以“涉案信息规模”评估信息安全侵害程度的信效度检验

Testing the Reliability and Validity of Evaluating the Degree of Information Security Infringement based on the Scale of Involved Information

面对数据时代信息的非标准化、非类型化、非结构化,信息安全侵害评估标准已深陷可信性、有效性、操作性的三重困境。为真正处置好技术发展和规范发展的协同关系,需重新检视既有信息安全侵害评估标准的核心:涉案信息规模。结合对“数量—情节”互动关系的再理解,“涉案信息规模越大,社会危害性越大”的线性评估逻辑已无法匹配现代社会中信息利用的场景性、动态性变化,还可能促生长期倚重于单一情节要素予以定量判断的司法惯性。据此,应充分吸取“信息规模”评估标准中可供继承和改良的提示性、易用性品格,以“数字社会”为背景,积极探索“数量情节”同“非数量情节”组合成为新型定量标准的可能。

Facing the non-standardization,non-typification,and non-structuring of information in the data era,the assessment standards serving criminal trials of information security infringement have fallen into the triple dilemma of credibility,effectiveness,and operability.To fully understand the synergistic relationship between technological development and normative development,it is necessary to re-examine the core of existing information security infringement assessment standards:the scale of information involved.Based on revisiting of the interactive relationship between quantity and plot,it should be considered that the linear evaluation logic of"the larger the scale of the involved information,the greater the social harm"can no longer match the situational and dynamic changes in information utilization in modern society,and may also promote the judicial inertia of relying on a single plot element for quantitative judgment for a long time.It is also necessary to fully absorb the suggestive and user-friendly qualities that can be inherited and improved from the evaluation criteria of"information scale",and actively explore the possibility of combining"quantitative standard"with"non-quantitative standard"as a new quantitative standard in the context of"digital society".