| 引用本文： |
-
刘庆云,李仁杰,周舟,钟友兵,石峰源,郭莉.网络空间反测绘技术研究[J].信息安全学报,已采用 [点击复制]
- LIU Qingyun,LI Renjie,ZHOU Zhou,ZHONG Youbing,SHI Fengyuan,GUO Li.Research on Cyberspace Anti-Surveying and Mapping[J].Journal of Cyber Security,Accept [点击复制]
|
|
| 本文已被：浏览 36293次 下载 28529次 |
|
| 网络空间反测绘技术研究 |
|
刘庆云1,2, 李仁杰1,2, 周舟1,2, 钟友兵1,2, 石峰源1,2, 郭莉1,2
|
|
|
| (1.1中国科学院信息工程研究所 信息内容安全技术国家工程实验室 北京 中国 100093;2.2中国科学院大学 网络空间安全学院 北京 中国 100049) |
|
| 摘要: |
| 网络空间测绘技术的发展在极大促进人们对各类网络空间资源及其属性的全方位认知的同时,也为攻击方绘制“攻击面地图”提供了便利。网络空间反测绘是保护各类网络空间资源及其属性不被测绘方探测、分析和绘制的全方位防御过程,其核心思想是通过阻断测绘方的探测和扰乱测绘方对探测数据的关联分析,使得测绘方无法绘制出动态、实时、可靠的网络空间地图。首先,给出了网络空间反测绘的相关概念及定义。然后,提出了网络空间反测绘的技术体系,从探测行为识别、探测行为防护和测绘分析欺骗三个层次阐述了网络空间反测绘的关键技术,并对网络空间反测绘对抗技术进行探讨。最后,对当前的研究现状进行总结,并展望了未来研究方向。 |
| 关键词: 反测绘 探测 防护 欺骗 |
| DOI：10.19363/J.cnki.cn10-1380/tn.2023.08.24 |
| 投稿时间：2021-04-07修订日期：2021-07-05 |
| 基金项目: |
|
| Research on Cyberspace Anti-Surveying and Mapping |
|
|
|
| Abstract: |
| The development of cyberspace surveying and mapping technology has greatly promoted people’s comprehensive understanding of various cyberspace resources and their attributes, while also providing convenience for adversaries to draw the “attack surface map”. Cyberspace Anti-Surveying and Mapping (CASM) is a comprehensive defense process that protects various cyberspace resources and their attributes from being detected, analyzed, and visualized by adversaries. The core idea of CASM is to block the adversaries’ detection and prevent them from correlation analysis of detected data, making it impossible for adversaries to draw a dynamic, real-time, and reliable cyberspace map. Firstly, we give the related concepts and definitions of CASM. Then, we propose the technical architecture of countermeasures technology of cyberspace surveying and mapping. The key technologies are discussed from three levels: detection behavior recognition, detection behavior protection, and surveying analysis deception. Finally, we summarize the current research status and look forward to future research directions. |
| Key words: anti-surveying and mapping detection protection deception |
