智能化漏洞挖掘与网络空间威胁发现综述

Survey of Intelligent Vulnerability Mining and Cyberspace Threat Detection

当前网络空间面临的威胁日益严重,大量研究关注网络空间安全防御技术及体系,其中漏洞挖掘技术可以应用于网络攻击发生前及时发现漏洞并修补,降低被入侵的风险,而威胁发现技术可以应用于网络攻击发生时及发生后的威胁检测,进而及时发现威胁并响应处置,降低入侵造成的危害和损失.分析并总结了基于智能方法进行漏洞挖掘与网络空间威胁发现的研究.其中,在智能化漏洞挖掘方面,从结合人工智能技术的漏洞补丁识别、漏洞预测、代码比对和模糊测试等几个应用分类方面总结了当前研究进展;在网络空间威胁发现方面,从基于网络流量、主机数据、恶意文件、网络威胁情报等威胁发现涉及的信息载体分类方面总结了当前研究进展.

At present,the threat of cyberspace is becoming more and more serious.A large number of studies have focused on cyberspace security defense techniques and systems.Vulnerability mining technique can be applied to detect and repair vulnerabilities in time before the occurrence of network attacks,reducing the risk of intrusion;while threat detection technique can be applied to threat detection during and after network attacks occur,which can detect threats in a timely manner and respond to them,reducing the harm and loss caused by intrusion.This paper analyzed and summarized the research on vulnerability mining and cyberspace threat detection based on intelligent methods.In the aspect of intelligent vulnerability mining,the current research progress is summarized from several application classifications combined with artificial intelligence technique,namely vulnerability patch identification,vulnerability prediction,code comparison and fuzz testing.In the aspect of cyberspace threat detection,the current research progress is summarized from the classification of information carriers involved in threat detection based on network traffic,host data,malicious files,and network threat intelligence.