美国网络威胁情报公私合作模式及启示  

Review of Public-Private Partnership of U.S.Cyber Threat Intelligence and Its Enlightenment

作　　者：周雨欣 卢明欣[1] 杨海平[1] Zhou Yuxin;Lu Mingxin;Yang Haiping(School of Information Management,Nanjing University,Nanjing 210000)

机构地区：[1]南京大学信息管理学院,南京210000

出　　处：《情报杂志》2023年第3期24-33,共10页Journal of Intelligence

基　　金：国家社会科学基金项目“面向国家安全的科技情报态势感知研究”(编号:21BTQ012)研究成果之一。

摘　　要：[研究目的]随着网络威胁成为全球性挑战,威胁情报已经上升为国家安全层面的战略情报。公私合作模式是美国建立威胁情报体系的重要基石,分析探讨美国威胁情报公私合作模式,对于促进我国威胁情报体系的建设,探索网络空间新型治理模式具有重要的意义。[研究方法]结合公共物品理论,对美国威胁情报公私合作模式的产生原因、发展历程、制度保障、实践经验以及存在的问题进行剖析,并为我国威胁情报公私合作实践提出建议。[研究结论]相较于传统国家安全情报,威胁情报是一种不纯粹的公共安全产品,具有更加强烈的公私合作动因,促进了公私合作模式在情报界的发展。当前,美国威胁情报公私合作模式正在从情报共享转向情报赋能,提升了美国的网络安全态势感知、应急响应和网络归因能力。根据美国威胁情报公私合作的实践经验与存在的问题,提出我国应在威胁情报工作中完善威胁情报共享机制,推动威胁情报产业发展,发挥公私合作模式的治理作用。[Research purpose]As cyber threat has become a global challenge,threat intelligence has risen to strategic intelligence at the level of national security.The public-private partnership model is an important cornerstone for the U.S.to establish threat intelligence system.Analyzing and discussing the public-private partnership of U.S.threat intelligence is of great significance to promote the construction of China's threat intelligence system and explore a new governance model in cyberspace.[Research method]Combined with public goods theory,this paper analyzes the causes,development process,system guarantee,practical experience and existing problems of the public-private partnership of threat Intelligence in U.S.,and puts forward suggestions for the practice of public-private partnership of threat intelligence in China.[Research conclusion]Compared with traditional national security intelligence,threat intelligence is not a pure public security product.It has stronger external drive and internal demand of public-private cooperation,which promotes the development of public-private partnership in the intelligence community.At present,the public-private partnership of U.S.threat intelligence is shifting from intelligence sharing to intelligence empowerment,which has improved the ability of U.S.network security situational awareness,emergency response and network attribution.According to the practical experience and existing problems of public-private cooperation in Threat Intelligence in U.S,this paper puts forward that China should improve the threat intelligence sharing mechanism,promote the development of the threat intelligence industry,and give play to the governance role of the public-private partnership model.

关 键 词：网络威胁 威胁情报 网络安全 公私合作 国家安全情报 美国 

分 类 号：E712.416[军事—军事理论]