基于威胁的信息系统安全技术选择策略研究

Selection Strategy of Information System Security Technologies Based on Threat

利用博弈论研究了基于信息系统安全威胁类型的安全技术选择与资源优化配置问题,同时考虑了具体威胁类型、信息系统安全技术特征、成本与组合效率等因素,指出了组织在信息系统安全管理时所选择的安全技术首先应当能够处理或弱化其所面临的大部分威胁,即以威胁为安全技术选择的基础,并且组织为了实现对有限资源的优化配置,应根据各种威胁导致的期望损失来确定相应的安全技术选择概率。模型将安全技术对不同威胁的检测率与误检率加以区分,较一种安全技术对所有威胁只有一个笼统的检测率和误检率更具实际意义。

The game theory was employed to study the selection of security technologies and the optimization of resource allo-cation at the basis of the threat types to organization information system.The factors like the definite types of threats, the charac-teristics of information system security technologies, the cost and efficiency of them and so on were all considered together.And some conclusions were resulted.First, the organizations should choose security technologies with the ability to deal with or miti-gate most of the threats they would encounter probably during the management of information system security, i.e.to select secur-ity technologies at the basis of threats.Second, in order to optimize the resources allocation, the organizations could determine the corresponding security technology choosing probability according to the expected loss of every kind of threat.Compare to the researches considering that one information system security technology has only one general detection rate and false detection rate, the model has an innovation that one security technology has different detection rates and false detection rates to different threats, which is more practical.