你可以信任的交通网络

Roch Muraine

Juli 19, 2022

在网络威胁的世界, transportation operators are re-thinking security strategies and adopting new methods for securing access to networks.  

网络安全风险是我们所有人的现实, every day, everywhere, 我们做的每一件事, 包括货物和人员的运输. 这是我们上班路上的现实, as we travel on trains, buses and planes, and it’s a reality for the journey that our food makes from farm to table, as well as the packages that are conveniently dropped off at our doors. 

Every connection, every hand-off along the way comes with a cybersecurity risk ― at some level. And with each connected system and subsystem, and the introduction of new technologies into 运输电视台派, the need for robust cybersecurity measures increases. That said, cybersecurity risks should not stop transportation organisations from taking full advantage of today’s faster, 更聪明、更绿色的操作.

重新思考网络安全

商品和人的绝对数量, and an unprecedented influx of devices are driving transportation organisations to re-evaluate how they address network security to deal with the way the world works today. We are all familiar with security strategies based on organisational structure and departments such as finance, sales, R&D，和人力资源. This type of segmentation strategy is no longer enough as people now work from anywhere and no departmental system is considered safer than another.

In addition to the people side of segmentation and access, transportation operators need to think about a single management system that provides a cohesive view across all wired and wireless network resources to ensure full visibility and control over all network resources.

A new security model

Transportation operators may be specialists in their industry, however, 他们可能不是网络安全专家。. Working with an experienced partner can provide the expertise necessary to develop and deploy the right model for their network.

A zero trust approach to network security safeguards the organisations’ resources, 而不是网络本身, 通过注重保护资源获取.

The way zero trust network security works is that it assumes attackers are already present and always ready to strike. There is no implicit trust ― no waiting around for a breach and then responding. It applies multiple layers of security protection equally to every internal and external person, system, subsystem, application, 和试图接入网络的设备. Access is strictly limited to the resources that are needed when the request is made. Additionally, all network resources are continuously scanned for unusual or malicious activities.

零信任的五个步骤

While every transportation operator’s cybersecurity requirements are unique, a five-step methodology can help them assess and implement the zero trust security measures that make the most sense for their organisation. These include:

1. Monitoring: Identify all data types, applications, assets, and network services that need to be protected.
2. Validating:评估数据流的方式, 通过和离开网络, including cloud environments as well as the way network resources interact.
3. Planning: Architect and segment the network around the data types, applications, assets and network services that need to be protected.
4. Simulating: Develop and test the policies to verify they appropriately consider and protect all network resources.
5. Enforcing: Continuously monitor the environment to detect policy violations, apply remediation and discover opportunities to strengthen the policy.

变化世界中值得信赖的合作伙伴

Alcatel-Lucent Enterprise is involved in some of the most innovative initiatives in the transportation industry globally, including state-wide Intelligent Transportation Systems (ITS) implementations in North America and internationally acclaimed rail initiatives in Europe.

ALE前沿，多服务，多模式 network solutions 在骨干网络中包括坚固的交换机, stackable switches at the network core and SPB technology, 所有内置安全机制. They support an exponentially increasing number of sensors, cameras and IoT devices to securely deliver passengers and goods where they need to be, when they need to be there. 

To learn more about ALE security strategies and solutions for the transportation industry, 下载我们的白皮书: Smarter, greener, more secure transportation through digital transportation.