论大数据时代的威胁情报

Threat Intelligence in the Era of Big Data

[目的 /意义]初步论述信息安全界理论前沿,论述威胁情报及其相关热点问题,试图引入新的情报概念,开拓情报研究新的领域。[方法 /过程]通过文献调研、内容分析和归纳演绎,梳理出威胁情报的主要特点、基础性技术、实践现状与趋势、重要意义和未来研究方向。[结果 /结论]威胁情报:1将成为情报研究新的热点;2具有应用范围广泛、紧密跟踪和可用于信息安全管理决策的特征;3对国家信息安全管理和国家情报要素研究均具有重要意义;4与其相关的数据管辖与隐私保护、情报共享等问题将成为未来的研究重点。

[ Purpose/significance] This paper primarily discussesthe information security theory frontier, elucidates- the threat intelligence and related hot issues, and introduces a new concept toexplore the new field in intelligence re- search. ~ Method/process] Through literature research, content analysis, induction and deduction, this paper teases out the main characteristics, basic technologies, practical situations and development trends, significance, and future research directions ofthreat intelligence. [ Result/conclusionJ This paper concludes that threat intelligence will become a new re- search hot spot in the intelligence field through analysis. It has features witha wide range of applications, close traceability andusefulness for information security decision. It has a great meaning for national information security management and research on national intelligence elements. The issues of the data jurisdiction and privacy protection, information sharing related with it will become the focuses of future research. It will provide an important reference for intelligence theory re- search and practical exploration.