网络安全中的热点话题与文本信息传递渠道分析
Analysis of Trending Topics and Text-based Channels of Information Delivery in Cybersecurity
摘要：
计算机用户通常在做出正确的安全决策时面临困难。虽然越来越少的人尝试或愿意接受正式的安全培训，但包括新闻，安全博客和网站在内的在线资源正在不断使安全知识更容易获得。对网络安全文本的分析可以提供对趋势主题的见解，并确定当前的安全问题以及网络攻击如何随着时间的推移而演变。这些反过来又可以支持研究人员和从业人员预测和准备这些攻击。比较不同的来源可以通过坚持从不同的网络安全环境中获得的安全知识来促进普通用户的学习过程。以前的研究既没有系统地分析广泛的数字来源，也没有提供任何标准化来分析最近安全文本中的趋势主题。虽然LDA已被广泛用于主题生成，但其生成的主题不能完全覆盖网络安全概念，并且存在相当大的重叠。为了解决这个问题，我们提出了一个半自动的分类方法来生成全面的安全类别，而不是LDA生成的主题。我们进一步比较了不同来源的16个安全类别，根据其受欢迎程度和影响。我们发现了一些令人惊讶的发现。(1)网络安全法规所反映的影响与网络犯罪造成的金钱损失密切相关。(2)对于大多数类别，安全博客随着时间的推移拥有最大的受欢迎程度和最大的绝对/相对影响力。(3)网站提供的安全信息不太关心及时性，其中三分之一的文章没有指定日期，其余的文章在发布新出现的安全问题时有时间延迟。
英文摘要：
Computer users are generally faced with difficulties in making correct security decisions. While an increasingly fewer number of people are trying or willing to take formal security training, online sources including news, security blogs, and websites are continuously making security knowledge more accessible. Analysis of cybersecurity texts can provide insights into the trending topics and identify current security issues as well as how cyber attacks evolve over time. These in turn can support researchers and practitioners in predicting and preparing for these attacks. Comparing different sources may facilitate the learning process for normal users by persisting the security knowledge gained from different cybersecurity context. Prior studies neither systematically analysed the wide-range of digital sources nor provided any standardisation in analysing the trending topics from recent security texts. Although LDA has been widely adopted in topic generation, its generated topics cannot cover the cybersecurity concepts completely and considerably overlap. To address this issue, we propose a semi-automated classification method to generate comprehensive security categories instead of LDA-generated topics. We further compare the identified 16 security categories across different sources based on their popularity and impact. We have revealed several surprising findings. (1) The impact reflected from cyber-security texts strongly correlates with the monetary loss caused by cybercrimes. (2) For most categories, security blogs share the largest popularity and largest absolute/relative impact over time. (3) Websites deliver security information without caring about timeliness much, where one third of the articles do not specify the date and the rest have a time lag in posting emerging security issues.
机构、总结、中文摘要均由AI分析而来，可能存在错误，请以论文正文为准。
