摘要
自助终端作为传统人工操作的补充,在政务、交通以及能源等领域广泛应用.随着电子和信息技术的飞速发展,以及支付宝和微信等移动支付方式的普及,自助终端的性能不断提升,成本不断降低,其应用领域和范围不再受设备体积、支付方式和网络接入等因素制约.然而,在自助终端日益普及的同时,相关的网络安全问题不断暴露.在分析当前自助终端现状的基础上,本文以成都市范围内的政务服务以及交通运输领域为例,分析自助终端在关键基础设施领域部署,应用及管理方面存在的网络安全风险与隐患,并提出在物联网应用场景下针对自助终端近源渗透攻击的网络安全威胁评估模型及应对策略.
Self-service terminals are widely used in many fields,such as government services,transportation systems,energy systems and so on,as supplements to manual operations.With the rapid development of electronic and information technologies,as well as the popularity of mobile payment such as Alipay and WeChat pay,the performance of the self-service terminals gets stronger while the cost gets lower,there are less constraints on the shape,size and application of the self-service terminals.While the self-service terminals get more popular,cyber risks and threats in critical infrastructures which involve so many self-service terminals are constantly exposed.Based on the analysis of the current situations of the self-service terminals,taking the government services and transportation systems of Chengdu as an example,the cybersecurity risks and threats in the deployment,application and management of them are analyzed,the threats assessment model and corresponding countermeasures for the cyber security accidents caused by the nearby attack on self-service terminals in the Internet-of-Things(IoT)applications scenarios are proposed.
作者
邵林
牛伟纳
张小松
SHAO Lin;NIU Wei-Na;ZHANG Xiao-Song(Institute for Cyber Security,University of Electronic Science and Technology of China,Chengdu 611731,China;Department of Information Technology,Sichuan Business Vocational College,Chengdu 611131,China)
出处
《四川大学学报（自然科学版）》
CAS
CSCD
北大核心
2023年第1期97-107,共11页
Journal of Sichuan University(Natural Science Edition)
基金
教育部重点基金项目(6141A02011904)。
关键词
物联网
自助终端
近源渗透
网络安全
威胁评估
IoT
Self-service terminals
Nearby attack
Cybersecurity
Threats assessment
