3.1. Object Space of Cyberspace Mapping
Cyberspace map expresses the elements in cyberspace, and cyberspace is the object space of cyberspace mapping. People's understanding of cyberspace affects the abstraction and generalization of the elements in cyberspace, that is, the mapping objects of cyberspace, and further affects the formation of the conceptual model of cyberspace map. Therefore, it is necessary to unify the understanding of cyberspace before constructing the conceptual model.
The understanding of cyberspace has generally gone through a process from narrow sense to broad sense [
21]: in terms of width, cyberspace in the narrow sense[
22] mainly refers to the virtual information space formed by relying on the Internet, while cyberspace in the broad sense covers all kinds of internet, including the Internet, radio and television networks, telecommunications networks, the Internet of things, various computer systems, and various embedded processors and controllers in various industrial systems; in terms of level, cyberspace in the narrow sense mainly refers to virtual cyberspace, that is, cyberspace within information space, while cyberspace in the broad sense involves real geographical space, virtual information space and social space, that is, multi-space[
23,
24]. All kinds of data and information contained in cyberspace belong to information space. As the material basis, the communication infrastructure exists in geographical space. As the participants, the attributes and relationships of people and various organizations belong to social space, and the actual people exist in geographical space. Therefore, the mapping object space of cyberspace map has expanded from the traditional binary space of geography and social to a hybrid of geographical, social, and information spaces, namely ternary space [
25], and the form of elements has expanded to the coexistence of entity and virtual.
The cyberspace described in this paper refers to the generalized cyberspace both in level and width. According to the literature[
26], cyberspace is composed of four basic elements: facilities (carrier, i.e. infrastructure), data (object, load), persona (subject, i.e. user), and operation (activity behavior). Its connotations are as follows:
Persona is the subject in cyberspace, which may be an individual or an organization or a group. It has subjective initiative and carries out purposeful activities in cyberspace through the operation of physical devices. The relationship between personae and facilities, data and operations are subject-object relationship.
Operation is a specific activity carried out by a persona in cyberspace and its impact on politics, economy, culture, society, military and other aspects. The activities in cyberspace are the expansion of human activities from social and geographical space to information space. From the macro scale, these activities include the operation and maintenance of cyberspace, service provision, supervision, attack defense, etc. from the micro scale, they are the specific operation processes of data creation, storage, replication, deletion, extraction, replacement, etc. Operation is the means and method of a persona's activities in cyberspace, which is related to the purpose and needs of the persona. Realize the impact of the persona 's activities in cyberspace on multiple spaces through operation: for physical facilities in real physical space, such as the destruction of facilities by virus; For virtual elements in the information space, for example, hackers' attacks on government websites made them unable to operate normally, so as to reduce the credibility of the government; For humanities and social space, for example, the spread of false information and, the creation of public opinion influence, etc. Through operation, roles form activities in various spaces, and the ultimate goal is to have an impact on things in real space.
Data exists in virtual space and can be understood as assets in cyberspace. It cannot exist independently, relying on the existence of devices in the real geographical space, through device storage, transmission, etc. Data is dependent on facilities.
Facilities exist in the real geographical space, which belongs to the physical part of cyberspace and is the material basis of cyberspace. The most important function is the carrier of data and also carries the activities of roles. Facilities are the direct objects and tools for the role to operate, and the role can only carry out activities in cyberspace through the operation of facilities.
In addition, the idea of " cyberspace can be viewed as three layers made up of five components " proposed by the U.S. military[
27] has been widely recognized, and the Defence Research and Development Canada’s report has adjusted but continued the framework [
28]. Literature [
29] also uses a hierarchical approach to divide cyberspace into geographical layer, physical network layer, logical network layer, cyber-persona layer and entity persona layer. Literature 19 also believes that cyberspace is a hierarchical space involving people, machines and objects, and covers real physical space, virtual information space and knowledge space. It can be seen that the hierarchical cognition of cyberspace has become a mainstream and habitual way, but they have ignored the importance of "data" and "operation", and failed to fully cover the elements of cyberspace.
