网络组织中从众行为对信息安全投入策略的影响

Analysis of Group Behavior’s Impact on Information Security Investment in Network Organization

摘要:

由于网络组织中企业间的信息安全依赖性,企业信息安全投入中的从众行为将影响网站组织的信息安全。本文将企业的信息安全策略划分为积极防御策略、保守防御策略和消极防御策略,基于从众效应分析网络组织中个体企业如何在对外安全防御能力和对内安全的恢复能力之间进行决策并选择不同的安全策略,。研究发现企业初始的内部安全防御水平、从众效应的强度、内外防御的成本等因素影响企业在三个安全策略中的选择,而从众概率、群体规模以及决策序列中位置等因素的变动影响到从众效应的发挥,对企业实施积极防御策略的意愿产生影响。

Abstract:

Due to information security dependence between enterprises in network organization, group behavior during information security investment affects information security of enterprises. Based on conformity effect, this paper establishes the decision-making model to analyze how enterprises will make a decision between the defense ability and the recovery ability, so as to draw how enterprises will choose different security strategies under different circumstances. The enterprise’s information security strategy is divided into active defensive strategy, conservative defensive strategy and the passive defensive strategy. We find that an enterprise’s initial inside security defensive level, the extent of conformity effect and the inside/outside defensive cost influence its choice among the three strategies mentioned., in addition, the higher the conformity probability, the higher active defense willing of enterprises; the larger the firm’s size, the lower active defense willing of enterprises.