强化网络安全和安全情报意识,共筑网络安全防线--基于OWASP和CNCERT相关项目的分析  

Strengthening the awareness of network security and security intelligence to build a defense line—Analysis of related projects based on OWASP and CENTRT

作　　者：郭锡泉[1,2] 陈香锡 Guo Xiquan;Chen Xiangxi(Qingyuan Polytechnic,GuangdongQingyuan 511510;Qingyuan Research and Development Center of Cybersecurity,GuangdongQingyuan 511510)

机构地区：[1]清远职业技术学院,广东清远511510 [2]清远市网络空间安全工程技术研究开发中心,广东清远511510

出　　处：《网络空间安全》2020年第2期66-74,共9页Cyberspace Security

基　　金：广东省科技计划项目“网络安全优秀科普作品创作”(项目编号:2019A141405002);广东省普通高校特色创新类项目“网络攻击视角下信息资产及其威胁情报的大数据管理系统”(项目编号:2018GKTSCX099);清远市科技计划项目“大数据环境下我市网络空间安全的威胁情报平台”(项目编号:2019A006)研究成果之一。

摘　　要：网络安全需要全社会的共同参与。文章分析了OWASP的安全意识Top 10项目和OWASP Top 10项目,阐明了个人层面网络安全意识和组织层面Web应用的薄弱环节。介绍了CNCERT我国互联网网络安全态势综述报告和CNVD原创漏洞证书项目,深入分析了网络安全态势、CNVD收录漏洞情况、网站被篡改情况等。研究发现应用安全、Web安全是当前网络安全防护的重中之重,建议社会公众强化网络安全意识,各行各业关注和利用网络安全情报,国家构建网络安全情报体系,全社会共筑网络安全防线。Network security needs the participation of the whole society.This paper analyzes the security awareness Top 10 project and OWASP Top 10 project of OWASP,and expounds the weak links of network security awareness at personal level and web application at organizational level.This paper also introduces CNCERT China's Internet security situation summary report and CNVD original vulnerability certificate project,and analyzes the network security situation,CNVD vulnerabilities,website tampering,etc.It is found that application security and web security are the top priority of the current network security protection.It is suggested that the public strengthen the awareness of network security,all walks of life pay attention to and use network security information,the state builds the network security information system.Thus the whole society builds the network security defense line.

关 键 词：网络安全意识 情报 漏洞 WEB应用 

分 类 号：TP393[自动化与计算机技术—计算机应用技术]