电信运营商威胁情报建设与运营方法研究  

Research on the Construction and Operation of Threat Intelligence in Telecom Operators

作　　者：边林 陶冶[1] 曹咪 王智明[1] Bian Lin;Tao Ye;Cao Mi;Wang Zhiming(China Unicom Research Institute,Beijing 100176,China)

机构地区：[1]中国联通研究院,北京100176

出　　处：《信息通信技术》2020年第6期45-50,共6页Information and communications Technologies

摘　　要：随着大数据、云计算等新技术的飞速发展,网络安全威胁也不断升级,威胁情报技术逐渐成为网络安全业界的热点,基于威胁情报的网络安全防护体系能够有效地应对各类新型网络安全威胁。文章对国内外威胁情报的概念、类型、规范和厂商等进行了概述,分析了电信运营商当前的安全防护体系及存在的问题,深入研究威胁情报建设与运营的具体方法,为电信运营商建立以威胁情报为核心的安全防护体系提供有益参考和借鉴。With the rapid development of big data,cloud computing and other new technologies,cybersecurity threats are constantly upgrading.The technology of threat Intelligence has gradually become a hot spot in the cyber security industry.Security protection systems based on threat intelligence can effectively deal with all kinds of new network security threats.This paper introduces the definition,types,regulations and manufacturers of the threat intelligence area,researches the way of constructing threat intelligence-driven security defense system based on telecom operators’current capabilities,and provides beneficial suggestions for threat intelligence operations.

关 键 词：威胁情报挖掘 威胁情报运营 安全防护 电信运营商 

分 类 号：TN915.08[电子电信—通信与信息系统] G251[电子电信—信息与通信工程]