网络安全动态
Cybersecurity Dynamics
摘要：
我们探索{ \em Cybersecurity Dynamics}的新兴领域，这是网络安全科学的候选基础。
英文摘要：
We explore the emerging field of {\em Cybersecurity Dynamics}, a candidate foundation for the Science of Cybersecurity.
机构、总结、中文摘要均由AI分析而来，可能存在错误，请以论文正文为准。
继续探索
相关论文
面向移动交易的四因素认证与新兴网络安全
Four Factor Authentication with emerging cybersecurity for Mobile Transactions
针对移动交易的安全问题，提出结合传统密码、OTP、地理定位与面部识别的四因素认证，并采用Babushka算法将数据隐藏于图像中加解密以保障安全。
cs.CR
现代智能电网应对新兴威胁的网络安全
Cybersecurity for Modern Smart Grid against Emerging Threats
本专著系统综述智能电网网络安全问题的来源、威胁分类及缓解方法，梳理最新研究成果与开放挑战，为初学者和研究者提供教程与参考。
cs.CR
使用检索增强生成将大型语言模型适应新兴网络安全
Adapting Large Language Models to Emerging Cybersecurity using Retrieval Augmented Generation
School of Electrical and Computer Engineering（电气与计算机工程学院）；Georgia Institute of Technology（佐治亚理工学院）；Department of Computer Science（计算机科学系）；Rochester Institute of Technology（罗切斯特理工学院）
本文提出一个基于RAG的框架，利用外部数据集和Llama-3-8B-Instruct模型，通过优化的混合检索方法提升LLMs在网络安全任务中的知识保留、时间推理准确性和适应性。
cs.AIcs.CR
网络安全子学科的演变：一项科学研究科学的研究
Evolution of Cybersecurity Subdisciplines: A Science of Science Study
本文从科学研究科学的角度研究网络安全学科的演变，分析了两个跨学科社区的发展。
cs.CR
Identifying Emerging Technologies and Leading Companies using Network Dynamics of Patent Clusters: a Cybersecurity Case Study
Strategic decisions rely heavily on non-scientific instrumentation to forecast emerging technologies and leading companies. Instead, we build a fast quantitative system with a small computational footprint to discover the most important technologies and companies in a given field, using generalisable methods applicable to any industry. With the help of patent data from the US Patent and Trademark Office, we first assign a value to each patent thanks to automated machine learning tools. We then apply network science to track the interaction and evolution of companies and clusters of patents (i.…
cs.CRcs.SI
基于人工智能的网络安全威胁：新兴风险与防御策略调研
AI-Driven Cybersecurity Threats: A Survey of Emerging Risks and Defensive Strategies
Bharat Institute of Engineering and Technology（印度海得拉尔邦坦达瓦纳技术工程学院）；Vellore Institute of Technology（印度维洛雷技术学院）
本文调研了人工智能在网络安全中的新兴威胁与防御策略，分析了深度伪造、对抗性AI攻击等风险，并提出混合检测和基准框架等研究方向。
cs.AIcs.CR
更多相关论文收起更多论文
网络安全的新前沿：新兴威胁与创新
The New Frontier of Cybersecurity: Emerging Threats and Innovations
BITS Pilani（比尔拉理工学院）；Sardar Patel Institute of Technology（萨达尔·帕特尔理工学院）
本研究采用定性方法分析了恶意软件、社会工程等网络安全威胁及其影响，揭示了高级持续性威胁等新兴风险，并提出包含强安全措施、员工培训及定期审计的多层次防御策略。
cs.AIcs.CRcs.CY
驾驭网络安全培训：一项全面综述
Navigating Cybersecurity Training: A Comprehensive Review
本文综述传统、技术型与创新型网络安全意识培训方法，比较其有效性与局限，并探讨AI、扩展现实等趋势及实施挑战。
cs.CR
大语言模型在代理AI中的可扩展性风险与模型供应链安全
Trustworthy AI LLM Scalability Risk Index (LSRI): A Cybersecurity Framework Assessing Agentic-AI Security & Software Model Supply Chain Safety Boosting AI-Generated Malware Defense & Explainability Mitigating Emerging Risks of Generative AI
Virelya Intelligence Research Labs（Virelya 智能研究实验室）；Google（谷歌）
本文研究了大语言模型在代理AI中的可扩展性风险及模型供应链安全问题，提出LSRI指数和模型供应链框架，以提升安全关键环境下的LLM部署安全性。
cs.CR
Cybersecurity Dynamics: A Foundation for the Science of Cybersecurity
