市场失灵角度的信息安全外部性分析与研究  

Analysis and Research on the Information Security Externalities Through the Market Ineffectiveness

作　　者：齐晓霞[1,2] 王琦进[1] 蒋凡[2] 

机构地区：[1]安徽新华学院信息工程学院,合肥230088 [2]中国科学技术大学计算机科学与技术学院,合肥230026

出　　处：《湖北第二师范学院学报》2014年第8期62-64,共3页Journal of Hubei University of Education

基　　金：中央高校基本科研业务专项资金资助(WK0110000007);安徽省高等学校省级优秀青年人才基金资助项目(2012SQRL228);安徽高校省级自然科学研究项目(KJ2013B099)

摘　　要：频发的网络信息安全事件使得解决网络信息安全投资问题迫在眉睫。在企业投资成本和利润不同的情况下,应用博弈理论计算了网络信息安全的投资过程,提出了相互依赖的信息安全投资风险模型。用风险评估方法对企业信息安全风险进行量化,提出安全风险量化模型,通过适当投资提高系统的安全稳健性。该方法为信息安全的风险管理提供了新思路,为企业确定自身的投资策略提供了依据。It is imminent to solve the network information security investment problem caused by frequent network infor- mation security events. An investment game theoretic model was presented to study the externality in firms＇ network se- curity investment with different investment costs and profits, putting forward the information security investment risk model based on the interdependence. A risk quantization assessment model was presented to study the quantization anal- ysis of information system security risk and to improve the robustness of system security by appropriate investment. The results show that the model gives a new way on the information security risk management, and provides a basis for enter- prises to determine their investment strategy.

关 键 词：信息安全 市场失灵 外部性 风险价值 

分 类 号：TP309[自动化与计算机技术—计算机系统结构]