This paper examines how cybersecurity is developing and how it relates to more conventional information security. Although information security and cyber security are sometimes used synonymously, this study contends t...This paper examines how cybersecurity is developing and how it relates to more conventional information security. Although information security and cyber security are sometimes used synonymously, this study contends that they are not the same. The concept of cyber security is explored, which goes beyond protecting information resources to include a wider variety of assets, including people [1]. Protecting information assets is the main goal of traditional information security, with consideration to the human element and how people fit into the security process. On the other hand, cyber security adds a new level of complexity, as people might unintentionally contribute to or become targets of cyberattacks. This aspect presents moral questions since it is becoming more widely accepted that society has a duty to protect weaker members of society, including children [1]. The study emphasizes how important cyber security is on a larger scale, with many countries creating plans and laws to counteract cyberattacks. Nevertheless, a lot of these sources frequently neglect to define the differences or the relationship between information security and cyber security [1]. The paper focus on differentiating between cybersecurity and information security on a larger scale. The study also highlights other areas of cybersecurity which includes defending people, social norms, and vital infrastructure from threats that arise from online in addition to information and technology protection. It contends that ethical issues and the human factor are becoming more and more important in protecting assets in the digital age, and that cyber security is a paradigm shift in this regard [1].展开更多
在网络威胁呈爆发式增长的当下,随着业务模式数字化重塑与业务持续性增长,银行业面临因网络安全防线持续扩大所导致的安全设备冗杂、安全运营任务繁重、实战能力不足等问题.对银行业金融机构在安全运营中所面临的挑战进行分析,提出了融...在网络威胁呈爆发式增长的当下,随着业务模式数字化重塑与业务持续性增长,银行业面临因网络安全防线持续扩大所导致的安全设备冗杂、安全运营任务繁重、实战能力不足等问题.对银行业金融机构在安全运营中所面临的挑战进行分析,提出了融合平战一体化安全运营机制的银行业DAO(defence,ability and operation)数字化安全运营体系,重点研究纵深化防护基础、原子化能力中枢、数字化运营总台3层次架构,以及针对常态化、高强度、无间断防护目标的平战一体机制实施路径.展开更多
工业企业网络安全运营管理涉及数据中心机房的云环境、车间的边缘层以及生产线上的终端层等,对象分散且网络复杂,实现安全编排自动化与响应(Security Orchestration and Automation Response,SOAR)协同难度大。在分析云、边缘计算与终...工业企业网络安全运营管理涉及数据中心机房的云环境、车间的边缘层以及生产线上的终端层等,对象分散且网络复杂,实现安全编排自动化与响应(Security Orchestration and Automation Response,SOAR)协同难度大。在分析云、边缘计算与终端设备协同控制传输特性的基础上,设计了一种面向SOAR的云边端(Cloud-Edge-Device,CED)安全消息总线,实现了面向云边端侧子系统的安全消息集成协同机制,解决了云边端侧节点安全接入、在线状态管理、离线安全数据保持及实时性优先SOAR协同。实践表明,云边端安全消息总线很好地满足了云边端复杂网络下SOAR实时性优先的传输要求。展开更多
文摘This paper examines how cybersecurity is developing and how it relates to more conventional information security. Although information security and cyber security are sometimes used synonymously, this study contends that they are not the same. The concept of cyber security is explored, which goes beyond protecting information resources to include a wider variety of assets, including people [1]. Protecting information assets is the main goal of traditional information security, with consideration to the human element and how people fit into the security process. On the other hand, cyber security adds a new level of complexity, as people might unintentionally contribute to or become targets of cyberattacks. This aspect presents moral questions since it is becoming more widely accepted that society has a duty to protect weaker members of society, including children [1]. The study emphasizes how important cyber security is on a larger scale, with many countries creating plans and laws to counteract cyberattacks. Nevertheless, a lot of these sources frequently neglect to define the differences or the relationship between information security and cyber security [1]. The paper focus on differentiating between cybersecurity and information security on a larger scale. The study also highlights other areas of cybersecurity which includes defending people, social norms, and vital infrastructure from threats that arise from online in addition to information and technology protection. It contends that ethical issues and the human factor are becoming more and more important in protecting assets in the digital age, and that cyber security is a paradigm shift in this regard [1].
文摘在网络威胁呈爆发式增长的当下,随着业务模式数字化重塑与业务持续性增长,银行业面临因网络安全防线持续扩大所导致的安全设备冗杂、安全运营任务繁重、实战能力不足等问题.对银行业金融机构在安全运营中所面临的挑战进行分析,提出了融合平战一体化安全运营机制的银行业DAO(defence,ability and operation)数字化安全运营体系,重点研究纵深化防护基础、原子化能力中枢、数字化运营总台3层次架构,以及针对常态化、高强度、无间断防护目标的平战一体机制实施路径.
文摘工业企业网络安全运营管理涉及数据中心机房的云环境、车间的边缘层以及生产线上的终端层等,对象分散且网络复杂,实现安全编排自动化与响应(Security Orchestration and Automation Response,SOAR)协同难度大。在分析云、边缘计算与终端设备协同控制传输特性的基础上,设计了一种面向SOAR的云边端(Cloud-Edge-Device,CED)安全消息总线,实现了面向云边端侧子系统的安全消息集成协同机制,解决了云边端侧节点安全接入、在线状态管理、离线安全数据保持及实时性优先SOAR协同。实践表明,云边端安全消息总线很好地满足了云边端复杂网络下SOAR实时性优先的传输要求。
