Model of cyberspace threat early warning based on cross-domain and collaboration

Gang XIONG; Yuwei GE; Yanjie CHU; Weiquan CAO

doi:10.11959/j.issn.2096-109x.2020078

您当前的位置：

首页 >

文章列表页 >

Model of cyberspace threat early warning based on cross-domain and collaboration

Papers | 更新时间：2024-06-03

- Model of cyberspace threat early warning based on cross-domain and collaboration
- Chinese Journal of Network and Information Security Vol. 6, Issue 6, Pages: 88-96(2020)
- 作者机构：
- 作者简介：
- 基金信息：
- DOI：10.11959/j.issn.2096-109x.2020078
  CLC： TP393
- Online First：2020-12，
  
  Published：15 December 2020
- 稿件说明：
移动端阅览
Gang XIONG, Yuwei GE, Yanjie CHU, et al. Model of cyberspace threat early warning based on cross-domain and collaboration[J]. Chinese Journal of Network and Information Security, 2020, 6(6): 88-96.
DOI：

Gang XIONG, Yuwei GE, Yanjie CHU, et al. Model of cyberspace threat early warning based on cross-domain and collaboration[J]. Chinese Journal of Network and Information Security, 2020, 6(6): 88-96. DOI： 10.11959/j.issn.2096-109x.2020078.

摘要

网络空间威胁发展呈现出主动性、隐蔽性、泛在性的特点，向传统被动式、局域性、孤立化的网络防御模式提出了严峻挑战。针对大数据、人工智能与网络安全融合的新趋势，提出一种跨域协同的威胁预警模式，为网络空间安全防护赋能增效。首先，该模式从网络空间结构出发，通过划分安全威胁域、解析系统功能、设计共享机制，构建具有合纵连横作用的功能框架；其次，为提升威胁信息检测能力，设计了分层司职的协同化技术体系，阐述了威胁信息感知、处理、应用等关键技术；最后，借助应用场景，定性化描述了所提预警模式的能力增量。

Abstract

The development of network threat shows the characteristics of initiative

concealment and ubiquity.It poses a severe challenge to the passive

local and isolated traditional network defense mode.In view of the new trend of integration of big data，artificial intelligence and network security

a cross-domain collaborative network threat early warning model was proposed

which could enable and increase efficiency for cyberspace security.Firstly

starting from the overall structure of the protected network space

the model constructs a cross-domain function framework with the vertical and horizontal conjunction by dividing the security threat domain

decomposing the system function

designing the information sharing mechanism.Secondly

to enhance the ability of threat information detection

the collaborative technology architecture is designed by the logic of hierarchical management

and the key technologies involved in threat information perception

processing and application

are systematically introduced.Finally

with the help of application scenarios

qualitatively the capability increment of the proposed threat early warning model was described.

关键词

Keywords

references

方滨兴 . 定义网络空间安全 [J ] . 网络与信息安全学报 , 2018 , 4 ( 1 ): 1 - 5 .

FANG B X . Define cyberspace security [J ] . Chinese Journal of Network and Information Security , 2018 , 4 ( 1 ): 1 - 5 .

黄韬 , 刘江 , 霍如 , 等 . 未来网络体系架构研究综述 [J ] . 通信学报 , 2014 , 35 ( 8 ): 184 - 197 .

HUANG T , LIU J , HUO R , et al . Survey of research on future network architectures [J ] . Journal on Communications , 2014 , 35 ( 8 ): 184 - 197 .

谭晶磊 , 张红旗 , 雷程 , 等 . 面向SDN的移动目标防御技术研究进展 [J ] . 网络与信息安全学报 , 2018 , 4 ( 7 ): 1 - 12 .

TAN J L , ZHANG H Q , LEI C , et al . Research progress on moving target defense for SDN [J ] . Chinese Journal of Network and Information Security , 2018 , 4 ( 7 ): 1 - 12 .

邬江兴 . 拟态计算与拟态安全防御的原意和愿景 [J ] . 电信科学 , 2014 , 30 ( 7 ): 2 - 7 .

WU J X . Meaning and vision of mimic computing and mimic security defense [J ] . Telecommunications Science , 2014 , 30 ( 7 ): 2 - 7 .

付钰 , 李洪成 , 吴晓平 , 等 . 基于大数据分析的APT攻击检测研究综述 [J ] . 通信学报 , 2015 , 36 ( 11 ): 1 - 14 .

FU Y , LI H C , WU X P , et al . Detecting APT attacks:a survey from the perspective of big data analysis [J ] . Journal on Communications , 2015 , 36 ( 11 ): 1 - 14 .

张蕾 , 崔勇 , 刘静 , 等 . 机器学习在网络空间安全研究中的应用 [J ] . 计算机学报 , 2018 , 41 ( 9 ): 1943 - 1975 .

ZHANG L , CUI Y , LIU J , et al . Application of machine learning in cyberspace security research [J ] . Chinese Journal of Computers , 2018 , 41 ( 9 ): 1943 - 1975 .

杨德全 , 刘卫民 , 俞宙 . 基于蜜罐的主动防御应用研究 [J ] . 网络与信息安全学报 , 2018 , 4 ( 1 ): 57 - 62 .

YANG D Q , LIU W Q , YU Z . Research on active defense application based on honeypot [J ] . Chinese Journal of Network and Information Security , 2018 , 4 ( 1 ): 57 - 62 .

杨沛安 , 武杨 , 苏莉娅 , 等 . 网络空间威胁情报共享技术综述 [J ] . 计算机科学 , 2018 , 45 ( 6 ): 9 - 18 .

YANG P A , WU Y , SU L Y , et al . Overview of threat intelligence sharing technologies in cyberspace [J ] . Computer Science , 2018 , 45 ( 6 ): 9 - 18 .

Antiy CERT . 从“方程式”到“方程组”EQUATION攻击组织高级恶意代码的全平台能力解析 [EB ] .

Antiy CERT . From “equation” to “equation group”,full platform capability solution of advanced malicious code of EQUATION attack organization [EB ] .

李建华 . 网络空间威胁情报感知、共享与分析技术综述 [J ] . 网络与信息安全学报 , 2016 , 2 ( 2 ): 16 - 29 .

LI J H . Overview of the technologies of threat intelligence sensing,sharing and analysis in cyber space [J ] . Chinese Journal of Network and Information Security , 2016 , 2 ( 2 ): 16 - 29 .

Views

687

下载量

CSCD

Alert me when the article has been cited

提交

Tools

Publicity Resources

AI-based risk assessment and early warning method for futures trading

Technology and practice of intelligent governance for financial data security

Adaptive selection method of desensitization algorithm based on privacy risk assessment

Preliminary study on the reform of machine learning teaching

Research review of network defense decision-making methods based on attack and defense game

Related Author

Li Meng

Liu Yibo

Guo Jinsheng

Weng Zhenhao

Qiao Yan

Hu Yi

Wang Junjie

Chang Fei

Related Institution

Huishang Futures Co., Ltd.

School of Computer Science and Information Engineering, Hefei University of Technology

Key Laboratory of Knowledge Engineering with Big Data, Hefei University of Technology

School of Computer Science, Fudan University

Institute of Financial Technology, Fudan University

⁰