摘要
[研究目的]面对高隐蔽性、高破坏性的网络攻击持续高发的风险挑战,开展网络空间安全态势感知研究,为现实情境中的网络空间安全风险治理提供理论依据。[研究方法]遵循以网络空间安全为中心和安全情报服务化的逻辑思路,刻画网络空间安全态势感知模型的基本样态,深入透视该模型的运行机理,并以Z省工业互联网安全态势感知平台运行实践为例进行模型的应用分析。[研究结果/结论]模型面向态势感知之“可感”“可知”“可控”三层次,通过“全谱系扫描→全景式刻画→全方位塑造”3阶段的逐层递进,可为及时发现并有效应对潜在的网络威胁提供启发。通过案例分析发现,Z省部署的工业互联网安全态势感知平台,大大提升了全省工业互联网安全风险扫描监测、情报共享、预警通报、响应处置、指挥调度、整改复核等多项网络空间安全服务保障能力。
[Research purpose]In the face of the challenges posed by the continuous high incidence of cyber-attacks,which are both high concealment and high destructiveness,research on cyberspace security situational awareness should be conducted to provide theoretical foundation for the governance of cyberspace security risks in real-world scenarios.[Research method]Following a logic centered on cyberspace security and the servitization of security intelligence,this paper outlines a cyberspace security situational awareness model,explores its mechanics,and analyzes its application using the industrial internet security situation awareness platform in Z Province as a case study.[Research result/conclusion]The model targets the three levels of situation awareness:"sensibility""knowability"and"controllability"and progresses through three stages of"full-spectrum scanning→panoramic depiction→comprehensive shaping"to provide insights for timely detection and effective response to potential cyber threats.The case study in Z Province shows the platform significantly enhanced cyberspace security capabilities,including risk scanning,intelligence sharing,and response handling.
作者
姚怡帆
胡峰
Yao Yifan;Hu Feng(National Security School(School of Politics,Law and Public Administration)of Shaanxi Normal University,Xi'an 710119;Jiangsu Information Institute of Science and Technology(Jiangsu Academy of Science and Technology for Development),Nanjing 210042;National Security and Emergency Management Research Center of Nanjing Normal University,Nanjing 210023)
出处
《情报杂志》
北大核心
2025年第3期90-97,118,共9页
Journal of Intelligence
基金
陕西省哲学社会科学研究专项“注意力配置视角下陕西政府数据治理的安全型发展对策研究”(编号:2023QN0067)研究成果。
关键词
网络空间安全
安全态势感知
安全情报
风险应对
cyberspace security
security situation awareness
security intelligence
risk response
