AISecOps自动化能力分级与技术趋势研究

doi:10.3969/j.issn.1671-1122.2020.09.005

信息网络安全 ›› 2020, Vol. 20 ›› Issue (9): 22-26.doi: 10.3969/j.issn.1671-1122.2020.09.005

AISecOps自动化能力分级与技术趋势研究

张润滋¹^,², 刘文懋¹(), 尤扬¹, 解烽³

1. 绿盟科技集团股份有限公司,北京 100089
2. 清华大学自动化系,北京 100084
3. 哈尔滨工程大学信息与通信工程学院,哈尔滨 150001

收稿日期:2020-07-16 出版日期:2020-09-10 发布日期:2020-10-15
通讯作者: 刘文懋 E-mail:liuwenmao@nsfocus.com
作者简介:张润滋（1989—）,男,山东,博士,主要研究方向为智能安全运营、安全数据挖掘|刘文懋（1983—）,男,浙江,高级工程师,博士,主要研究方向为云计算安全、物联网安全|尤扬（1983—）,男,北京,硕士,主要研究方向为网络安全、可信计算|解烽（1998—）,男,河南,本科,主要研究方向为网络安全、数据分析
基金资助:
中国博士后科学基金(2020M670181)

Research on AISecOps Automation Levels and Technology Trends

ZHANG Runzi¹^,², LIU Wenmao¹(), YOU Yang¹, XIE Feng³

1. NSFOCUS Technologies Group Co., Ltd., Beijing 100089, China
2. Department of Automation, Tsinghua University, Beijing 100084, China
3. College of Information and Communication Engineering, Harbin Engineering University, Harbin 150001, China

Received:2020-07-16 Online:2020-09-10 Published:2020-10-15
Contact: Wenmao LIU E-mail:liuwenmao@nsfocus.com

摘要/Abstract

摘要：

由于网络空间的高度动态特性与攻防对抗过程的关键决策需求,AISecOps技术的发展受到了数据融合、人机交互、场景建模、算法优化等多方面的限制。文章总结了AISecOps技术的内涵、评估指标层次,提出AISecOps自动化能力分级方案并分析实践案例,进而展望了AISecOps技术的发展趋势。

关键词: AISecOps, 安全运营, 安全自动化, 人工智能安全

Abstract:

Due to the highly dynamic characteristics of cyberspace and the critical decision requirements of the offensive and defensive confrontation process, AISecOps technology has encountered limitations in data integration, human-computer interaction, scene modeling, algorithm optimization and other aspects. This paper summarizes the connotation and evaluation index hierarchy of AISecOps technology, introduces AISecOps automation level partition scheme and practice in SecOps scenario, and then looks into the development trend of AISecOps technology.

Key words: AISecOps, security operation, security automation, artificial intelligence security

中图分类号:

TP309

张润滋, 刘文懋, 尤扬, 解烽. AISecOps自动化能力分级与技术趋势研究[J]. 信息网络安全, 2020, 20(9): 22-26.

ZHANG Runzi, LIU Wenmao, YOU Yang, XIE Feng. Research on AISecOps Automation Levels and Technology Trends[J]. Netinfo Security, 2020, 20(9): 22-26.

图/表 3

参考文献 7

[1]	PEI K, GU Z, SALTAFORMAGGIO B, et al. Hercule: Attack Story Reconstruction via Community Discovery on Correlated Log Graph[C]// ACSA. The 32nd Annual Conference on Computer Security Applications, December 5-9, 2016, Los Angeles, California, USA. New York: ACM, 2016: 583-595.
[2]	MILAJERDI S M, GJOMEMO R, ESJETE B, et al. Holmes: Real-time APT Detection through Correlation of Suspicious Information Flows[C]// IEEE. 2019 IEEE Symposium on Security and Privacy(S&P), May 19-23, 2019, San Francisco, CA, USA. New York: IEEE, 2019: 1137-1152.
[3]	LIU Junxu, MENG Xiaofeng. Survey on Privacy-preserving Machine Learning[J]. Journal of Computer Research and Development, 2020,57(2):346-362.
	刘俊旭, 孟小峰. 机器学习的隐私保护研究综述[J]. 计算机研究与发展, 2020,57(2):346-362.
[4]	HASSAN W U, GUO S, LI D, et al. NoDoze: Combatting Threat Alert Fatigue with Automated Provenance Triage[C]// Internet Society. Network and Distributed System Security Symposium(NDSS) 2019, February 24-27, 2019, San Diego, CA, USA. Reston, VA: Internet Society, 2019.
[5]	BRYANT D J. Rethinking OODA: Toward a Modern Cognitive Framework of Command Decision Making[J]. Military Psychology, 2006,18(3):183-206. doi: 10.1207/s15327876mp1803_1 URL
[6]	WIKIPEDIA, https://en.wikipedia.org/wiki/Self-driving_car, 2020-6-21.
[7]	GILPIN L H, BAU D, YUAN B Z, et al. Explaining Explanations: An Overview of Interpretability of Machine Learning[C]// IEEE. 2018 IEEE 5th International Conference on Data Science and Advanced Analytics(DSAA), October 1-4, 2018, Turin, Italy. New York: IEEE, 2018: 80-89.

AISecOps自动化能力分级与技术趋势研究

Research on AISecOps Automation Levels and Technology Trends

RichHTML

PDF (PC)

可视化

摘要/Abstract

引用本文

使用本文

图/表 3

参考文献 7

相关文章 1

编辑推荐

Metrics

本文评价