网络空间内置式主动防御(英文版)

Chapter 1 Security Threats in Cyberspace 　　The extensive application of information technology and the expansive reach of cyberspace have greatly boosted economic development and social prosperity， while bringing new security risks and challenges. On the one hand， the society and economy are increasingly integrated with the information systems. With the rapid development of emerging technologies such as 5G， cloud computing， artificial intelligence， and big data， the degree at which human， machine， and things are integrated is becoming higher and higher. Security threats in cyberspace are increasingly getting into the human society and physical space. On the other hand， security vulnerabilities in cyberspace are becoming more prevalent， the boundary between cyberspace and physical space is becoming increasingly blurred， attacks with unknown patterns are becoming ever more destructive， and cyberspace is becoming harder and harder to defend. Cybersecurity is now tightly associated with the common interests of all mankind， world peace and development， and national security of every country. It is a common challenge faced by all countries in the world. From a technical point of view， cybersecurity is facing two increasingly critical problems. 　　First， software and hardware vulnerabilities are inevitable. In the past two decades， the scale and complexity of software systems have increased constantly. The higher complexity of software code and the greater difficulty of verification， the higher probability of having security vulnerabilities. At the same time， hardware vulnerabilities are also ubiquitous. Defects in hardware designs and complex design/manufacturing processes are the two main factors that introduce hardware vulnerabilities. ①Many classic design principles embedded in the current hardware architectures place a heavy emphasis on performance optimization over security， leading to inherent security deficiencies in hardware. ②The hardware design process is lengthy and complex， such as requiring the use of many third-party IPs， standard cell libraries， and various EDA (electronic design automation) tools. The entire process may involve dozens of vendors， all of which may introduce new security vulnerabilities to the final products. 　　Second， attacks with unknown patterns emerge continuously. Attacks exploring software and hardware vulnerabilities are the main security threats in cyberspace. In recent years， the number of zero-day vulnerabilities has been growing rapidly and has become a norm. Although new vulnerabilities may pose difficulty of varying degrees when it comes to them being exploited， there are always new vulnerabilities that will be successfully exploited， leading to security breaches with previously unknown patterns. The traditional defense technology that uses ad-hoc patches after each breach is reactive in nature and is always lagging behind attacks. Attacks with unknown patterns have become the most threatening challenge in cyberspace and are the focus and main challenge of future defense strategies. 　　As software and hardware vulnerabilities are inevitable and attacks with unknown patterns are unavoidable， exploring and designing more effective new defense systems for cyberspace has great practical significance， broad scientific and technological importance， and profound strategic influence. 　　Chapter 2 Dilemma of Classic Defense Systems and Technology 　　2.1 Defense Systems 　　The classic defense systems， represented by perimeter defense and defense-in-depth， mainly consider the network system as the center and create a perimeter surrounding the network system. It then implements defense policies at the perimeter and achieves the effect of "fending off the enemy outside the gate". 　　Perimeter defense[1]， as the earliest defense mechanism， mainly guards the perimeter to resist external attacks. It， however， has many shortcomings， such as that there is no effective way to prevent internal threats and any breach of the perimeter will render the entire security system completely ineffective. 　　The defense-in-depth system[2] is an extension of the perimeter defense and typically implements hierarchical multi-layered defense policies. It considers human， technology， and operation as the core elements of safeguarding information systems and deploys security measures in the critical areas such as network infrastructure， network boundaries， computing systems， and supporting infrastructure. It sets up layered protection and detection measures according to the hierarchical network architecture to form a hierarchical security framework. 　　In an open network， defenders cannot fully control all the paths of the network， making it difficult to build a defense-in-depth system. To address this challenge， a new type of defense system represented by zero-trust has been proposed a few years ago[3]. In the zero-trust system， security defense is no longer centered on networks and