摘要
[目的/意义]随着铁路行业信息化的快速发展,网络安全人才培养已成为保障铁路系统安全运行的关键.旨在基于中国铁路西安局集团有限公司网络安全人才培养的现状与挑战,提出ASKP-R模型,并基于平行仿真技术构建符合铁路行业网络安全人才培养体系,以满足数字化转型对网络安全专业人才的迫切需求.[方法/过程]借鉴美国NCWF框架和《网络安全人才实战能力白皮书》理念,结合我国铁路行业特点,扩展ASK-P模型,加入铁路(R)维度.通过平行仿真技术构建一个仿真平台,模拟铁路信息系统的真实运作环境,设计了包括意识、技能、知识、实践和铁路行业特定知识在内的全方位人才培养体系.[结果/结论]通过实战演练、案例复现和综合演练等多样化的教学方法,可以有效地提升学员的网络安全意识、技能和知识,为我国铁路行业网络安全人才培养提供了一个系统化和科学化的解决方案,有助于推动我国铁路行业网络安全保障体系的建立与完善.
[Purpose/Significance]With the rapid development of informatization in the railway industry,the cultivation of cybersecurity talents has become crucial for ensuring the secure operation of railway systems.This paper aims to analyze the current status and challenges of cybersecurity talent cultivation in China Railway Xi'an Group Co.,Ltd.,innovatively proposes the ASKP-R model,and constructs a cybersecurity talent training system that conforms to the railway industry based on parallel simulation technology,to meet the urgent demand for cybersecurity professionals in the railway industry.[Method/Process]This study draws on the concepts of the American NCWF framework and the Cybersecurity Talent Combat Capability Report,integrates the characteristics of the railway industry,expands the ASK-P model,and adds the railway(R)dimension.A simulation platform was constructed using parallel simulation technology to simulate the operational environment of the railway information system,and a comprehensive talent training system was designed,including awareness,skills,knowledge,practice,and specific knowledge for the railway industry.[Results/Conclusion]The training system,through a variety of teaching methods such as practical exercises,case reproductions,and comprehensive drills,can effectively enhance the cybersecurity awareness,skills,and knowledge of the trainees.It also provides a systematic and scientific solution for the cultivation of cybersecurity talent in the railway industry,which helps to promote the establishment and improvement of the cybersecurity protection system in the railway industry.
作者
徐亮
王震华
邹腾飞
Xu Liang;Wang Zhenhua;Zou Tengfei(China Railway Xi'an Group Co.,Ltd.,ShangxinXi'an710000;Integrity Tech.Group Co.,Ltd.,Beijing 100094)
出处
《网络空间安全》
2024年第4期194-199,共6页
Cyberspace Security
基金
中国铁路西安局集团有限公司科技研究开发计划项目(项目编号:N2023040)。
作者简介
徐亮(1981-),男,汉族,陕西宝鸡人,西南交通大学,本科,中国铁路西安局集团有限公司,高级工程师,主要研究方向和关注领域:铁路行业网络安全体系建设和安全管理;王震华(1976-),女,汉族,陕西华阴人,兰州交通大学,本科,中国铁路西安局集团有限公司,正高级工程师,主要研究方向和关注领域:网络安全攻防技术;邹腾飞(1985-),男,汉族,辽宁沈阳人,吉林大学,本科,永信至诚科技集团股份有限公司,工程师,主要研究方向和关注领域:网络安全人才培养、平行仿真技术和网络安全攻防技术。