Cybersecurity Dynamics is new concept that aims to achieve the modeling, analysis, quantification, and management of cybersecurity from a holistic perspective, rather than from a building-blocks perspective. It is centered at modeling and analyzing the attack-defense interactions in cyberspace, which cause a ``natural'' phenomenon -- the evolution of the global cybersecurity state. In this Chapter, we systematically introduce and review the Cybersecurity Dynamics foundation for the Science of Cybersecurity. We review the core concepts, technical approaches, research axes, and results that have…
cs.CR
Governing autonomous vehicles: emerging responses for safety, liability, privacy, cybersecurity, and industry risks
Lee Kuan Yew School of Public Policy, National University of Singapore（新加坡国立大学李光耀公共政策学院）
The benefits of autonomous vehicles (AVs) are widely acknowledged, but there are concerns about the extent of these benefits and AV risks and unintended consequences. In this article, we first examine AVs and different categories of the technological risks associated with them. We then explore strategies that can be adopted to address these risks, and explore emerging responses by governments for addressing AV risks. Our analyses reveal that, thus far, governments have in most instances avoided stringent measures in order to promote AV developments and the majority of responses are non-binding…
cs.AIcs.CRcs.CY
Automotive Cybersecurity: Foundations for Next-Generation Vehicles
The automotive industry is experiencing a serious transformation due to a digitalisation process and the transition to the new paradigm of Mobility-as-a-Service. The next-generation vehicles are going to be very complex cyber-physical systems, whose design must be reinvented to fulfil the increasing demand of smart services, both for safety and entertainment purposes, causing the manufacturers' model to converge towards that of IT companies. Connected cars and autonomous driving are the preeminent factors that drive along this route, and they cause the necessity of a new design to address the …
cs.CR
高空平台站的网络安全：威胁分类、攻击与防御及标准映射——以DDoS攻击为用例
Cybersecurity of High-Altitude Platform Stations: Threat Taxonomy, Attacks and Defenses with Standards Mapping - DDoS Attack Use Case
本文针对非地面网络新兴节点HAPS的网络安全问题，提出适配平流层的威胁分类体系，梳理可行防御方案并映射相关标准，通过OMNeT++/INET仿真分析DDoS攻击影响，为实际部署提供工程参考。
cs.CRcs.NI
基于案例研究的量子机器学习在网络安全中的方法：用于恶意软件分类与防护的量子支持向量机
Case Study-Based Approach of Quantum Machine Learning in Cybersecurity: Quantum Support Vector Machine for Malware Classification and Protection
Kennesaw State University（肯尼索州立大学）；Marquette University（马凯特大学）；Clark Atlanta University（克拉克亚特兰大大学）；Clayton State University（克莱顿州立大学）；Georgia Southern University（佐治亚南方大学）；Florida International University（佛罗里达国际大学）；Auburn University（奥本大学）；Tuskegee University（塔斯基吉大学）
针对网络安全教学缺乏QML资源的问题，设计十个案例学习模块，并基于Pennylane和drebin215用QSVM实现恶意软件分类，准确率达95%。
cs.CRcs.LGquant-ph
正样本无标签（PU）与负样本无标签（NU）学习在网络安全中的应用
Applications of Positive Unlabeled (PU) and Negative Unlabeled (NU) Learning in Cybersecurity
Mississippi State University（密西西比州立大学）
本文针对PU/NU半监督学习在网络安全领域应用不足的问题，梳理了其在入侵检测等多个子领域的应用场景、问题建模与现存挑战，提出未来发展方向，助力新型网络威胁的检测与缓解。
cs.CRcs.LG
AISCliteracy：评估人工智能与网络安全素养水平及学生的学习需求
AISCliteracy: Assessing Artificial Intelligence and Cybersecurity Literacy Levels and Learning Needs of Students