By analogizing the elements of cyberspace and traffic, the literature [
30] solves the problem of difficulty in understanding the composition caused by the ethereal cyberspace. This paper continues the above research, combines hierarchical cognition and improves element types, abstracts cyberspace objects into geographical elements, physical elements, logical elements, cyber-persona elements, entity persona elements, data elements and activity elements, and explains the space of the elements and the relationship between them, As shown in
Figure 1.
3.2. Conceptual Model of Cyberspace Map
The object in cyberspace is the content expressed by the cyberspace map. Based on the above analysis of the composition of cyberspace, this paper proposes a conceptual model of cyberspace map, which divides the map content elements into seven categories: geographical elements, physical elements, logical elements, data elements, activity elements, cyber-persona elements and entity persona elements. Geographical elements, physical elements and logical elements are the basic elements to describe the cyberspace environment, and they are the basic elements of the cyberspace map; cyber-persona elements and entity persona elements can be collectively referred to as persona elements; Activity elements and data elements are separated into one category, as shown in
Figure 2.
Compared with the traditional map, cyberspace maps are more complex in describing spaces and requirements, and have more flexible and diverse forms. Next, the connotation of the model is described from the dimensions of element-space association, element mapping and map expression.
3.2.1. Element-space association dimension
As a multi-dimensional space woven by geography, society and information, the cyberspace elements have different degrees of correlation with different spaces. The movement and change of anything and phenomenon, including human activities, occur in a certain space and time[
31]. Therefore, in a broad sense, all elements can be considered to be related to geographical space. Even virtual data elements, the physical devices stored in them also have geographical coordinates. But on the one hand, we pay different attention to different elements, such as virtual data elements, which mainly focus on the characteristics embodied in the information space, so it is more relevant to the information space. On the other hand, the ternary space is not completely separated from each other, but constantly integrated, so we can not think that a certain category of elements belongs to a certain space, but only that such elements mainly reflect the characteristics of a certain space, that is, they are strongly related to a certain space and weakly related to other spaces. Therefore, this paper believes that geographical elements and physical elements are strongly related with geographical space, logical elements, data elements, activity elements and virtual role elements are strongly related with information space, and entity persona elements are strongly related with humanities and social space. They are also related with other spaces, but the degree of relation is weak. As shown by the arrow in
Figure 2, red represents the degree of relation with humanities and social space, yellow represents the degree of relation with real geographical space, and blue represents the degree of relation with virtual information space.
3.2.2. Element mapping dimension
The concept of location exists in both the real and virtual environment, which refers to the space occupied by a specific target. There are real geographical location and virtual network location in the cyberspace map, and the network location includes IP address, URL, user login or information release location and so on [
32]. In terms of basic elements, we collect data through cyberspace surveying and mapping, and obtain the attribute of elements including geographical location, network location, topology connectivity through network resource detection, topology analysis, entity positioning and other technologies, so as to deeply perceive and associate multiple types of locations, so as to establish a mapping relationship between the virtual world location and real world location. Realize the mutual mapping between geographical elements and physical elements through geographical location. Realize the mutual mapping between physical elements and logical elements through network location.
Other elements need to use social network, social engineering and other methods to obtain the ownership information of persona and other elements, and obtain the network activity information through network detection and other technologies. The mapping between persona elements and basic elements is established through the man-machine use relationship. The mapping between persona elements and data elements is established through the ownership relationship. The mapping between persona elements and activity elements is established through triggered / caused. Virtual-persona and entity persona are mapped to each other through the ownership relationship. As shown in
Figure 2.
