网络危机管理挑战分析与能力建设  

On Cyber Crisis Management Challenge Analyzing and Capacity Building

作　　者：程相然 吴越 CHENG Xiangran;WU Yue(International Cyberspace Governance Research Base of Fudan University,Shanghai 200433,China;Information Engineering University,Zhengzhou Henan 450001,China)

机构地区：[1]复旦大学网络空间国际治理研究基地,上海200433 [2]战略支援部队信息工程大学,河南郑州450001

出　　处：《信息安全与通信保密》2022年第10期110-116,共7页Information Security and Communications Privacy

基　　金：国家社会科学基金青年项目“网络安全危机管理问题研究”(No.19CGL060)。

摘　　要：伴随着重大网络安全事件的频繁发生,网络安全已从IT专家关注的技术问题逐渐演变为国际安全和国家安全课题。从安全视角来看,网络危机是由重大网络安全事件引发的、常规技术响应不足以应对、需要在有限时间和有限信息条件下决策处置的紧急事态,除危机共性特点外,具有技术诱发性、显著跨界性、快速级联性、部分可根除性等特征,需要从事前预防、事中响应、事后学习等方面进行全过程管理。网络危机跨界效应的呈现过程十分隐蔽,主导因素源自技术,传播扩散光速运行,对危机感知预警、决策指挥、事态控制等提出了新挑战、新任务。亟需从建立健全危机管理机构、构建完善危机协调机制、制订更新危机响应计划、积极开展危机管理演练等方面未雨绸缪,加强网络危机管理体系和能力建设。Along with the frequent occurrence of significant cyber incidents,cyber security gradually evolves from technical issues concerned by IT experts to international security and national security issues. From the security perspective,cyber crisis is an emergency situation caused by one or a series of significant cyber incident(s),where conventional technical responses are insufficient,and requires decision-making and disposal under limited time and information. In addition to its common characteristics of crisis,it is also characterized by technology-induced,markedly transboundary,rapidly cascaded,and partially eradicated,requiring whole process management from the aspects of pre-prevention,in-process response,and post-event learning. The presentation process of the transboundary effects of cyber crisis is very hidden,derived by technology and spreaded at the speed of light,which proposes new challenges and tasks for crisis perception and early warning,decision-making and command,and situation control. It is necessary to take precautions to strengthen the construction of cyber crisis management system and capabilities in terms of establishing and improving crisis management institutions,constructing and improving crisis coordination mechanisms,formulating and updating crisis response plans,and actively carrying out crisis management exercises.

关 键 词：网络安全 网络危机 危机管理 跨界危机 能力建设 

分 类 号：TP393.08[自动化与计算机技术—计算机应用技术]