开源网络威胁情报技术研究综述  

A review of open source cyber threat intelligence technology research

作　　者：刘金[1] 秦媛媛 田晓娜[1] 郝娇 韩庆敏[1] LIU Jin;QIN Yuanyuan;TIAN Xiaona;HAO Jiao;HAN Qingmin(National Computer System Engineering Research Institute of China,Beijing 100083,China)

机构地区：[1]华北计算机系统工程研究所,北京100083

出　　处：《智能计算机与应用》2024年第11期24-34,共11页Intelligent Computer and Applications

摘　　要：随着互联网络的快速发展,新型网络安全威胁也在不断演变。传统的被动流量监测方式,难以满足网络安全防护全部要求。在发生网络攻击之前,提前获取威胁情报可以更有效地应对安全威胁,避免财产损失。开源网络威胁数据获取成本低、收益高的特点,使其成为威胁情报的重要来源之一。大数据、人工智能、区块链等新技术,为开源网络威胁情报获取、分析及共享提供了重要手段。本文分析了国内外开源网络威胁情报研究进展及各项技术在开源网络威胁情报处理分析共享过程中的应用,总结了共性问题和未来趋势。With the rapid development of Internet,new types of cyber security threats are constantly evolving.The traditional passive traffic monitoring methods cannot meet all the requirements of cyber security protection.Obtaining threat intelligence in advance before cyber attacks can deal with security threats more effectively and avoid property losses.The low cost and high profit of obtaining open source cyber threat intelligence make it become one of the important sources of threat intelligence.New technologies such as big data,artificial intelligence and blockchain provide important methods for obtaining,analyzing and sharing open source cyber threat intelligence.This paper analyzes the research progress of open source cyber threat intelligence at home and abroad and the application of various technologies in the process of open source cyber threat intelligence processing,analysis and sharing and summarizes the common problems and future trends.

关 键 词：开源情报 网络威胁情报 大数据 人工智能 区块链 

分 类 号：TP393[自动化与计算机技术—计算机应用技术]