一种基于连接和安全熵的网络空间整体安全认识和方法

A Holistic Security Cognition and Method of Cyberspace Based on Connectivity and Security Entropy

网络空间自身构造多元性、接入随遇性、多域联动性等特征使得针对其安全态势的安全视角、内涵和要素需要不断适应新的网络形态的发展和变化。在分析了国内外网络空间安全发展现状的基础上,指出当前网络空间面临的安全风险和挑战;基于对网络形态和网络存在价值的理解,从网络连接的观察视角出发,引入安全熵的概念对基于连接的网络空间安全问题展开分析和讨论,提出了“D-I-D-E网络数据驱动环”的网络空间整体安全理念,并探讨了其应用价值。目的是通过新视角提出一种安全问题的解决思路,进一步拓展和补充当前网络空间安全认知,并为网络信息系统规划、设计、建设和后期的安全强化、加固提供理论参考。

The new features of the structure diversity,access contingency and multi-domain linkage of cyberspace itself make the security situation perspective,concepts and elements of cyberspace need to constantly adapt to the development and changes of new network forms.Based on the analysis of the development of cyberspace security at home and abroad,this paper points out the connectivity-based security risks and challenges facing the cyberspace at present.Furthermore,based on the understanding of network form and value,from the perspective of network connectivity,the concept of security entropy is used to analyze and discuss the connectivity-based cyberspace security problems,and the overall security concept of cyberspace based on the“D(Data)-I(Information)-D(Driving)-E(Execution),loop of data-based information driving and execution”is proposed and applied,in order to put forward a solution to security problems,further expand and replenish the current cognition of cyberspace security,and provide theoretical reference for network information system planning,design,construction and later security strengthening and reinforcement.