一般系统论意义下的信息安全体系模型

The Model of Information Security System Under the Meaning of General System Theory

提出采用一般系统论的方法研究信息安全的理论体系,将信息安全作为一个系统,其中人、操作和技术各项作为系统主要核心因素;主机、网络、系统边界和支撑性基础设施作为影响系统整体性、关联性,等级结构性、动态平衡性、时序性等系统特征的重要因素。采用数学方法研究这些因素之间的相互关系、相互作用和相互影响;建立数学模型研究系统环境、系统结构和系统行为以及系统运行的规律和特点;探讨实现预警、保护、检测、反应和恢复等安全内容的途径。以信息的保密性、完整性和可用性为目标,控制、管理、改造信息安全系统,达到使它的存在与发展合乎安全需要的目的。

This work studies the theoretical basis of information security by way of general system theory, setting the information security to be as a system, and setting people, technology and operation as the major core factors, also setting the hosts, network, the boundaries of the system and supportive infrastructure as the important factors that affect systematical characteristics such as system integrity, relevance, grade structure, dynamic balance and time se- quence. By using mathematical method, the relationship among these factors and interaction and mutual influence will be studied; Some mathematical models will be formed to research system environment, system structure and sys- tem behavior as well as the system operating rules and characteristics. The way of realizing safety contents such as warning, protection, detection, response and recovery will be groped for. With information privacy, integrity, and availability as the target, the research work will study the methods of controlling, managing, and reforming the in- formation security system, to make it with the need of security.