基于情报感知的关键信息基础设施安全保护

Critical Information Infrastructure Security Based on Information Awareness

关键信息基础设施面临较大风险隐患,对国家安全意义重大,情报感知是开展情报工作的理念和抓手,可以为其安全保护提供新的理念、工作模式和技术路径。文章分析了关键信息基础设施的特征,介绍了美国情报界保护关键基础设施的情况,阐述了情报感知的作用,包括监测和识别漏洞、分析和预测威胁来源、评估风险及损失、支撑风险管理决策。文章尝试构建关键信息基础设施风险管理的情报工作模式,包括情报感知、情报刻画、情报响应和反馈机制四个模块,阐述了四个模块之间的关系。建议应当重视反情报工作和情报感知能力培养。

Critical information infrastructures(CII)face many risks,which is of great significances to national security.Information awareness is a kind of philosophy of intelligence,carrying out intelligence service,which provides new concepts,modes and methods for CII security.This article analyzes characteristics of CII and introduces critical infrastructures protection by US intelligence community.This article interprets the role of information awareness on CII security,including monitoring and identifying vulnerability,analyzing and predicting sources of threats,assessing risks and supporting risk management decisions.Intelligence service mode is built for CII risk management.Four parts of the mode are information awareness,information description,intelligence response and feedback mechanism.The relations of these four parts are elaborated.Some advices are given,including focusing on counterintelligence and information awareness.