信息安全技术投资的自适应模型

Adaptive model of information security technique investment

根据攻防双方信息不对称现象,结合不完全信息博弈论及信息安全的有关理论,构建一个基于成本-收益的信息安全技术选择的投资博弈模型,得出在两种不同的安全技术配置下(仅使用防火墙或防火墙与入侵检测系统共用)博弈双方的最优策略.通过对用户攻击率、系统响应率和入侵给系统带来的损失及系统的响应成本进行分析比较,探讨了安全技术的价值,从而给出能动态调整安全技术的自适应入侵响应策略.最后通过实例进一步验证了相关结论.

Focusing on the asymmetric information between attacker and defender, by applying the methodologies of game theory with incomplete information and network security, a game model of information security technique selections based on cost-benefit is constructed. The study shows the optimal strategies for the players in the deployment of two kinds of security techniques （only deploy firewall or both deploy firewall and intrusion detection systems（IDSs））. Then, by analyzing and comparing with hacking probability, investigation rate, the damage and response cost, the value of security techniques in an organization＇s IT security architecture is assessed, and thus an adaptive intrusion response strategy is made. Finally, the relative conclusion is illustrated further by an example.