自“斯诺登事件”以来,网络安全问题不断升温。本文从法律角度,首先考察网络安全的定义,指出网络安全的核心是信息安全,网络安全的重点是保障信息和信息系统免遭非法访问、使用、干扰、泄露、降级、篡改和破坏。继而,本文分析了欧美以及巴西对于网络安全的法律定位和相应的立法,发现美国侧重于政府与企业的信息共享与合作,欧盟和巴西侧重于个人数据和隐私的保护。最后,本文提出我国应当准确定位我国的网络安全,加快出台网络安全战略和专门立法,注重信息安全和个人数据的保护。 Since the “Snowden Incident”, the issue of cyber security has been on the rise. From a legal point of view, this paper first examines the definition of cybersecurity and points out that the core of cybersecurity is information security. The focus of cybersecurity is to protect information and information systems from being illegally accessed, used, interfered, leaked, degraded, tampered with and destroyed. After that, this article analyzes the legal orientation and corresponding legislation on cybersecurity in Europe, the United States and Brazil. It finds that the United States focuses on the information sharing and cooperation between the government and enterprises. The EU and Brazil focus on the protection of personal data and privacy. Finally, this paper proposes that our country should accurately locate our country’s network security, speed up the introduction of network security strategy and special legislation, and pay attention to the protection of information security and personal data.