面向下一代威胁的安全框架

网络空间已逐渐演变为一个虚拟战场,网络空间的较量是决定一个国家话语权的重要筹码。下一代威胁从某种意义代表着网络空间较量的重要技术指标。文章论述了下一代威胁的特点和关键属性,分析了其绕过传统的安全防御体系的原因,设计了面向下一代威胁的安全框架。该框架从技术工具、安全服务、数据共享三个维度进行全方面论述,尤其基于未知威胁的识别技术、具有大数据特征的数据共享及持续性的威胁检测是面向下一代威胁框架的关键要素。应用实践表明文中提出的面向下一代威胁的安全框架是应对下一代威胁的有效手段。

Security Framework against Next-Generation Threats

Cyberspace gradually becomes an important ＂ chip＂ in determining the discourse right of a country. In this context,defense technology against next-generation threats, to some extent, is the most important part of cyberspace competition. This article describes the characteristics and key attributes of next-generation threats, analyzes the reasons why these threats can bypass traditional defenses, and presents a security framework against next-generation threats. This framework illustrates clearly the national cyber security from the aspects of technical tool, security service, data sharing, and particularly the key elements including identification technology against unknown threats, data sharing with big-data characteristics, and continuous threat detection. Application practice indicates that the security framework proposed in this article is an effective against next-generation threats.