3.2.3. Map representation dimension
According to the location-based pan-information map [
32], the elements of cyberspace map are aggregated in generalized "location", including geographical location aggregation, network location aggregation and semantic location aggregation. Corresponding to different aggregate locations, the basic forms of cyberspace map are geographical map, topological map and thematic map[
33] (as shown in
Figure 2) .
Geographical map is similar to traditional map, which describes cyberspace from the outside according to the material basis of cyberspace construction in geographical space. By superimposing the elements on the basic geographical information, the geographical distribution of various elements and their attribute information is displayed. It mainly includes geographical map of various elements such as geographical, physical, activity, data and entity persona elements, etc.
According to the connectivity of network nodes, the topological map describes the cyberspace from the inside, and shows the logical connectivity and node attributes by superimposing elements on the basic connectivity structure of the network. It mainly includes the topological map of various elements such as logical, activity, data and cyber-persona elements, etc. According to the high dynamic characteristics of cyberspace, topological map depicts the changing connectivity and data flow. For example, usually, the external physical connection between devices does not change, but due to the change of virtual ports, the connectivity between devices changes. This phenomenon cannot be expressed in geographical maps, but can be shown in topological maps.
Thematic maps also describe cyberspace internally, mainly including thematic maps of data and entity persona elements, etc. It pays attention to the expression of the internal semantic features of the elements, and the forms are more flexible and diverse. It selects the semantics to construct the coordinate system according to the needs, and constructs the spatial relationship in the thinking by means of virtualization. Spatial relationship is the key feature that distinguishes maps from information graphics. Cyberspace thematic map, according to the needs of the map, extracts the semantic information of the elements, and converts it into spatial relationships, including adjacency, association, inclusion, connectivity and so on[
34].
Various elements can be mapped separately as required, or multiple elements can be expressed in one map at the same time. The basic topological structure map and physical element geographical map composed of nodes and links in logical elements describe the objective environment of cyberspace and are the basic map of cyberspace. Other elements need to be superimposed on the basic map to form the geographical map or topological map of one category or multiple categories of elements. The three basic forms of cyberspace maps achieve transformation by extracting topology information and semantic information. They gradually depict cyberspace from external description, internal description to internal characteristics. The logical composition of cyberspace map is shown in
Figure 3 [
33,
35,
36,
37].
In order to describe cyberspace as comprehensively as possible, the above basic form maps can be selected as needed and combined into multilayer maps. The following two examples are persona elements multilayer map and physical -logical elements multilayer map (
Figure 2 multilayer map example 1 and example 2). The persona elements multilayer map is divided into three levels. The first layer is the entity persona geographical layer, which draws the entity persona according to the geographical location; The second layer is the entity-cyber persona mapping layer, which is located above the entity persona geographical layer and is composed of the mapping relationship network between entity persona and cyber-persona. The third layer is the cyber-persona relationship layer, which is located at the top level and depicts the semantic relationship between cyber-persona. Similarly, the physical-logical elements multilayer map consists of three layers from bottom to top, namely, the physical elements geographic layer, the physical-logical elements mapping layer, and the logical elements topology layer. Multilayer map spans different types of space and depicts cyberspace as comprehensively as possible.
These two groups of virtual and real relations reflect the extension of real geographical space and humanities and social space in cyberspace, and the blend of ternary space. Entity persona is the existence of people or organizations as physical entities in the real geographical world. Cyber-persona is the "spokesperson" of entity persona in the virtual part of cyberspace. Similarly, physical elements exist in the real geographical world as physical entities, carrying virtual elements of cyberspace. Logical elements can be seen as the "spokesperson" of physical elements in the virtual part of cyberspace. Physical elements and logical elements are more important because they carry the basic environment of cyberspace. Like books as spiritual products, the text content is attached to the paper, and the virtual spiritual space and the real physical space are unified in books[
38]. Physical elements are the "unity" of cyberspace virtual and reality, the link between the two worlds, and the most important. This is also the internal reason why people naturally start from drawing physical devices when studying cyberspace maps. At the same time, the achievements in this field are also the most prominent.