本研究评估了尼泊尔Chitwan地区9至12年级学生的AI与网络安全素养水平及学习需求，通过调查分析为当地教育项目开发提供建议，并探讨了相关教育的促成因素与障碍。
cs.CRcs.CY
Quantifying Cybersecurity Effectiveness of Dynamic Network Diversity
The deployment of monoculture software stacks can have devastating consequences because a single attack can compromise all of the vulnerable computers in cyberspace. This one-vulnerability-affects-all phenomenon will continue until after software stacks are diversified, which is well recognized by the research community. However, existing studies mainly focused on investigating the effectiveness of software diversity at the building-block level (e.g., whether two independent implementations indeed exhibit independent vulnerabilities); the effectiveness of enforcing network-wide software divers…
cs.CR
面向空间网络风险管理的原则性风险评分
Towards Principled Risk Scores for Space Cyber Risk Management
本文通过真实卫星攻击场景分析NRS的优劣，提出期望属性并给出形式化基线，以指导未来空间网络风险评分设计。
cs.CR
攻击性网络安全智能体的动态风险评估
Dynamic Risk Assessments for Offensive Cybersecurity Agents
Princeton University（普林斯顿大学）；Microsoft（微软公司）；University of California Irvine（加州大学尔湾分校）
针对攻击性网络安全智能体，提出扩展威胁模型下的动态风险评估方法，发现攻击者在有限计算预算内可显著提升智能体攻击能力，凸显动态评估的必要性。
cs.AIcs.CR
基于信任的物联网安全增强方法：系统性文献综述
Trust-based Approaches Towards Enhancing IoT Security: A Systematic Literature Review
本文系统性综述了23篇关于物联网基于信任的网络安全方法的研究，将缓解技术分为基于观察、基于知识和基于集群三大类，并指出了未解决问题与未来方向。
cs.CRcs.NI
Research trends, challenges, and emerging topics of digital forensics: A review of reviews
Due to its critical role in cybersecurity, digital forensics has received significant attention from researchers and practitioners alike. The ever increasing sophistication of modern cyberattacks is directly related to the complexity of evidence acquisition, which often requires the use of several technologies. To date, researchers have presented many surveys and reviews on the field. However, such articles focused on the advances of each particular domain of digital forensics individually. Therefore, while each of these surveys facilitates researchers and practitioners to keep up with the lat…
cs.CR
Super forecasting the technological singularity risks from artificial intelligence
University of Oxford（牛津大学）；University of Warwick（华威大学）；University College London（伦敦大学学院）
The article forecasts emerging cyber-risks from the integration of AI in cybersecurity.
cs.AIcs.CRcs.CY
声学网络安全：利用语音激活系统
Acoustic Cybersecurity: Exploiting Voice-Activated Systems
PeopleTec（PeopleTec公司）
本文研究针对语音助手的不可听声学攻击，在多个主流平台上验证了十二种攻击向量，攻击成功率约60%且可远程超100英尺激活设备，并提出融合声学屏蔽、信号处理、机器学习与用户认证的多层防御策略。
cs.CRcs.LGcs.SD
An Event-based Parameter Switching Method for Controlling Cybersecurity Dynamics
This paper proposes a new event-based parameter switching method for the control tasks of cybersecurity in the context of preventive and reactive cyber defense dynamics. Our parameter switching method helps avoid excessive control costs as well as guarantees the dynamics to converge as our desired speed. Meanwhile, it can be proved that this approach is Zeno-free. A new estimation method with adaptive time windows is used to bridge the gap between the probability state and the sampling state. With the new estimation method, several practical experiments are given afterwards.
