云用户数据安全风险感知乐观偏差及其影响实证  

An Empirical Study: Cloud Users' Optimistic Bias Regarding Data Security Risk Perception and Its Impact

作　　者：王志英[1] 葛世伦[1,2] 苏翔[1] Wang Zhiying Shilun Su Xiang(School of Economy and Management, Jiangsu University of Science and Technology, Zhenjiang 212003 School of Management, Yancheng Institute of Technology, Yancheng 224051)

机构地区：[1]江苏科技大学经济管理学院,镇江212003 [2]盐城工学院管理学院,盐城224051

出　　处：《管理评论》2016年第9期121-133,共13页Management Review

基　　金：国家自然科学基金重点项目(71331003);国家自然科学基金面上项目(71471078;71271104);江苏高校哲学社会科学研究资助项目(2015SJB852);江苏科技大学国家自然科学基金前期预研项目(633041303);江苏科技大学研究生科技创新计划资助项目(YCX14B-01)

摘　　要：云用户的数据安全风险感知对云计算的发展非常重要。借鉴心理学理论中的乐观偏差,基于"前因→乐观偏差→结果"的研究逻辑,从个体云用户视角研究数据安全风险感知乐观偏差及其影响。对201个被试的实证分析表明,云用户对数据安全风险感知总体上不存在乐观偏差,而存在一定程度的负向乐观偏差,机密性的风险感知负向乐观偏差最大,可用性的次之,完整性的最小。机密性和可用性的风险感知乐观偏差受以前经历的显著影响,完整性的风险感知乐观偏差受事件可控性的显著影响。机密性、完整性、可用性的风险感知乐观偏差均显著影响云用户有效的安全管理决策。研究结果为从信息安全心理学层面分析云用户数据安全风险感知的理论和实践提供些许参考。It is very important for the development of cloud computing to analyze cloud users＇ risk perception regarding data security. Based on the optimistic bias of psychology theory and the research logic ＂Antecedents-Optimistic Bias-Outcomes＂, the cloud users＇ opti- mistic bias regarding data security risk perception and its impact explored from the perspective of individual users. An empirical analysis of 201 participants shows that the cloud users have no optimistic bias towards the data security risk perception on the whole, but there is a certain degree of negative optimistic bias, the negative optimistic bias of confidentiality risk perception is the biggest, the negative opti- mistic bias of availability risk perception is the second and the negative optimistic bias of integrity risk perception is the smallest. The optimistic bias of risk perception about confidentiality and availability is significantly affected by prior experience and the optimistic bias of the risk perception about integrity is significantly affected by controllability. The cloud users＇ effective security management decision is significantly affected by the optimistic bias of risk perception regarding confidentiality, integrity and availability. The study provides a theoretical and practical reference for analyzing the cloud users＇ data security risk perception from the aspects of information security psychology.

关 键 词：云计算数据安全 风险感知 乐观偏差 机密性 完整性 可用性 

分 类 号：TP309[自动化与计算机技术—计算机系统结构]