Cybersecurity and cyber defence: national level strategic approach
Cybersecurity and cyber defence: national level strategic approach
复制标题
DOI：
10.1080/00051144.2017.1407022
复制
发表时间：
2017-01-01
期刊：
影响因子：
1.9
通讯作者：
Guberina, Boris
中科院分区：
文献类型：
--
作者：
Galinec, Darko;Moznik, Darko;Guberina, Boris
网络安全包括与信息和操作技术（OT）安全密切相关的广泛实践、工具和概念。网络安全的独特之处在于它包含了对信息技术攻击对手的攻击性使用。使用术语“网络安全”作为关键挑战和信息安全或IT安全的同义词，混淆了客户和安全从业者，并模糊了这些学科之间的关键差异。对安全负责人的建议是，他们应该使用术语“网络安全”来指定仅与涉及或依赖信息技术和/或OT环境和系统的防御行动相关的安全实践。在本文中，我们旨在解释“网络安全”，并描述网络安全、信息安全、OT安全、IT安全以及其他相关学科和实践（例如网络防御）之间的关系，并将其实施与国家层面上计划或现有的网络安全战略相一致。在案例研究中，给出了克罗地亚共和国国家网络安全战略和行动计划的例子，并加以阐述。该战略的主要目标是认识到执行过程中的组织问题，并扩大对这一问题在社会中的重要性的理解。
Cybersecurity encompasses a broad range of practices, tools and concepts related closely to those of information and operational technology (OT) security. Cybersecurity is distinctive in its inclusion of the offensive use of information technology to attack adversaries. Use of the term "cybersecurity" as a key challenge and a synonym for information security or IT security confuses customers and security practitioners, and obscures critical differences between these disciplines. Recommendation for security leaders is that they should use the term "cybersecurity" to designate only security practices related to the defensive actions involving or relying upon information technology and/or OT environments and systems. Within this paper, we are aiming to explain "cybersecurity" and describe the relationships among cybersecurity, information security, OT security, IT security, and other related disciplines and practices, e. g. cyber defence, related to their implementation aligned with the planned or existing cybersecurity strategy at the national level. In the case study given example of The National Cybersecurity Strategy of the Republic of Croatia and Action plan is presented and elaborated. The Strategy's primary objective is to recognize organizational problems in its implementation and broaden the understanding of the importance of this issue in the society.