基于大数据分析的安全威胁情报在电信运营商的落地应用  

Application of security threat intelligence based on big data analysis in telecom operators

作　　者：薄明霞[1] 唐洪玉 马晨 张鉴[1] BO Mingxia;TANG Hongyu;MA Chen;ZHANG Jian(Research Institute of China Telecom Co.,Ltd.,Beijing 102200,China)

机构地区：[1]中国电信股份有限公司研究院,北京102200

出　　处：《电信科学》2020年第11期127-133,共7页Telecommunications Science

摘　　要：威胁情报作为运营商应对新的攻击手段和变化多端的安全威胁的利器,也是将传统的被动防御转为主动防御的核心动力。介绍了威胁情报对于运营商的重要性,详细分析了威胁情报的生产流程,最后给出威胁情报的典型应用场景,可为电信运营商威胁情报的落地实践提供技术参考。As a powerful tool for operators to deal with means of new attack and ever-changing security threats,threat intelligence is also the core power to transform traditional passive defense into active defense.The importance of threat intelligence to operators was introduced,the productive process of threat intelligence was analyzed in detail,and finally the typical application scenarios of threat intelligence were given,which could provide technical reference for telecom operators in the practice of threat intelligence.

关 键 词：威胁情报 主动防御 情报生产 情报应用 

分 类 号：TP309[自动化与计算机技术—计算机系统结构]