美国网络安全战略的攻防悖论

On the Offense-Defense Paradox of U.S.Cybersecurity Strategy

美国是全球最早就网络安全问题规划、部署及推行系统化战略的国家,其逻辑是在该新兴领域对其他国际行为体施加约束,同时避免自身受到同样约束。现实证明,美国网络安全战略为其带来了力量和优势,但却没有带来与之等量齐观的安全。究其原因,美国在网络空间的进攻能力均转化为防御漏洞,导致其既成为他国关键基础设施的攻击者,也被迫成为本国关键基础设施的防护者;既通过信息操纵干涉他国内政,同时自身政治进程也饱受相同策略困扰;既致力打造“监听帝国”,又宣称受困于全球网络间谍行动;既投入大量资源强化网络军备,又不得不承受网络空间军事化及网络军备竞赛带来的负面影响。正是美国网络安全战略中存在的攻防悖论,导致该国在网络空间呈现“越强大,越脆弱”的窘境。

The U.S.Cyber Strategy,which has been systematically implemented in the past two decades,comprises the logic of imposing constraints on other international actors while trying to avoid the same constraints.As it turns out,the strategy has brought it strength and advantages,but not security.It contains many contradictions.It is both an attacker and a defender of critical infrastructure;it not only interferes but also is interfered;it is committed to formulating a"spying empire,"but also claims to be trapped in global cyber espionage;it invests a lot of resources to strengthen cyber armaments,but also suffers the negative effects of the militarization of cyberspace and the cyber arms race.It is the paradox of the U.S.cybersecurity strategy that makes it trapped in a dilemma"the stronger,the more vulnerable".