Research on Railway Network Data Security Risk Assessment Method Based on Attack and Defense Resource Allocation

To conduct security risk assessment on railway network data, a railway network data security risk assessment method based on attack and defense resource allocation is proposed for risk value calculation. Firstly, we analyze the security risk of railway network data leakage, draw the corresponding fault tree, and calculate the probability of attack path occurrence. Secondly, the Analytic Hierarchy Process is used to calculate security risk losses. Finally, a simulation experiment is conducted to calculate the risk values of different strategies used by both attacker and defender to allocate attack and defense resources, and analyze them. When attacker uses the same strategy to allocate attack resources, different strategies for allocating defense resources will result in a risk value change of 1.3% to 35.1%. The results indicate that the proposed railway network data security risk assessment method can effectively simulate actual attack and defense situations, and has good differentiation for different attack and defense strategies.