网络空间安全学科人才培养之思考

网络空间安全己被正式批准列为一级学科,该学科的人才培养与己有学科的联系与区别值得深入探讨。分析了该学科和信息与通信工程、计算机科学与技术等相关一级学科的关系,给出了网络空间安全学科的知识体系,将其分为网络空间安全基础理论、物理安全、网络安全、系统安全、数据和信息安全等5个大的学科领域。借鉴基于产出的教育模式,提出了该学科硕士和博士研究生的培养标准,并提出了涵盖5个方向的模块化参考课程体系。最后,给出了对网络空间安全学科人才培养的一些建议。     

网络空间安全人才培养探讨

网络空间的竞争,归根结底是人才的竞争。当前,世界各国高度重视网络空间安全人才的培养。基于此,首先介绍了网络空间安全人才培养的现状;然后分析了网络空间安全人才的需求特点,并提出了网络空间安全人才培养的若干建议措施;最后给出了暨南大学在网络空间安全人才培养方面的一些探索。     

网络安全法律涉外管辖权问题研究

大数据、云计算时代的数据信息跨境存储已成为新常态,涉外网络安全问题尤为突出。因此,各国网络安全法律在规制其国内网络安全的同时,普遍采取扩大本国网络安全法律涉外管辖权的立法原则。文章以国际法基本理论出发,结合当前欧美网络安全法律涉外管辖权规定,探讨我国《网络安全法》涉外管辖权相关条款的完善问题。     

企业网络安全建设中的关键因素研究

随着网络安全事件带来的损失越来越大,企业的网络安全建设显得更加重要。文章从顶层设计的角度出发,提出企业网络安全建设关键因素,并给出相应的解决办法。研究表明,网络安全各要素之间是相互联系、相互影响的,在建设中应该根据企业实际,优先解决重要的问题。     

Effects of cyber security knowledge on attack detection

Ensuring cyber security is a complex task that relies on domain knowledge and requires cognitive abilities to determine possible threats from large amounts of network data. This study investigates how knowledge in network operations and information security influence the detection of intrusions in a simple network. We developed a simplified Intrusion Detection System (IDS), which allows us to examine how individuals with or without knowledge in cyber security detect malicious events and declare an attack based on a sequence of network events. Our results indicate that more knowledge in cyber security facilitated the correct detection of malicious events and decreased the false classification of benign events as malicious. However, knowledge had less contribution when judging whether a sequence of events representing a cyber-attack. While knowledge of cyber security helps in the detection of malicious events, situated knowledge regarding a specific network at hand is needed to make accurate detection decisions. Responses from participants that have knowledge in cyber security indicated that they were able to distinguish between different types of cyber-attacks, whereas novice participants were not sensitive to the attack types. We explain how these findings relate to cognitive processes and we discuss their implications for improving cyber security.     

Overview of cyber security: a crisis of prioritization

The Internet, originally a development of the USA government, opened to commercial traffic in the early 1990s. Since then, its growth internationally has been phenomenal. In several nations, the Internet is now fundamental for communication, and it has become basic to society, including supporting several aspects of the USA national critical information infrastructure. Because the Internet was built as all information-sharing network, security did not figure prominently in its original architecture. This deployment is beneficial but it has also brought serious risks.     

基于容器的轻量级工业控制系统网络安全测试床研究

针对现有工业控制系统(ICS)测试床部署成本高、网络拓扑简单固定、难以共享等问题,提出了一种基于容器的轻量级ICS网络安全测试床构建方法。该方法将田纳西—伊斯曼过程模型及其控制算法分别封装为两类Docker容器镜像,根据Web图形化界面绘制工业控制网络拓扑,自动配置容器接口并连接成仿真工控网络,最终实现具有真实的工业控制网络数据流的ICS网络安全测试床。实验结果表明,该方法仅需要较少的系统资源,就可快速实现给定网络拓扑的测试环境,支持多种网络攻击测试,相比于其他ICS测试床,具有更好的资源使用、加载速度和可移植性,有利于ICS网络安全的测试、研究和教学工作。     

美国网络安全治理与国土安全部职能研究

文章以美国国土安全部的主要职能为研究对象,着重分析了美国国土安全部在网络安全、关键基础设施安全方面的责任和建设目标。同时,以此为基本点,进一步考察了美国国土安全部在促进机构调整、推动数据整合等方面所采取的具体措施。就网络安全领域国际博弈而言,近几年国土安全部的职能和作用有明显提升,并且在政策制定方面逐渐取代了国务院和国防部而成为新的主力。     

Special issue on computational intelligence in cyber security [Preface]

The four papers in this special issue focus on computational intelligence in cyber security. The papers are summarized here.     

Robotics cyber security: vulnerabilities,attacks, countermeasures,and recommendations

International Journal of Information Security - The recent digital revolution led robots to become integrated more than ever into different domains such as agricultural, medical, industrial,...     

基于帕累托优化的网络安全设备部署设计与研究

通过部署网络安全设备可以有效地提高网络的安全性,但由于网络设备种类繁多、功能复杂,如何在整个网络中最优地部署网络安全设备,从而达到安全和开销的平衡,仍是研究人员关注的焦点。将网络安全设备最优部署问题转换为帕累托优化问题,提出分布式约束优化的七元组对网络安全设备部署进行量化赋值,构建基于分支界限算法的部署方案搜索算法,在解空间内对量化的数值进行计算并求出最优解。由于基于分支界限算法的方案搜索算法需要耗费大量时间,在大型网络中运行效率较低,使用基于弧一致优化的数据预处理技术对量化数值进行预处理,实现搜索算法的优化。最后通过仿真实验测试,证明该方法的正确性和有效性。     

Artificial intelligence in cyber security: research advances,challenges, and opportunities

Artificial Intelligence Review - In recent times, there have been attempts to leverage artificial intelligence (AI) techniques in a broad range of cyber security applications. Therefore, this paper...