Network security protection method and system

Abstract

The invention provides a network security protection method and system. The method comprises the following steps: determining configuration strategy routing and network security protection rules of a switch and a firewall; the firewall is connected to the switch according to the configuration strategy route and the network security protection rule, a bypass is deployed between the switch and the router, network security protection is achieved, and by means of the information security protection mode, the network security level of the TSRS can be improved with low cost and high reliability. When the firewall function is normal, CTC communication is effectively verified, and network security protection is carried out; and when the firewall fails, the communication continuity of the original system is not influenced. The hardware cost is reduced, the probability of hardware faults can be reduced, and the stability of an original system can be maintained.

Description

technical field [0001] The invention belongs to the technical field of information security, and particularly relates to a network security protection method and system. Background technique [0002] In recent years, with the increase in dependence on the Internet, cyberspace has increasingly developed into the fifth largest sovereign space after land, sea, air, and sky, and has become an important strategic space for countries to compete for. At present, all countries have taken various measures to continuously seek to enhance their cyber defense and confrontation capabilities, and the situation of cyberspace confrontation has continued to intensify. [0003] The Chinese Train Control System (CTCS) was born and developed to improve the efficiency of train operation and ensure the safe operation of trains. It also involves many professional technologies such as railway transportation, railway signal and automatic control, and communication. Once the railway network and impo...

AI Technical Summary

Problems solved by technology

[0004] In the absence of network security protection, it is impossible to verify the communication data between CTC and TSRS. Without control, if the CTC end initiates malicious communication behaviors to the TSRS end, TSRS will be attacked, thereby affecting the entire CTCS system security

For the CTC-TSRS interface data, there are currently two situations: 1. No information security protection measures are deployed; 2. A firewall is connected in series between the TSTS interface server (belonging to the CTC system) and the TSRS host

Images