人工智能在网络安全领域的辅助应用和面临的挑战

Auxiliary applications and challenges of artificial intelligence in the field of cybersecurity

人工智能工具用于分析数据和预测结果,其对许多行业都是福音,包括网络安全和国防行业。目前,越来越多的防病毒和网络威胁情报系统正在寻求将人工智能技术集成到网络防御响应能力中。过去网络安全领域的观点认为威胁主要来自于单独的黑客入侵行为,而事实上,我们面对的是有着严密组织的网络犯罪集团[1],勒索软件就是一个典型的例子。传统网络安全领域存在两个重大缺陷:一是非常依赖规则;二是无法根据现代企业的规模进行扩展。但是,人工智能则可凭借其强大的学习和运算能力,迅速地从百万次迥异的嫌疑事件中发现异常、风险和未知威胁的信号。文章阐述该如何利用人工智能、机器学习、深度感知等方法,提升应对网络安全威胁的能力,从而更全面、高效地建设我国的信息安全保障机制,使局部安全服务于国家安全。

Artificial intelligence tools are used to analyze data and predict results.They are good news for many industries,including cybersecurity and defense industries.At present,more and more antivirus and network threat intelligence systems are seeking to integrate artificial intelligence technology into network defense response capabilities.In the past,the point of view in the field of cybersecurity was that the threat mainly came from separate hacking activities.In fact,we are faced with a tightly organized cybercrime group[1].Ransomware is a typical example.There are two major flaws in the traditional cybersecurity field:one is very dependent on rules;the other is that it cannot be expanded according to the scale of modern enterprises.However,artificial intelligence can quickly find signals of anomalies,risks,and unknown threats from millions of very different suspected events with its powerful learning and computing capabilities.This article explains how to use artificial intelligence,machine learning,depth perception and other methods to improve the ability to respond to cybersecurity threats,so as to build a more comprehensive and efficient information security assurance mechanism in my country,so that local security serves national security.