AI 中文总结
本研究提出一份概念蓝图，用于构建兼具共享态势感知、协调响应与联合准备能力的可互操作网络安全运营中心，以提升国家网络安全能力与跨境协作，符合欧盟相关监管要求。
AI 中文摘要
随着数字技术成为社会结构的一部分，识别和管理网络安全威胁变得至关重要。在欧盟范围内，多项举措正在推进，旨在激励、规范并最终统筹建立能力，提升态势感知、事件响应与准备能力，预期重点关注关键基础设施运营者及受托开展网络安全工作的国家行为体。在此背景下，建立合作与信息交流渠道以实现对大规模事件的跨境协调响应，被列为优先事项。受上述情况驱动，本研究提出一份概念蓝图，用于支持架构设计与建立可互操作的网络安全运营中心（Cyber Security Operations Centres），该中心兼具态势感知、事件响应与准备能力，且能通过三者间的相互作用获益，最终提升国家网络安全能力、跨境协作水平及国家对关键领域的监管能力，符合当前及未来监管要求与日益增长的国家及国际合作需求。
英文摘要
With digital technologies now being part of the fabric of our societies, identifying and managing cybersecurity threats becomes imperative. Within the European Union, several initiatives are underway, aiming to motivate, regulate and eventually orchestrate the establishment of capacity and enhancement of situational awareness, incident response, and preparedness capabilities, with an expected emphasis on operators of essential services and state actors entrusted with cybersecurity. In this context, the institution of cooperation and information exchange channels to allow for coordinated cross-border responses to large-scale incidents is particularly prioritised. Motivated by the above, this work presents a conceptual blueprint in support of architecting and establishing interoperable Cyber Security Operations Centres that combine capacity for situational awareness, incident response, and preparedness, also benefiting from the interplay between them, ultimately enhancing national cybersecurity capabilities, cross-border collaboration, and national supervision of their critical sectors, in line with current and upcoming regulatory requirements and the ever-increasing need for national and international cooperation.
Comments9 pages, 4 figures
Journal ref2022 IEEE International Conference on Big Data (Big Data), Osaka, Japan, pp. 2601-2609, 2022
DOI：10.1109/BigData55660.2022.10020736
