JZUS - Journal of Zhejiang University SCIENCE

Frontiers of Information Technology & Electronic Engineering

Accepted manuscript available online (unedited version)

Active cybersecurity: vision,model, and key technologies

Author(s): Xiaosong ZHANG, Yukun ZHU, Xiong LI, Yongzhao ZHANG, Weina NIU, Fenghua XU, Junpeng HE, Ran YAN, Shiping HUANG
Affiliation(s): School of Computer Science and Engineering, University of Electronic Science and Technology of China, Sichuan 611731, China
Corresponding email(s): johnsonzxs@uestc.edu.cn, maln3bul2@gmail.com, lixiong@uestc.edu.cn, shiping@std.uestc.edu.cn
Key Words: Active cybersecurity; Intelligent threat sensing; In-depth behavior analysis; Comprehensive path profiling; Dynamic countermeasures

Share this article to： More <<< Previous Paper \|Next Paper >>>

Xiaosong ZHANG, Yukun ZHU, Xiong LI, Yongzhao ZHANG, Weina NIU, Fenghua XU, Junpeng HE, Ran YAN, Shiping HUANG. Active cybersecurity: vision,model, and key technologies[J]. Frontiers of Information Technology & Electronic Engineering,in press.https://doi.org/10.1631/FITEE.2500053

@article{title="Active cybersecurity: vision,model, and key technologies",
author="Xiaosong ZHANG, Yukun ZHU, Xiong LI, Yongzhao ZHANG, Weina NIU, Fenghua XU, Junpeng HE, Ran YAN, Shiping HUANG",
journal="Frontiers of Information Technology & Electronic Engineering",
year="in press",
publisher="Zhejiang University Press & Springer",
doi="https://doi.org/10.1631/FITEE.2500053"
}

%0 Journal Article
%T Active cybersecurity: vision,model, and key technologies
%A Xiaosong ZHANG
%A Yukun ZHU
%A Xiong LI
%A Yongzhao ZHANG
%A Weina NIU
%A Fenghua XU
%A Junpeng HE
%A Ran YAN
%A Shiping HUANG
%J Frontiers of Information Technology & Electronic Engineering
%P
%@ 2095-9184
%D in press
%I Zhejiang University Press & Springer
doi="https://doi.org/10.1631/FITEE.2500053"

TY - JOUR
T1 - Active cybersecurity: vision,model, and key technologies
A1 - Xiaosong ZHANG
A1 - Yukun ZHU
A1 - Xiong LI
A1 - Yongzhao ZHANG
A1 - Weina NIU
A1 - Fenghua XU
A1 - Junpeng HE
A1 - Ran YAN
A1 - Shiping HUANG
J0 - Frontiers of Information Technology & Electronic Engineering
SP -
EP -
%@ 2095-9184
Y1 - in press
PB - Zhejiang University Press & Springer
ER -
doi="https://doi.org/10.1631/FITEE.2500053"

Abstract
Chinese Summary
Academic Network
Reviewer Comment

Abstract: Noncooperative computer systems and network confrontation present a core challenge in cyberspace security. Traditional cybersecurity technologies predominantly rely on passive response mechanisms, which exhibit significant limitations when addressing real-world complex and unknown threats. This paper introduces the concept of �active cybersecurity�, aiming to enhance network security not only through technical measures but also by leveraging strategy-level defenses. The core assumption of this concept is that attackers and defenders, in the context of network confrontations, act as rational decision-makers seeking to maximize their respective objectives. Building on this observation, this paper integrates game theory to analyze the interdependent relationships between attackers and defenders, thereby optimizing their strategies. Guided by this foundational idea, we propose an active cybersecurity model involving sensing, analysis, profiling, and countermeasures, termed SAPC, designed to foster an integrated defense capability encompassing threat perception, analysis, tracing, and response. Specifically, the SAPC model consists of four key components: intelligent threat sensing, in-depth behavior analysis, comprehensive path profiling, and dynamic countermeasures. At its core, SAPC incorporates theoretical analyses of adversarial behavior and the optimization of corresponding strategies informed by game theory. By profiling adversaries and modeling confrontation as a �game�, the model establishes a comprehensive framework that provides both theoretical insights into and practical guidance for cybersecurity. The proposed active cybersecurity model marks a transformative shift from passive defense to proactive perception and confrontation. It facilitates the evolution of cybersecurity technologies toward a new paradigm characterized by active prediction, prevention, and strategic guidance.

Darkslateblue:Affiliate; Royal Blue:Author; Turquoise:Article

Reference

Open peer comments: Debate/Discuss/Question/Opinion

<1>

- Go to

Darkslateblue:Affiliate; Royal Blue:Author; Turquoise:Article

Reference