想定理念在网络空间安全工作中的应用  

Application of Situation Analyzing in Cyberspace Security

作　　者：肖新光 侯方勇 赵超 张登峰 关墨辰 刘佳男 白淳升 XIAO Xin-guang;HOU Fang-yong;ZHAO Chao;ZHANG Deng-feng;GUAN Mo-chen;LIU Jia-nan;BAI Chun-sheng(Antiy Technology Group Co.,Ltd.,Haerbin 150028,China)

机构地区：[1]安天科技集团股份有限公司,黑龙江哈尔滨150028

出　　处：《中国电子科学研究院学报》2021年第12期1179-1189,共11页Journal of China Academy of Electronics and Information Technology

摘　　要：文中阐述了网络空间安全中敌情想定的基本概念与内涵着重从构建敌情想定的整体背景、基础想定、展开场景、具象刻画、底线思维、多手预案、杀伤链分析、全生命周期视角、以及排除无效想定等方面,剖析了敌情想定的工作维度、分析要素、主要结论与安全价值。强调指出客观敌情想定是做好网络安全防御工作的必要前提,只有达成对网络对抗中敌情的真实掌握、深度理解与准确研判,才能为防御能力的发展厘清方向、为防御体系的构建筑牢根基。This paper discusses the basic concepts and connotations of enemy situation analyzing in cyberspace security. It analyzes the working dimensions, analysis elements, fundamental conclusions and safety values of enemy situation analyzing from the following ten aspects: the overall background, the basic scenario, the unfolding scene, the figurative depiction, the bottom line thinking, the multi-hand plan, the analysis of killing chain, the whole life cycle perspective, and the elimination of invalid analyzing as well as adherence to the holistic national security concept. It emphasizes that objective enemy situation analyzing is the necessary prerequisite for doing a good job in network security defense. Only by truly mastering, deeply understanding and accurately judging the enemy’s situation in cyber confrontation, can we clarify the direction for the development of defense capability, and lay a solid foundation for the construction of defense system.

关 键 词：网络空间安全 敌情想定 攻防对抗 推演 风险评估 

分 类 号：TN915.08[电子电信—通信与信息系统] TP309[电子电信—信息与通信工程]