关于新型内生安全信息基础设施的思考

Consideration of New Endogenous Security Information Infrastructure

"新基建"是国家的战略举措,新型信息基础设施是其中的重点。以未知漏洞后门等为代表的"内生安全问题"是新型信息基础设施面临的最严峻和棘手的安全威胁。"内生安全问题"在理论和工程层面不可能完全彻底消除,而传统基于特征的安全防御技术无法从根本上解决这一重大紧迫问题。首先分析了内生安全问题的特性,然后论述了内生安全对于信息基础设施的必要性,最后提出了基于内生安全技术构建新型信息基础设施的建议。通过建设新型内生安全信息基础设施,能够有效规避或化解内生安全问题可能引发的广泛安全风险,切实提升事关国计民生的网络信息服务和应用安全。

“New Infrastructure Construction”is a national strategic measure of China,with new information infrastructure as its focus.The“Endogenous Security Problem”based on the unknown backdoor and vulnerability is the most serious and intractable security threat faced by the new information infrastructure.The“Endogenous Security Problem”cannot be completely eliminated at the theoretical and engineering level,while the follow-up development and incremental security and defense technology innovation cannot fundamentally solve this important and urgent problem.This paper analyzes the characteristics of endogenous security,discusses the necessity of endogenous security for information infrastructure,and proposes a new information infrastructure based on endogenous security technology.The construction of new endogenous security information infrastructure can effectively avoid or resolve the security risks that may be caused by endogenous security issues,effectively improve the network information service and application security related to national economy and people′s livelihood,and provide solid support for the construction of the network power,the maintenance of network sovereignty and the development of the digital economy.