## 4 Results
### Stage Topic Recognition
#### 4.1.1 Scientific Topic Recognition  
1. Stage 1 (2005-2006). During this stage, researchers concentrated on cyber threats and carried out systematic research. Their research covered various aspects, including the construction of basic security architecture (\"Key Elements\", \"Identity\"), protection of communication applications (\"Blocking Servlet Communication\", \"Authorized Passage of Servlets\", \"Listing Information\"), threat detection (\"Detection of Cyberattack\", \"Analysis of Cyberattacks\", \"Network Traffic Analysis\"), and active defense (\"Enhancing Capacities to Defend\"), with the aim of building a comprehensive cybersecurity defense system. 2. Stage 2 (2007-2008). With the emergence of trends in large-scale network services and increasing attack complexity, researchers in this stage focused their research on three key directions: identity and access control (\"Password Rules\", \"Identity Verification and Firewall Policies\", \"Authentication\"), threat detection and response (\"Detection Techniques\", \"Policies or Strategies Against DoS\", \"Cyberattack\"), and systematic defense strategies (\"Solutions and Services\", \"Data Acquisition and Replication Strategies\"). 3. Stage 3 (2009-2010). Stage 3 continued the research of the previous stage and further advanced in depth. The access control system (\"Roles and Access Control\"), threat confrontation technologies (\"Detection of Cyberattacks\", \"Access Control List\", \"Cybersecurity Threats\", \"Analysis of Attack Graphs\"), and defense strategies (\"Policy-Based Network Traffic Analysis\") remained the core of the research. It is worth noting \begin{table}
\begin{tabular}{c c} \hline \hline
**Stages** & **Topic Words** \\ \hline Stage 7 & 7\_1 (Distributed Cybersecurity Resource Management); 7\_2 (Remote Control and Dynamic Network Topology Security); 7\_3 (Real Time Threat Detection); 7\_4 (Vehicle Networking and Communication Identity Authentication); 7\_5 (Multimedia Threat Detection); 7\_6 (Terminal Device Storage Security); 7\_7 (Security Management for IoT Devices); \\ Stage 8 & 8\_1 (Malicious Software Detection Technology Based on Multidimensional Feature and Behavior Analysis); 8\_2 (Terminal Threat Response); 8\_3 (Embedded System Protection); 8\_4 (Node Collaborative Defense); 8\_5 (Communication Security and Service Authentication); \\ Stage 9 & 9\_1 (Security Detection and Defense of Terminal Devices); 9\_2 (Network Attack Monitoring); 9\_3 (Cloud Storage Security); 9\_4 (Hardware Security Module for Network); 9\_5 (Network Node Vulnerability Management); \\ Stage 10 & 10\_1 (Abnormal Behavior Detection and Log Analysis); 10\_2 (Malware Detection and Defense); 10\_3 (Secure Transmission of Data Streams); 10\_4 (Automated Attack and Defense of Attack Surface); 10\_5 (Hardware Blocks Reinforcement); \\ \hline \hline \end{tabular}
\end{table} 
Table 3: _Cont._that the defense strategies in this stage focused more on the construction of rules (\"Establishing Robust Rules\") and methods (\"Security Approach\"), reflecting the deepening trend from theory to practical application. * Stage 4 (2011-2012). At this stage, scholars continued to follow the existing research directions, focusing on core issues such as identity authentication (\"Cryptographic Applications\", \"Authentication\"), threat detection and response (\"Cyberattack\", \"Detection of Network Traffic\", \"Policy Measures Against Botnet\", \"Intrusion Detection Systems\"), and defense frameworks (\"Vulnerability Management\", \"Strategies to Defend\", \"The Role of Rules\"). * Stage 5 (2013-2014). In this stage, with the outbreak of the Prism Gate incident, the academic community's attention to privacy protection (\"Privacy Protection\") and data security (\"Cryptographic Measures Against DDoS\", \"The Role and Importance of SSL\") significantly increased. Meanwhile, the continuous emergence of new threats also forced a deep reconstruction and innovation among threat confrontation technologies and defense systems.