2020中国金融业信息安全调研报告.pdf

1?|?2?|?2020?03?3?|?&CEO?&?&?4?|?研?AI?研?5?|?务?研?研?撰?务?研?研?6?|?7?|?.?08?.?2.0?11?.?18?.?25?.?27?.?30?35?36?8?|?9?|?.?匹?封?撑练?撰?0-Day?APT?研 Verizon?封?2019?研?盟?DoS?务?务?试?研?72%?研?务 43%?38%?38%?88%?10%?2.0?封?封?研?撰?2019?12?1?2.0?,?2.0务?务?务?封?研?10?|?1?愿?研?去?研?研?研?研?撰?研?研?11?|?2.0?12?|?.?2.0?1.?1.1?研?匹?务?封?2018?务?匹?盟?4.9?526?群?务?80%?2016?11?务?研?研?封?2017?1?匹?务?2018?4?21?封?送?务?务?2016?2?5?8100?2016?6?务?1000?SWIFT?WAF?IDS?告?封?研?去?封?研?封?模?封?(?封201439?)?(2014-2015?)?(?封?2014317?)?封?13?|?2015?15%?2019?75%?;?2015?5%?够?1.2?1.2.1?2.0?2016?11?7?去?封?务?2017?6?1?2.0?去?的?匹?确?撰?够?导?务?2016?526?名?15?257?覆?230?2018?务?2018?务?封?716?封?务?封?撰?撰?封?盟?研?14?|?务?50?1.2.2?2018?封?务?封?2018?50?够?群?1.3?务?2.0?2019?12?1?匹?研?撑练?2.0?撰?研?务封?盟?2.0?模?务?撰务?2.0?务?套?2.0?务?15?|?2.?2.1?撰?告?研?封?研?务?研?努?封?研务?IT?务?告?滚?愿?研?2.2?2.2.1?匹?务?研?模?撰?撰?2017?9?Equifax?1.42 厅?2018?11?10?4?10?14?封?研?2.2.2?研 Verizon?封?2019?研?盟?36%?研?研?2014?1?2000?研?研?2016?526?257?16?|?研?3.?2.0?去?历?2?2.0?告?包?17?|?模?研?够?封?撰?18?|?19?|?.?2.0?去?撰?研?1.?1.1?匹?撑练?撰?模?1.2?研?研?研?务?研?研?研?务?撰?历?研?研?2.?2.1?撰?覆?务?20?|?盟?研?研?2.2?务?研?研?2.3?研?研?研?研?研?研?研?研?研?研?撰?研?研?去?500?30?研?务?研?21?|?3?研?研?研?研?封?3.?3.1?研?撑练?研?研?研?研?研?研?群?研?研撰?研?研?封?研?研?研?研?22?|?研?识?研?研?研?研?研?群?研?研?研?研?研?研?研?群?3.2?研?封?研?研?覆?研?封?研?研?研?WAF?封?WAF?研?务?研?研?封?研?研?3.3?研?试?封?研?封?研?研?研?2018?0.20.5?40?研?80%?研?研?试?UEBA?研?研?试?封?研?研?封?研?封?试?研?23?|?4.?研Gartner?2020?10%?40%?务?2018?11?Cylance?Blackberry?14厅?2018?6?CrowdStrike?2 厅?E?30 厅?4.1?研?研?模?研?务?务?导?模?4.2?研?厅?厅?撰?研?封?务?UBA?研?研务?封?4.3?封?24?|?模?研?导?务?研?务?撰?封?研?封?撰?4.4?撰?务?务?NGFW?EDR?去?TDA?UEBA?务?去?去?务?去?务?模?导?务?模?封?封?盟?25?|?26?|?.?1?2020?研?2020?80-100?研?2020?1.5-2%?务?1600-2000 厅?研?务?2-3%?7-10%?2020?5%?2020?80-100 厅?2?研?撑练?撑练?研?撑练?套?撑练?研?SOC?务?IT?务?SOC?SOC?27?|?28?|?.?1.?务?匹?WAF?IDS?千?务?告?研?研?务?覆?覆?匹?360?匹?匹?研?告匹?匹?撰?导?匹?研?务?研?研?封?模?研?研?导?研?匹?研?IBM?QRadar?Datavisor?撰?务模?模?告撰?盟?模?研?研?匹?29?|?2?务?撰?撰?模?告?务?研?务?务?务?撰?务?研?务?研?研?务?研?研?务?务?撰?研?研?务?务?导?研?告?撰?撰?盟?务?30?|?31?|?.?1.?封?研?研?研?研?的?告?POC?Proof?of?Concept?封?撰?研?研?空,?研?务?研?研?研?netflow?研?NLP?研?务?研?研?研?GB?TB?PB?研?研?撰?研?空?去?AI?AI?32?|?MITRE?ATT&CK?够?,?务?撰?盟?研?研务?撰?研务?撰?务?研?研?务?模?研?LTV?ToB?LTV?够?模?名?POC?撑?够?,?研?导?,?33?|?2.?IBM?QRadar?IBM?QRadar?研?研?封盟?IBM?QRadar?IBM?QRadar?SIEM?务?研?研?Sense?Analytics?空?研?QRadar?Advisor?with?Watson?愿?研?封?IRM?QRadar?SIEM?Log?Management?QFlow?Vulnerability?Manager?Risk?Manager?X-Force?QRadar?盟?IBM?QRadar?务?研?研?模?4?套?研?AI?HanSight?Enterprise?研?HanSight?UBA?HanSight?NTA?盟?HanSight?TIP?撰?SOC?研?盟?撰?研?研?撰?研?34?|?研?UBA?NTA?TIP?盟?撰?的?2-3?IBM?QRadar?LTV?2019?SOC?务?务?研?研?导?务导?35?|?务?封?研?5000?盟?撰?38?|?