The Buzzwords of Information Security

那些信息安全的流行词

2015-07-04 · Strange Tales from the Cybersecurity World · Written in Chinese ·

BYOD, APT, kill chain, threat intelligence, spear phishing, TTPs: every year the security world comes up with new buzzwords. To answer his eight-year-old daughter's question, “What is the RSA Conference about?”, Wade Baker turned the conference's 2012–2015 talk titles into word clouds. Set alongside booth slogans and the official word cloud, they show threat intelligence and the Internet of Things heating up while APT and “as a service” fade.

像IT界一样，信息安全界每年都会冒出一些热词（Buzzword），比如，BYOD——Bring Your Own Device，高级持续性威胁APT——Advanced Persistent Threat，杀伤链Kill Chain（有位朋友说翻译成杀伤链才能保留原文中的杀气，并和Attack Chain区别开），威胁情报Threat Intelligence，鱼叉式钓鱼攻击Spear Phishing，攻击战术流程TTPs——Tactics,Techniques and Procedures等等。打算以后找几个有意思的热词简单写写。

Wade Baker是Verizon企业方案部的信息安全战略与研究总监，每年都参加RSA安全大会。为了回答8岁女儿的提问“RSA会议是关于什么的？”，Wade Baker想了一个办法——把RSA会议网站上所有演讲的标题取下来做成词云Wordcloud(0)，女儿一看就明白了。2012年到2015年这4年的词云看起来是这样的。