Secondly, when using cyberspace maps, as mentioned above, a single map is difficult to meet the requirements. Three basic forms of maps and combined multilayer maps can be used together in a multi-view format as needed, that is, two or more basic form maps or multi-layer maps can be used simultaneously to express the same object or theme. A single basic form map only describes a certain space, while a multi-layer map extends to a multi-space, and a multi-view describes a multi-space from multiple perspectives (as shown in
Figure 4).
Finally, in terms of representation design, the strength of elements and different spatial relation degree affects the expression of maps. For example, literature 15 classifies the representation methods of cyberspace map according to the spatial correlation degree Combined with the existing cyberspace map expression methods [
30], this paper believes that it has strong relation with geographical space, it is more suitable to use traditional map methods, supplemented by other methods; It has strong relation with information space and social space, and it is more suitable to use topological and knowledge map methods, supplemented by other methods. From the element level, the model can provide the overall basis for the expression design according to the relation strength with ternary space. It can be seen that the model takes into account the attribute characteristics of the elements in ternary space and has the advantage of being conducive to the subsequent expression design.
3.3. Elements Composition and Symbolization
The specific composition of the seven elements in the conceptual model of cyberspace map is shown in
Figure 5.
They are the basic elements of cyberspace map, which describes the material and structural relationship of the basis of cyberspace.
Geographical elements contains basic geospatial information, which can be designed and produced directly by applying the basic theories and methods of traditional cartography. In addition, it also includes the peripheral environment related to the network, that is, the relevant elements supporting the material base of cyberspace, which can be regarded as thematic maps surrounding the physical environment of the network in geographical space, including natural environmental elements, such as geological soil, temperature and humidity, electromagnetic environment, etc., which can affect the layout and operation of infrastructure. When symbolized, they are usually abstracted as area symbols. Soil symbols are usually represented by land type boundaries, explanatory symbols, background colors, explanatory notes, or mutual coordination. Electromagnetic environment, temperature and humidity are usually represented by isolines [
39]. Artificial environmental elements include power stations, power supply dispatching centers and other artificial facilities closely related to network operation, which are usually represented by dot symbols as independent features.
Physical elements include various network equipment, transmission lines and other objective substances existing in the real world. Among them, the server terminal, client terminal, Internet of Things (IOT) device, switching device, etc. are represented by dot symbols, which generally form a patterned symbol from the specific image, and use the top or side view graphics, as illustrated by the actual appearance and symbol [
40] of the server in
Figure 6a, and
Figure 6b is an example of common client terminal and switching device [
41]. Physical communication links can be divided into coaxial cable, twisted pair cable, optical fiber, radio wave, etc. According to transmission medium, which are represented by linear symbols, and media types are distinguished by color or shape. In addition, it usually displays the bandwidth and link load, and generally uses size and color for hierarchical representation, as shown in
Figure 6c[
42].
Logical elements are the abstractions of physical elements, which are nodes and links. The logical connection between elements and the functional attributes of loaded systems, services and programs are obtained. It is the description of basic states such as network links and performance. Compared with physical elements, logical elements symbol design should be more concise.
Nodes are abstracted as dot symbols, and shape variables are usually used to distinguish different types of nodes. As shown in
Figure 7a, a rectangle is used to represent the client and a circle is used to represent the server [
43]. Links symbols are the same as transmission lines, but the focus of the expression is the connectivity between nodes. Specific attributes such as media and bandwidth can no longer be distinguished in detail.
The system, service and program represent the status and functions of the network, and are abstracted as dot symbols, in which words are often used, such as representing the specific service content, adding "Web", "email", "DNS" and so on (
Figure 7b[
38]), or symbols and numbers / text notes. When only describing their composition and functions, they are expressed in the form of charts or graphs.
