美国网络威胁情报应用评析

发布时间：2018-04-11 13:54

本文选题：网络空间 + 威胁情报　；参考：《情报杂志》2017年11期

【摘要】：[目的/意义]网络威胁情报已成为美遏制网络攻击,抵御网络威胁的重要安全实践。作为"情报驱动网络安全"的重要一环,美国正逐步建立基于网络威胁情报的网络生态。对美网络威胁情报应用情况进行分析,能够为政府及产业界提供有益借鉴,推动我国网络安全理念升级。[方法/过程]运用文献解读、比较分析、技术分析等方法围绕美网络威胁情报应用现状进行研究,对其特点、面临的挑战及发展趋势进行了分析。[结果/结论]美国网络威胁情报应用形成了"标准—项目—平台—系统"的逻辑链路,构建了自身独特的管理模式,逐渐形成国家主导,网络安全服务商主建的发展模式,逐步实现基于网络威胁情报的网络安全控制。
[Abstract]:The purpose / significance of network threat intelligence has become an important security practice for the United States to contain the network attack and resist the network threat.As an important part of "intelligence driven network security", the United States is gradually establishing a network ecology based on network threat intelligence.The analysis of the application of US network threat intelligence can provide useful reference for government and industry, and promote the upgrade of network security concept in our country.[methods / process] using the methods of literature interpretation, comparative analysis, technical analysis and so on, the present situation of the application of US network threat intelligence is studied, and its characteristics, challenges and development trends are analyzed.[results / conclusion] the application of network threat intelligence in the United States has formed a logical link of "standard-project-platform-system", constructed its own unique management model, and gradually formed a state-led and network security service provider's development model.Gradually realize the network security control based on network threat intelligence.
【作者单位】：解放军外国语学院;
【分类号】：D771.2;TP393.08

【相似文献】