美国网络安全事件响应预案制度研究

发布时间：2018-12-20 18:01

【摘要】：随着重大网络事件影响范围、损害程度扩大,美国等发达国家日益将网络安全事件治理纳入国土安全、国家安全、公共安全治理的重要组成部分,突发事件应急管理工具也越来越多地应用到网络事件治理中。美国联邦政府网络事件响应预案制度及其响应行动就是最典型的范例。美国联邦政府于2016年底颁布了《国家网络事件响应预案》及其相关的制度性规定,这个预案是动员和组织国家级力量应对网络安全事件的一个重要制度建设举措。梳理了预案中对联邦政府、州和地方政府在联合应对网络事件中的分工原则,以及事件分级、分工协调、核心能力等预案要素;同时,研究了美国联邦政府在重大网络事件中的资产响应、威胁响应、情报支持和受影响对象响应等主要响应行动类型,总结了美国网络事件响应预案制度及其响应行动的特点;结合最新颁布出台的我国《国家网络安全事件应急预案》的相关规定,为今后如何进一步借鉴美国的网络事件响应预案制度和做法,完善中国网络安全事件应急预案制度体系,提出了建设性意见和建议。
[Abstract]:With the expansion of the scope and extent of damage caused by major network events, the United States and other developed countries increasingly incorporate the governance of network security incidents into the important components of national security, and public security governance. Emergency management tools are more and more used in network event management. The federal government network response plan system and its response is the most typical example. The Federal Government of the United States promulgated the National Network incident response Plan and its related institutional provisions at the end of 2016, which is an important institutional construction measure to mobilize and organize national forces to deal with cybersecurity incidents. Combing the federal government, state and local governments in the joint response to network events in the division of labor principles, as well as the event classification, division of labor coordination, core competencies and other elements of the plan; At the same time, the main types of response actions, such as the asset response, threat response, intelligence support and the response of the affected object, are studied by the Federal Government of the United States in major network events. The characteristics of American network event response plan system and its response action are summarized. According to the relevant regulations of our country's "National Network Security incident Emergency Preparedness" issued recently, how to further draw lessons from the network incident response plan system and practice of the United States in the future, and perfect the Chinese network security incident emergency plan system, Constructive suggestions and suggestions are put forward.
【作者单位】：国家行政学院应急管理教研部;
【基金】：国家社科基金重点项目“特重大自然灾害后恢复重建机制建设研究”(16AGL018) 国家自然科学基金智库研究应急项目“十三五期间我国社会安全风险治理研究”(71642005) 国家发改委西部司“特重大自然灾害灾后恢复重建立法研究”(XBS16-A7) 国家行政学院国家高端智库委托项目“一带一路战略重要国家安全风险评估与规避研究”(NSAZK(WT)2017014)
【分类号】：D771.2

【相似文献】