网络空间供应链国际规范研究——构建供应链生态系统总体安全观

Research on the International Cyber Norm of Supply Chain:Constructing the Overall Security of Supply Chain Ecosystem

随着全球信息通信产业的深度融合,供应链已日益成为网络空间中主要的安全威胁来源,各国在供应链安全领域对国际规范的需求日益提升。然而,以2015年联合国信息安全政府专家组报告为共识基础的"GGE供应链规范"由于在内容上过于专注西方国家所重视的技术攻击威胁,忽视了中国等发展中国家避免对环境进行干预和扰乱的需求,导致了"技术安全观"与"环境安全观"之间的倾向差异。加之存在条文表述上的模糊与缺陷,"GGE供应链规范"无法满足当前的现实安全需要。应当在兼顾各方立场的基础上,构建供应链生态系统总体安全观,并厘定新的总规范表述以统领整个体系架构。

With the deep integration of global information and communication technology,supply chain has increasingly been a major source of security threats in cyberspace and the need for international norms is increasing.However,based on the consensus of 2015 UN GGE report,the supply chain norm therein pays too much attention on western countries’concern on the threat of technological attack while ignores China and other developing countries’concern to avoid tampering and disruption to the surrounding environment.It then leads to the different preferences between the concepts of"technological security"and the"environmental security"defined in this paper.In addition,there are ambiguities and defects in terms of normative languages.Thus,the GGE norm cannot meet the current practical needs for supply chain security.Taking into account the positions of all parties involved,the idea of supply chain ecosystem security is introduced and a new general norm which will guide the whole system’s architecture is further proposed.