cs.CRcs.SYeess.SY
迈向高增长中小企业的动态知识产权保护模型
Toward a Dynamic Intellectual Property Protection Model in High-Growth SMEs
University of Melbourne（墨尔本大学）
本文提出一种动态模型，帮助高增长中小型企业平衡知识产权保护与开放创新，应对快速扩张中的网络安全挑战。
cs.CR
工业4.0中的组织学习：结合Crossan的4I框架与双环学习
Organizational Learning in Industry 4.0: Applying Crossan's 4I Framework with Double Loop Learning
The University of Melbourne（墨尔本大学）
本文提出一种结合双环学习与4I框架的DSL模型，用于提升工业4.0环境下的网络安全治理与系统韧性。
cs.CR
通用自主网络安全防御：针对动态拓扑和多样化攻击者学习鲁棒策略
General Autonomous Cybersecurity Defense: Learning Robust Policies for Dynamic Topologies and Diverse Attackers
Cranfield University（克兰菲尔德大学）
针对现有自主网络安全防御系统在动态网络拓扑下泛化能力不足的问题，提出通用自主网络安全防御（GACD），探索使代理在动态网络环境中学习可泛化鲁棒策略的方法。
cs.AIcs.CRcs.CV
网络攻防的协同演化动力学
Co-evolutionary Dynamics of Attack and Defence in Cybersecurity
本研究利用演化博弈论构建攻防双种群非对称博弈，通过数学分析与模拟发现高防御强度带来稳定低攻击频率，并识别出“始终防御-攻击”为最可能稳定均衡，提出基于EGT的自适应策略以优化资源分配、增强韧性并降低网络攻击风险。
cs.CRcs.GTnlin.AO
智能电网中基于SDN的IEC-61850通信动态网络安全框架
SDN-Based Dynamic Cybersecurity Framework of IEC-61850 Communications in Smart Grid
针对智能电网数字变电站IEC-61850通信的网络安全风险，提出集成混合IDS的SDN架构，可检测阻止GOOSE恶意消息注入、定位故障并禁用端口缓解，经HIL测试平台验证有效。
cs.CRcs.CY
CCTFv1：网络安全团队组建策略的计算建模
CCTFv1: Computational Modeling of Cyber Team Formation Strategies
针对网络安全领域团队策略实证研究不足的问题，本文提出CCTF仿真框架，采用基于智能体的建模方法探究团队组建动态，揭示结构对表现的影响，强调战略性团队组建的重要性。
cs.CR
即兴发挥、适应与克服：微电网网络安全博弈中针对未知攻击向量的动态弹性
Improvise, Adapt, Overcome: Dynamic Resiliency Against Unknown Attack Vectors in Microgrid Cybersecurity Games
本文针对微电网 rootkit 攻击，将其建模为零和博弈，提出基于深度强化学习的动态防御策略，在不改变网络拓扑的前提下识别攻击并隔离操纵，有效提升了系统弹性与鲁棒性。
cs.CRcs.SYeess.SY
预防性与反应性网络安全防御动力学是全局稳定的
Preventive and Reactive Cyber Defense Dynamics Is Globally Stable
School of Mathematics, Fudan University（复旦大学数学学院）；Department of Computer Science, University of Texas at San Antonio（德克萨斯大学圣安东尼奥分校计算机科学系）
本文研究预防性与反应性防御对抗推式和拉式攻击的动力学，证明其在全部参数空间内全局稳定，并提出更紧的均衡界。
cs.CRcs.SIcs.SY
VulLink: 用于网络安全数据挖掘的动态开放访问漏洞图数据库
VulLink: A Dynamic Open-Access Vulnerability Graph Database for Cybersecurity Data Mining
La Trobe University（拉筹伯大学）；Victoria University（维多利亚大学）
提出VulLink，一种通过自动化ETL管道集成多源漏洞数据、提供图数据库、Web接口和API的动态开放平台，支持漏洞利用性预测等下游挖掘任务。
cs.CRcs.DB
网络安全作为贯穿本科计算机科学课程的横切概念：一份经验报告
Cybersecurity as a Crosscutting Concept Across an Undergrad Computer Science Curriculum: An Experience Report
本文报告了在欧洲一所顶尖大学将网络安全作为横切概念融入三门本科核心计算机科学课程的经验，覆盖超2200名学生，并从学生、教师和安全专家三方视角反思了该干预的成效与可持续性挑战。
cs.CRcs.CY
Preventive and Reactive Cyber Defense Dynamics with Ergodic Time-dependent Parameters Is Globally Attractive
Cybersecurity dynamics is a mathematical approach to modeling and analyzing cyber attack-defense interactions in networks. In this paper, we advance the state-of-the-art in characterizing one kind of cybersecurity dynamics, known as preventive and reactive cyber defense dynamics, which is a family of highly nonlinear system models. We prove that this dynamics in its general form with time-dependent parameters is globally attractive when the time-dependent parameters are ergodic, and is (almost) periodic when the time-dependent parameters have the stronger properties of being (almost) periodic.…
cs.CRcs.SImath.DS
基于OSINT的网络威胁感知中LLM聊天机器人的评估
Evaluation of LLM Chatbots for OSINT-based Cyber Threat Awareness
LASIGE, Faculdade de Ciências, Universidade de Lisboa（LASIGE，科学学院，里斯本大学）
本研究评估了七种LLM聊天机器人在OSINT二分类和命名实体识别任务中的表现，发现其在二分类上接近专业模型，但在网络安全实体识别上仍有明显不足，需进一步改进。
cs.CLcs.CRcs.LG
