文章目錄[隱藏]
- The Evolution of the Cyber Security Threat Landscape
- The cyber threats of today are not the same as even a few years ago. As the cyber threat landscape changes, organizations need protection against cybercriminals’ current and future tools and techniques.
- Gen V Attacks
- The cyber security threat landscape is continually evolving, and, occasionally, these advancements represent a new generation of cyber threats. To date, we have experienced five generations of cyber threats and solutions designed to mitigate them, including:
- · Gen I (Virus): In the late 1980s, virus attacks against standalone computers inspired the creation of the first antivirus solutions.
- · Gen II (Network): As cyberattacks began to come over the Internet, the firewall was developed to identify and block them.
- · Gen III (Applications): Exploitation of vulnerabilities within applications caused the mass adoption of intrusion prevention systems (IPS)
- · Gen IV (Payload): As malware became more targeted and able to evade signature-based defenses, anti-bot and sandboxing solutions were necessary to detect novel threats.
- · Gen V (Mega): The latest generation of cyber threats uses large-scale, multi-vectors attacks, making advanced threat prevention solutions a priority.Each generation of cyber threats made previous cyber security solutions less effective or essentially obsolete. Protecting against the modern cyber threat landscape requires Gen V cyber security solutions.
HIR 2023 賽年的年度主題為(wei) “Technological Advancement and the World”，有 13 個(ge) 可選擇的領域，具體(ti) 信息可查看之前的文章。我們(men) 今天就來看看 Cybersecurtiy 這個(ge) 領域要如何寫(xie) 。
隨著技術發展，我們(men) 的工作和生活越來越依賴電子化和網絡，與(yu) 此同時，網絡攻擊的手段和方式也在進步，因此，網絡安全的重要性也在逐漸凸顯。今天，大量數據的產(chan) 生和使用正在重新定義(yi) 我們(men) 的"智能"以及我們(men) 的社會(hui) 和經濟景觀，刺激了新的產(chan) 業(ye) 、流程和產(chan) 品，並創造了巨大的競爭(zheng) 優(you) 勢。
在這個(ge) 意義(yi) 上，數據驅動的創新（DDI: data-driven innovation）已經成為(wei) 21 世紀增長的關(guan) 鍵支柱，有可能大幅提高生產(chan) 力、資源效率、經濟競爭(zheng) 力和社會(hui) 福祉。對數據的更多獲取和使用也製造了一係列廣泛的影響和政策挑戰，從(cong) 隱私和消費者保護到開放獲取問題和測量問題，涉及公共和私人衛生、法律和科學領域。
議題一：數據安全與(yu) 數據歸屬權
（Data Security & Data Ownership）
就像大數據戰略家 Paul Sonderegger 說的那樣，數據將是最終的外部性（外部性可以簡單理解為(wei) “影響”）：無論我們(men) 做什麽(me) ，都會(hui) 產(chan) 生數據。
(原話：Data will be the ultimate externality: we will generate them whatever we do).
這邊給大家推薦經濟學人的一篇文章：Data is Giving Rise to a New Economy。據文章所說，數據在本世紀的作用就像石油在上世紀的作用一樣：是增長和變革的驅動力。
數據的流動創造了新的基礎設施、新的企業(ye) 、新的壟斷、新的政治和重要的新經濟。數字信息不同於(yu) 以往的任何資源；它以不同的方式被提取、提煉、估價(jia) 、購買(mai) 和銷售。它改變了市場的規則，要求監管者采取新的方法。
在誰應該擁有數據並從(cong) 中受益的問題上，將發生許多戰鬥。很多人擔憂現今時代個(ge) 人數據的安全，而數據的私域和公域界限也一直有所爭(zheng) 議。人們(men) 可能會(hui) 擔憂自己電腦、手機上的攝像頭被入侵，但同時人們(men) 在使用社交媒體(ti) 的時候常常很容易把個(ge) 人數據”送“出去以換取一些”免費“的服務。
據微軟研究院的經濟學家格倫(lun) -韋爾（Glen Weyl）說，這種交易條件幾乎成為(wei) 常態。很多人不會(hui) 同意自己的數據應該歸那些自己同意共享信息的企業(ye) 所有（社交 app 比如 Facebook，Instagram，Twitter 等等），但也不確定個(ge) 人數據應該完全不被分享出去。
譬如警方想要調查一起案件，能不能調用某個(ge) 時段的路邊攝像頭的監控影像，盡管這可能涉及到部分個(ge) 體(ti) 的隱私？關(guan) 於(yu) 這些爭(zheng) 議，給大家推薦 Lothar Determann 教授的一篇文章：No One Owns Data，文章討論了關(guan) 於(yu) 現今數據歸屬權的問題，其中還包括一些現實案例，可以幫助大家更好地構建 commentary 的思路。
議題二：網絡攻擊者與(yu) 攻擊對象
Cyber Attack 一直是不少懸疑驚悚電影的題材，特別是黑客入侵，暗網凶手等題材極受歡迎，這也側(ce) 麵說明了很多人對網絡安全的擔憂。不過，我們(men) 需要考慮的是，Cyber attack 的發起人和受害者都不一定隻局限於(yu) 個(ge) 體(ti) ，甚至可能發生在組織之間或者國家之間。在這裏給大家找到了一個(ge) 大致的梳理，想寫(xie) 這方麵議題的同學們(men) 可以稍微了解一下：
The Evolution of the Cyber Security Threat Landscape
The cyber threats of today are not the same as even a few years ago. As the cyber threat landscape changes, organizations need protection against cybercriminals’ current and future tools and techniques.
Gen V Attacks
The cyber security threat landscape is continually evolving, and, occasionally, these advancements represent a new generation of cyber threats. To date, we have experienced five generations of cyber threats and solutions designed to mitigate them, including:
· Gen I (Virus): In the late 1980s, virus attacks against standalone computers inspired the creation of the first antivirus solutions.
· Gen II (Network): As cyberattacks began to come over the Internet, the firewall was developed to identify and block them.
· Gen III (Applications): Exploitation of vulnerabilities within applications caused the mass adoption of intrusion prevention systems (IPS)
· Gen IV (Payload): As malware became more targeted and able to evade signature-based defenses, anti-bot and sandboxing solutions were necessary to detect novel threats.
· Gen V (Mega): The latest generation of cyber threats uses large-scale, multi-vectors attacks, making advanced threat prevention solutions a priority.Each generation of cyber threats made previous cyber security solutions less effective or essentially obsolete. Protecting against the modern cyber threat landscape requires Gen V cyber security solutions.
（來源：https://www.checkpoint.com/cyber-hub/cyber-security/what-is-cybersecurity/）隨著 HIR 寫(xie) 作競賽在知名度上的提升，它的參賽者也越來越多，因此這項比賽對大部分學生來說，將變得更有挑戰性。
與(yu) 課內(nei) 寫(xie) 作作業(ye) 相比，寫(xie) 作競賽的作品評審標準也更加苛刻，更考驗學生搜尋和引用文獻的能力。
【競賽報名/項目谘詢+微信：mollywei007】
評論已經被關(guan) 閉。