网络空间威胁情报感知_共享与分析技术综述_李建华.pdfVIP

2 2 Vol.2 No.2 2016 2 Chinese Journal of Network and Information Security February 2016 200240 TP393 A doi: 10.11959/j.issn.2096-109x.2016.00028 Overview of the technologies of threat intelligence sensing, sharing and analysis in cyber space LI Jian-hua (School of Information Security Engineering, Shanghai Jiaotong University, Shanghai 200240, China) Abstract: With a rapid development of information technologies including big data, cloud computing, Internet of things, etc., the threats in cyber space also become more ubiquitous and complex. Moreover, more and more persis- tence and hidden features present in all kinds of network attacks. Threat intelligence based network defense can analyze the undergoing attacks and predict the threat situation in the future. Furthermore, based on the potential risk, users can define efficient security policy, thus the defense capabilities of the cyber space could be enhanced syste- matically. Threat intelligence is a very wide research area. The research works and developments of the sensing, sharing and analysis for threat intelligence were studied and reviewed deeply. Key words: cyber space security, threat intelligence perception, threat intelligence sharing, artificial intelligence 1