摘要
[目的/意义]信息安全问题是关系到企业保持市场竞争优势、持续稳健发展的重要问题,如何有效平衡安全性和经济性目标、最大化信息安全效益已成研究热点.[方法/过程]文章基于博弈理论构建了竞争企业的信息安全决策模型,重点分析了系统内在脆弱性水平、安全系统相似性、收益转移、外部性等因素对安全决策的影响,并结合数值模拟的方法验证主要结论.[结果/结论]研究表明:竞争企业选择不同信息安全策略时,脆弱性水平是影响决策的主要因素;竞争企业都选择自主防御时,脆弱性水平和系统相似性是影响决策的主要因素;竞争企业均选择外包策略时,系统相似性和外部性是影响决策的主要因素.
[Purpose/significance]The information security is an important issue related to maintain market competitive advantage and sustain steady development for enterprises.It has become a research focus to effectively balance safety and economic goals and maximize information security benefits.[Method/process]Based on the game theory,this paper constructs the infbrmation security model of competitive enterprises,and analyzes how the system internal vulnerability level,security system similarity,income transfer and externality impact on security decision-making.The main conclusions are verified by a numerical simulation method.[Result/conclusion]The research shows that when enterprises choose different information security strategies,the vulnerability level is the main factor affecting decision-making.When enterprises choose independent defense strategies,the vulnerability level and system similarity are the main factors affecting decision-making.When enterprises choose outsourcing strategy,the system similarity and externality are the main factors affecting decision-making.
出处
《情报理论与实践》
CSSCI
北大核心
2019年第12期94-100,59,共8页
Information Studies:Theory & Application
基金
国家自然科学基金项目“考虑风险依赖和竞争外部性的信息安全外包决策机制和策略优化研究”(项目编号:71801125)
中国博士后科学基金项目“信息安全技术自主管理和外包管理的策略选择及优化研究”(项目编号:2018M630544)的成果
关键词
竞争企业
信息安全
自主防御
外包
competitive enterprise
information security
independent defense
outsourcing
