美国新版《国家网络应急响应计划》综述和对我国的借鉴意义

The refreshed National Cyber Incident Response Plan and enlightenment to enhance China's cyber security response

美国《国家网络应急响应计划》是特朗普新政府在非战争状态下的国家级网络应急响应的整体战略,其不仅是奥巴马政府旧版计划(2010年版)的替代,也是国家整体应急响应战略的网络应急专节。与旧版相比,计划从应急响应战略地位、安全态势分类、应急思路、主要联邦机构职责、关键基础设施应急、事故等级划定等方面都有重大改变。建议我国从应急响应思路、关键信息基础设施应急响应、反恐网络应急响应等方面适当借鉴,以主动提升网络安全新形势下的应急响应工作。

The U.S.Department of Homeland Security recently released the refreshed National Cyber Incident Response Plan(NCIRP),as a primary national strategy for cyber incidents response during the Donald Trump administration,and it also serves as the specific constituent part of National Incident Management System.Comparing with the old version,NCIRP's major changes include the strategy of network response,the classification of cyber incidents,the ideology of cyber response,the roles of multiple federal agencies,the response of critical infrastructure,the cyber incident severity schema,and etc.This essay includes the most important contents of NCIRP,and gives three proposals to enhance China's cyber security response.