摘要
[目的/意义]信息技术的快速发展,促使人类社会对网络空间的高度依赖,如何建立和完善网络安全信息共享机制成为世界各国普遍关注的焦点问题,而我国在此方面的机制缺位。美国是网络安全信息共享机制建立最早且规定较为完备的国家,对其进行系统研究能够为我国网络安全信息共享机制的建立提供有益的参考和借鉴。[方法/过程]通过分析美国网络安全信息共享机制的政策法律基础及其特点,研究美国网络安全信息共享的组织机构,探讨美国网络安全信息共享的激励机制和隐私保护机制。[结果/结论]提出我国应当通过立法建立网络安全信息共享的制度体系,构建网络安全信息共享的组织机构体系,建立国家层面的网络威胁情报共享和分析中心,确立网络威胁情报共享的激励机制。
[Purpose / Significance]With the rapid development of information technology and global integration trend,vulnerabilities and insecurity faced by information systems to promote cybersecurity risks inherent uncertainty intensified. Therefore,howto establish and improve cybersecurity information sharing mechanism becomes the focus around the world,and the absence of such necessary mechanisms is a real problem in China presently. US cybersecurity information sharing mechanism,the firstly established one of its type,has developed a highly complete set of provisions,which may act as a useful resource for China in her proactive effort to establish a similar mechanism.[Method/Process]By analyzing US cybersecurity information sharing mechanism and the characteristics of the legal basis,researching on the US cybersecurity information sharing organizations,and discussing the incentive mechanism and privacy protection mechanism,[Result / Conclusion] it is suggested that China should establish the cybersecurity information sharing system through legislation,build the cybersecurity information sharing organization system,construct a national-level cyber threats intelligence sharing and analysis center,and develop a cyber threats intelligence sharing incentive mechanism.
出处
《情报杂志》
CSSCI
北大核心
2016年第3期17-23,6,共8页
Journal of Intelligence
基金
国家社会科学基金重大项目"网络社会治理创新研究"(编号:15ZDA047)的阶段性成果
国家社会科学基金项目"我国网络安全立法研究"(编号:15BFX050)的阶段性成果
信息网络安全公安部重点实验室开放课题项目资助"基于风险控制的互联网关键基础设施保护法律研究"(编号:C13603)的阶段性成果
陕西省社会科学基金项目"基于IT国际供应链国家安全审查的IT供应商法规遵从与应对研究"(编号:13F060)的阶段性成果
关键词
网络安全信息共享
信息共享和分析
网络威胁情报
激励机制
cybersecurity information sharing
information sharing and analysis
cyber threats intelligence
incentive mechanism
