XIAO Shide, MENG Xiangyin.Attack tree-based method for assessing cyber security risk of industrial control system[J]. Application Research of Computes,2015,32(10):3022-3025.

[1]	LIU Jiahao, YU Yang, ZHANG Zhenxing, YU Jianxing, WANG Weiwei, FU Yiqin. Risk assessment method of risers based on two-dimensional cloud model and BN [J]. China Safety Science Journal, 2022, 32(5): 147-154.
[2]	XIN Baoquan, YU Jianliang, DANG Wenyi, BAI Yongzhong,YU Anfeng. Hazard characteristics of multi-component mixtures from perspective of quantitative risk assessment [J]. China Safety Science Journal, 2022, 32(4): 80-85.
[3]	LU Ying, ZHAO Zhipan, JIANG Xuepeng, WU Jindong, FAN Xiaopeng. Dynamic fire risk indexes for stadiums from perspective of big data [J]. China Safety Science Journal, 2022, 32(4): 155-162.
[4]	CHEN Shengdi, GE Xiaowan, ZHAO Xiaochen, LU Jian, XING Yingying. Normal traffic risk assessment of second-class highways in mountainous areas during operation period [J]. China Safety Science Journal, 2022, 32(2): 176-183.
[5]	HUANG Jie, ZHANG Xianfeng. Risk assessment of regional violent terrorist attacks in southern Xinjiang [J]. China Safety Science Journal, 2022, 32(2): 192-199.
[6]	ZHANG Ge. Pneumoconiosis risk assessment method based on cumulative dust exposure [J]. China Safety Science Journal, 2022, 32(2): 200-206.
[7]	HAN Peng, WANG Jun, WANG Qi, ZHAO Yifei. Study on air traffic control risks of aircraft flight test activities based on flight profile [J]. China Safety Science Journal, 2022, 32(1): 149-156.
[8]	LIU Jichuan, GUI Lei. Urban public safety risk assessment and control measures: a case study on Wuhan city [J]. China Safety Science Journal, 2022, 32(1): 164-171.
[9]	XIN Baoquan, DANG Wenyi, YU Jianliang, WANG Xige, YAN Xingqing, LU Wei. Quantitative evaluation method of blast-resistant and defense loads for VCE in petrochemical process [J]. China Safety Science Journal, 2021, 31(9): 113-118.
[10]	LONG Tengteng, YIN Jiyan, OU Zhaorong, YANG Qiang, LI Yong, WANG Qiuhua. Comprehensive assessment and spatial pattern study on forest fire risk in Yunnan Province [J]. China Safety Science Journal, 2021, 31(9): 167-173.
[11]	AN Yu, LI Ziqi, WANG Hui, GUO Zimeng, ZHANG Jiangbonan. Risk assessment on unsafe behaviors of university laboratories based on FBN [J]. China Safety Science Journal, 2021, 31(5): 160-167.
[12]	MA Run, QIU Weibin, QIN Yun, OU Hongxiang. Fault risk assessment of sliding plug door of EMU based on fuzzy interval TOPSIS [J]. China Safety Science Journal, 2021, 31(4): 177-183.
[13]	ZHAO Dongyue, CHEN Changkun, YI Liang. Time-series risk assessment model for disaster evolution network [J]. China Safety Science Journal, 2021, 31(3): 171-177.
[14]	LU Jintao, REN Licheng, RONG Dan, GUO Xinyao. Assessment of coal mine gas explosion risk based on grey-matter element model [J]. China Safety Science Journal, 2021, 31(2): 99-105.
[15]	HAN Peng, ZHANG Bingyu. Effect of track error on safety risk assessment of UAV ground impact [J]. China Safety Science Journal, 2021, 31(2): 106-111.