论国际法上网络安全的定义和相关国际规则的制定

On the Definition of Internet Security in International Law and the Formulation of Relevant International Rules

2007年发生的对爱沙尼亚大规模网络攻击和2010年发生的"震网"病毒导致在伊朗核设施爆炸,使得网络安全成为国际社会的重要议题。网络空间里发生的犯罪和攻击等行为具有虚拟性和全球性,没有明确的国界线,因此对这些行为的监控、预防、调查、应对等需要通过国际规则予以规范。有关网络安全的国际立法,首先要对相关概念予以界定,因为,目前对网络安全、网络战、网络间谍等类似概念存在不同程度的混用情况。本文将从厘清概念入手,进而对网络安全的国际立法方向提出一些建议。

The large-scale cyber attacks on Estonia in 2007 and the outbreak of the seismogram virus in Iran's nuclear facilities in 2010 have made cyber security an important issue for the international community. Crimes and attacks occurring in cyberspace are virtual and global, and there is no clear national boundaries. Therefore, the monitoring, prevention, investigation and response of these acts need to be completed through international rules. In the international legislation on cyber security, the relevant concepts should be defined first, because there are different degrees of misuse of similar concepts such as cyber security, cyber warfare, cyber espionage and so on. This article will clarify the concept, and then put forward some suggestions on the direction of international legislation of network security.