虚实融合网络空间安全综述

Security in virtual-real mixing cyberspaces:a survey

在计算机与网络基础设施不断发展的推动下,越来越多的人类活动从物理世界向数字世界迁移,产生了构建新型虚实融合网络空间的动因和思想,增强现实、数字孪生、元宇宙等相继成为国际关注热点.虚实融合网络以互联网、物联网为基础,进一步将具有独立身份的计算机、各种物理对象及其数字孪生,以及计算机生成的数字原生对象进行互联,将物理世界和人类世界与数字世界贯通,成为“泛联网”,形成人、机、物泛联互通的虚实融合网络空间,带来全新的大众体验、社交形态、生产模式和数字经济发展路径.这种新型网络空间极大地拓展了互联网、物联网的空间边界和应用领域,同时也带来了新的安全与隐私保护问题.本文首先介绍了泛联网与虚实融合网络空间的概念及架构,分析其存在的安全与隐私风险,然后从用户认证与权限控制、数据安全、隐私保护、感知与交互安全、关键基础设施与软硬件安全、应用安全与网络空间治理等方面的国际研究现状和发展趋势进行综述,最后给出需要解决的十个问题.

Driven by the continuous development of computer and network infrastructure,more and more human activities are migrating from the physical world to the digital world,bringing the motivation and thought of building a new type of virtual-real mixing cyberspace.Virtual reality,augmented reality,digital twins,metaverse,etc.become world-wide hot spots.Based on the Internet and the Internet of Things,the virtual-real mixing network further interconnects computers with independent identities,various physical objects,and their digital twins,as well as computer-generated digital native objects.In this way,the physical world,the digital world,and the human world are mixed and merged together.We name this kind of emerging network as\Pervasive Internet",which forms a virtual-real mixing cyberspace where humans,machines,and physical/virtual things are interlinked and interconnected,bringing totally new public experiences,social forms,production patterns,and digital economic development paths.This new type of cyberspace has greatly expanded the space boundaries and application elds of the Internet and the Internet of Things,whereas it brings new security and privacy protection issues.This article rstly introduces the concept and architecture of Pervasive Internet and virtual-real mixing cyberspace,analyzes their security and privacy risks,and then reviews the latest international status and trends in user authentication and authorization control,data security,privacy protection,perception and interaction security,critical infrastructure and hardware/software security,and application security and cyberspace governance.We proposed ten problems that need to be solved at the end.