安全情报视域下系统安全韧性模型研究

Research on the Model for System Safety&Security Resilience from a Perspective of Safety&Security Intelligence

[目的/意义]在当今不确定时代,安全威胁的种类及涌现形式呈现庞杂多变性,安全威胁的叠加和级联传导效应愈加凸显,这对系统应对安全威胁与适应不确定环境的安全韧性水平提出更高要求。全面、精准、高效和前瞻地获取安全情报是提升系统安全韧性的基础和关键。因此,开展基于安全情报视角的系统安全韧性研究意义重大。[方法/过程]首先,分析安全情报视域下系统安全韧性的内涵;其次,分析系统安全韧性作用过程中安全情报的价值;最后,构建与解析基于安全情报的系统安全韧性模型。[结果/结论]从安全情报角度看,系统安全韧性是指安全情报驱动的系统安全感知、响应、适应、恢复与优化能力的综合统一。基于安全情报的系统安全韧性模型包括基于安全态势情报的系统安全态势前瞻感知、基于安全威胁情报的系统安全威胁敏捷响应、基于安全决策情报的系统安全应变模式适应、基于安全执行情报的系统安全状态有序恢复,以及基于安全综合情报的系统安全综合能力提升5个层次。

[Purpose/significance]In today’s uncertain era,the types and emergence forms of safety&security threats are complex and varied,and their superposition and cascading conduction effects are more and more prominent,which puts higher requirements on the level of system safety&security resilience to cope with safety&security threats and adapt to uncertain environments.Comprehensive,accurate,efficient and forward-looking acquisition of safety&security intelligence is the foundation and key to improving system safety&security resilience.Therefore,it is of great significance to conduct the research on system safety&security resilience from a perspective of safety&security intelligence.[Method/process]Firstly,the connotation of system safety&security resilience based on safety&security intelligence is analyzed.Secondly,the value of safety&security intelligence in the role of system safety&security resilience is analyzed.Finally,the model of system safety&security resilience from a perspective of safety&security intelligence is constructed and analyzed.[Result/conclusion]From the perspective of safety&security intelligence,system safety&security resilience refers to the comprehensive unity of system safety&security perception,response,adaptation,recovery and optimization capabilities driven by safety&security intelligence.The system safety&security resilience model based on safety&security intelligence includes five levels:forward-looking perception of system safety&security situation based on safety&security situation intelligence,agile response to system safety&security threats based on safety&security threat intelligence,adaptation of system safety&security contingency mode based on safety&security decision intelligence,orderly restoration of system safety&security state based on safety&security execution intelligence,and enhancement of comprehensive system safety & security capability based on safety & security synthesis intelligence.