存在多利益相关主体复杂情境下企业信息系统安全投资策略演化过程研究

At present, the external environment, in which information systems (IS) of the enterprise locates, is becoming more and more complex. Under the integrated impacts of multi-stakeholders, when developing IS security investment strategies, decision makers may face more complex contexts than ever. From the perspective of complex system, this project takes the IS security investment system, which includes multi-stakeholders, as the research object. Based on impact mechanism, evolutionary modeling, and model analysis as of the main line, the evolution process of IS security investment strategy is deeply studied. Firstly, this project systematically explores the impact mechanism of stakeholders on IS security investment strategy of the enterprise through game modes, contract design, and incentive mechanism. Then, a coevolution model of system members’ behavior and the system's topological configuration is conducted for IS security investment system. Finally, from the levels of static topological structure and dynamic topological structure, the project studies the analytical process of the behavior- configuration coevolution model, then determines the optimal strategy distribution characteristics of system members, and then reveals the internal evolution rules of IS security investment strategies. The research achievements of the project will expand the theoretical research space of IS security risk management to some extent and provide the research of related response decision with fundamental works.

当前企业信息系统（IS）所处的外部环境越来越复杂，在多方利益相关主体的综合作用下，决策者在制定IS安全投资策略过程中将会面临不同以往的复杂情境。本项目从复杂系统的视角出发，将包括多方利益相关主体在内的IS安全投资系统作为研究对象，以影响机理—演化建模—模型解析为主线，深入研究企业IS安全投资策略的演化过程。首先，分别从博弈方式、契约设计以及激励机制等层面，系统地探究各利益相关主体对企业IS安全投资策略的影响机理；以此为基础，构建IS安全投资系统中系统成员行为与系统拓扑结构的共演化模型；最后，分别从静态拓扑结构和动态拓扑结构两个层面研究IS安全投资系统中行为-结构共演化模型的解析过程，确定系统成员最优策略分布特征，从而揭示企业IS安全投资策略的内在演化规律。本课题的预期研究成果将在一定程度上拓展信息系统安全风险管理的理论研究空间，并为后续应对决策研究提供基础性工作。