面向网络空间战略级预警的威胁情报能力构建  

Threat Intelligence Capabilities Construction towards Cyberspace Strategic Early Warning

作　　者：陈剑锋[1,2] CHEN Jianfeng(No.30 Institute of CETC,Chengdu Sichuan 610041,China;China Electronics Technology Cyber Security Co.,Ltd.,Chengdu Sichuan 610041,China)

机构地区：[1]中国电子科技集团公司第三十研究所,四川成都610041 [2]中国电子科技网络信息安全有限公司,四川成都610041

出　　处：《信息安全与通信保密》2022年第7期1-9,共9页Information Security and Communications Privacy

基　　金：国家重点研发计划项目(No.2019YFB2101701)。

摘　　要：网络空间是陆、海、空、天以外的“第五空间”,是国家主权新疆域。网络空间与政治、经济、社会等领域深度耦合,在促进发展的同时也带来了风险。网络空间战略级预警借鉴传统空间战略级预警原理方法,面向国家监测、利用和管理网络空间的战略需求,基于网络空间全域实时、多维、深度感知的威胁情报分析手段,以研判重大威胁和预告来袭攻击。面向建设现代化网络空间战略级预警的威胁情报能力打造,构想预警体系,描绘典型应用,给出演进方向建议。Cyberspace is the“fifth space”other than land,sea,air and space,and it is a new frontier of national sovereignty.Cyberspace is deeply coupled with politics,economy,society and other fields,which promotes development and transmits risks at the same time.Cyberspace strategic early warning draws on the principles and methods of developing traditional space strategic early warning to meet the strategic needs of national monitoring,utilization and management of cyberspace,and uses real-time,multi-dimensional,and in-depth perception threat intelligence analysis methods in the entire cyberspace domain to study and judge major threats and forecast incoming attacks.This paper aims to build a threat intelligence capability of modern cyberspace strategic early warning,conceives the early warning system,describes typical applications,and gives suggestions on the direction of progress.

关 键 词：网络空间 战略级预警 威胁情报 风险分析 

分 类 号：TP309[自动化与计算机技术—计算机系统结构]