Author(s)

Dedong Zhang¹, Wenge Guo², Hongwei Wang¹, Lirong Hao¹

¹Institute of Computing Technology, China Academy of Railway Sciences Corporation Limited, Beijing, China.
²Information Technology Institute, China Railway Taiyuan Group Co., Ltd., Taiyuan, China.

Based on both domestic and overseas research on vulnerability management, considering the actual pain point and needs of railway enterprises, a security vulnerability management system was proposed. The system has achieved the collection, filtering, and standardization of vulnerability information, as well as the management of the mapping relationship between vulnerabilities and assets. The article analyzes and designs the construction principles, objectives, overall architecture, and functional structure of the system. The system can be applied to security warning and vulnerability management, and has brought satisfactory effects in practice.

Security Vulnerability, Vulnerability Information Management, Vulnera-bility Lifecycle, Vulnerability Connection

Zhang, D. , Guo, W. , Wang, H. and Hao, L. (2025) Research and Design of Railway Security Vulnerability Management System. Journal of Computer and Communications, 13, 335-344. doi: 10.4236/jcc.2025.137017.