基于社会网络分析法的信息安全标准引用网络实证研究

Empirical Research on Information Security Standard Reference Network Based on Social Network Analysis

信息安全标准是我国信息安全保障体系的不可或缺的一部分,和国家的安全以及经济利益有着密切的关系。随着我国信息安全国家标准数量的增加,信息安全标准之间的引用也越来越频繁,其标准间的引用与被引用关系形成了大规模的引用网络。本文引入社会网络分析法,以全国信息安全标准化技术委员会(TC260)公布的236项现行的国家标准为样本,通过Ucinet6.0对我国信息安全标准之间的引用关系进行梳理,在此基础上构建信息安全标准引用网络。利用社会网络分析法的相关指标对该标准引用网络的特性进行实证分析,针对发现的问题,结合信息安全标准化的相关知识,为我国相关标准的制定工作提供一定的建议。

Information security standards are an indispensable part of China s information security system,and have a close relationship with national security and economic interests.With the increase of the number of national information security standards,the reference between information security standards has become more and more frequent,and the reference and reference relationship between standards has formed a large-scale reference network.This paper introduces the social network analysis method,and takes the 236 current national standards published by the National Information Security Standardization Technical Committee (TC260) as a sample,and combs the reference relationship between China s information security standards through Ucinet6.0,and builds on this basis.Information security standards refer to the network.The relevant indicators of the social network analysis method are used to empirically analyze the characteristics of the standard reference network.Based on the discovered problems,combined with the relevant knowledge of information security standardization,it provides some suggestions for the formulation of relevant standards in China.