大数据环境下的威胁情报分析

发布时间：2018-03-14 07:14

本文选题：大数据　切入点：威胁情报　出处：《情报杂志》2017年09期 　论文类型：期刊论文

【摘要】：[目的/意义]对威胁情报概念和相关热点问题进行论述,为情报研究引入新的内容和方法。[方法/过程]通过文献调研、内容分析等方法,在对威胁情报研究现状、基本内涵进行分析的基础上,对国内外威胁情报的热点问题及未来研究重点进行了详细论述。[结果/结论](1)威胁情报对促进信息安全管理范式的转型、推动国家信息安全协同治理、推进信息安全全球治理体制的变革有重要意义;(2)威胁情报分析的流程主要包括:需求定义与计划制定、来源选择与信息采集、信息融合与数据清洗、机器学习与智能分析、人工分析与情报提炼、情报展示与成果传递六个环节;(3)威胁情报在维护国家信息主权、重要基础设施信息安全管理、公共安全管理等方面正发挥着重要的作用;(4)威胁情报共享的制度保障、威胁情报的深度分析、威胁情报的隐私保护将成为未来的研究热点。
[Abstract]:[objective / significance] to discuss the concept of threat intelligence and related hot issues, and to introduce new contents and methods for information research. [methods / processes] through literature research, content analysis and other methods, the present situation of threat intelligence research is discussed. Based on the analysis of the basic connotation, this paper discusses in detail the hot issues and future research emphases of threat intelligence at home and abroad. [results / conclusions] 1) threat intelligence has promoted the transformation of information security management paradigm. The process of threat intelligence analysis mainly includes: requirement definition and planning, source selection and information collection. Information fusion and data cleaning, machine learning and intelligent analysis, manual analysis and information extraction, information display and information delivery are six links that threaten intelligence in safeguarding national information sovereignty and information security management in important infrastructure. The management of public security is playing an important role in the system of threat intelligence sharing, the in-depth analysis of threat information, and the privacy protection of threat information will become a hot research topic in the future.
【作者单位】：蚌埠医学院卫生管理系;安徽大学管理学院;
【基金】：国家社会科学基金项目“大数据环境下情报研究方法论体系研究”(编号:15BTQ045)研究成果安徽省教育厅人文社会科学重点项目(SK2017A0187) 安徽省高校自然科学项目(KJ2015B075by)基金支持
【分类号】：G350

【相似文献】