当前国际环境下的网络安全漏洞披露教育探讨  

Discussion on the education of network vulnerability disclosure in the current international environment

作　　者：曾英佩 李杨[1] 王小军[1] Zeng Yingpei;Li Yang;Wang Xiaojun(School of Cyberspace,Hangzhou Dianzi University,Hangzhou,Zhejiang 310018,China)

机构地区：[1]杭州电子科技大学网络空间安全学院,浙江杭州310018

出　　处：《计算机时代》2023年第1期98-101,共4页Computer Era

基　　金：国家自然科学基金青年项目“基于协同的网络协议模糊测试研究”(61902098)。

摘　　要：网络安全漏洞一直是网络安全的核心之一,而近年来中美贸易争端、新冠疫情、俄乌战争等诱发了世界秩序的变化,阿里Log4j漏洞事件也暴露出国内安全界对漏洞披露的认识和重视程度不足。文章就如何根据新规定在新形势下指导学生进行网络安全漏洞披露的探讨,提出将指导融入到相关的课程中,并给出具体的漏洞披露建议。Network security vulnerabilities have always been one of the cores of network security.In recent years,the Sino-US trade disputes,the epidemic,and the Russian-Ukrainian war have caused changes in the world order.The Alibaba Log4j vulnerability incident has also exposed the lack of awareness and attention to vulnerability disclosure in the domestic security community.In this paper,we discuss how to guide students to disclose network security vulnerabilities under the new situation according to the new regulations,propose to integrate the guidance into relevant courses,and give specific suggestions for vulnerability disclosure.

关 键 词：网络安全漏洞 漏洞披露 LOG4J 课程建设 

分 类 号：G642[文化科学—高等教育学] TP311.5[文化科学—教育学]