Some codes (such as viruses) can also carry out activities in cyberspace, similar to persona elements. However, their activities lack subjective initiative and are subject to the setting of the subject, so they are not considered as persona elements, because they are malware in nature and are classified into logical elements. They are considered as special elements because they have the ability to copy, delete, tamper with data or device configuration. Malware usually uses dot symbol and is designed as destructive and horrible graphic such as virus, demon or skull in practice. When representing a specific malware, words or specific graphic combinations can be added according to its own characteristics, such as Trojan virus and Ladybug virus (
Figure 7C).
- 2.
Data elements
Data elements describes the distribution of cyberspace data assets. It mainly includes business data (divided into industrial data, telecommunication data, financial data, etc. according to industry), system data (machine data, log data, application data, statistical data, etc.), which "circulate" in cyberspace, form virtual, and are "assets" in cyberspace. When symbolizing, they can be abstracted as dot symbols, and different shapes are used to represent different categories, as shown in
Figure 8, which respectively shows the symbols of safety data, statistical data and financial data. The expression of statistical information of data elements is one of the key contents of symbolization. Usually, fixed-point symbol method is used, combined with histogram, pie chart, etc., to represent the data volume and proportion of various types of data in traffic.
- 3.
Persona elements
Persona elements are the main body of activities in cyberspace and mainly reflect the sociality. Entity persona elements refer to the subjects existing in the real environment, including user, management and construction entity, etc. Entity persona elements are active in cyberspace through cyber-persona elements. cyber-persona elements refer to the main body existing in the virtual environment, and are also elements of virtual form, including websites, accounts, etc.
Persona elements are abstracted as point shaped symbols and visualized graphics can be used, but in most cases, they can be abstracted as geometric shapes. Websites usually use their own logo or name as text symbols. When expressing the account number of a specific application, the symbols can be designed in combination with the icon of the application. As shown in
Figure 9, the personal accounts of individual and group organizations, hackers and popular customers, apple payment and microblog [
36] are respectively represented.
The relationship between personae and other elements is the key to expression, and the semantic relationship is represented by linear symbols. The relationship includes the subordinate relationship and cooperation relationship, as well as the ownership relationship with other elements such as cyber-persona element. The relationship is diverse and depends on needs. Usually, size and color variables are used to indicate the strength of the relationship and distinguish the relationship types.
- 4.
Activity elements
Activity elements describe the phenomenon, process and influence of cyberspace. It’s specific operation, means and methods of persona in cyberspace, mainly including normal activities and network attack and defense.
Normal activities can be divided into information behavior and technical behavior [
44]: information behavior takes information as the object, such as visiting and browsing web information, downloading and uploading information, creating, storing, changing and transmitting data, etc.; Technical behaviors mainly include network technology development, maintenance and program upgrading. They are represented by dot symbols, as shown in Figure10a, which are data download, development and upgrade.
Network attack and defense include harmful program intrusion, network attack, information destruction, etc. Generally, the moving line method is used to represent the network attack, and the starting point is the attacker and the target. Specific behavior activities in attack and defense can be designed with reference to military symbols, as shown in
Figure 9b and
Figure 10b, which are credential based access and scan detection [
43].
Activities do not have specific physical forms, but they are different from data elements that are also virtual forms. It is the behavior and influence of the role as the main body in the process of transforming and understanding data and equipment. It occurs not only in the virtual information space, but also in the real geographical space. In the real geographical space, disasters affecting the physical security of hardware equipment, electronic interference, countermeasures, electromagnetic radiation, etc. [
45], acts of man-made destruction or normal damage affecting the operation of the network also belong to activities. These activities in the real geographical space are easy to understand and can be represented by the event map in the traditional map. Therefore, the focus of attention in the cyberspace map is the activities in the virtual information space.
The expression object of cyberspace map is the elements of cyberspace. Combining the design principles of map symbols, utilizing basic map symbols and thematic symbols, a series of products of cyberspace maps are ultimately formed.