论网络安全事件信息披露机制的建构  

Research on the construction of information disclosure mechanism of cyber security event

作　　者：赵丽莉[1] 钟晗[2] ZHAO Lili ZHONG Han(School of Law, Xinjiang Finance and Economic University, Wulumuqi 830012, P.R. China Department of Computer Science ＆ Technology, Nanjing University, Nanjing 210064, P. R. China)

机构地区：[1]新疆财经大学法学院,新疆乌鲁木齐830012 [2]南京大学计算机科学与技术系,江苏南京210023

出　　处：《重庆大学学报（社会科学版）》2017年第1期109-114,共6页Journal of Chongqing University(Social Science Edition)

基　　金：2016年度国家社会科学基金西部项目"网络时代暴恐信息传播法律治理创新研究"(2016XFX014)

摘　　要：伴随互联网和信息化的迅猛发展,网络安全对国家经济、社会生活甚至国家安全的影响日益增强。与此同时,银行、电信网络、政府部门等关键基础设施、大型商业网站、云服务、工业控制系统均日益成为网络攻击重点;基础网络、重要信息系统、通用软硬件的漏洞攻击风险、大型网站数据和个人信息泄露现象严重,网络安全事件频发,信息披露诉求应运而生。网络安全事件信息披露机制可有效防控恶意软件、漏洞风险、数据泄漏等网络信息安全风险和威胁。为此,为进一步明确网络空间各主体有效管理和规制网络安全风险和威胁的责任,建构系统化的网络安全事件信息披露机制具有现实必要性。With the rapid development of Internet and information technology, cyber security has more and more influence on national economy, social life and even national security. At the same time, banking,telecommunications networks, government departments and other key infrastructure, large-scale commercial websites,cloud services,industrial Internet are increasingly becoming the focus of cyber attacks; and cyber security and security incidents of basic network, important information systems, common software and hardware vulnerabilities,large web sites and personal information leakage are serious,which has threatened data and personal information security,social stability and national security. Cyber security event information disclosure mechanism can effectively prevent and control the risk and threat of cyber information security, such as malicious software,vulnerability risk,data leakage and so on. ＂Cyber Security Act＂（Draft） established the corresponding information disclosure provisions. Therefore, to further clarify the responsibility of the main body of the cyber space and effectively manage and regulate the risk of cyber security incidents,it is practical necessity to construct the effective information disclosure mechanism of cyber security event.

关 键 词：网络安全 风险与威胁 信息披露 体系化 

分 类 号：D922.8[政治法律—法学]