國立高雄大學圖資館 |

語系: 繁體中文

說明(常見問題)

圖資館首頁

登入

回首頁

切換: 標籤 | MARC模式 | ISBD

資訊中心機率型資訊安全投資之分析 = Probability-based...

國立高雄大學資訊管理學系碩士班

資訊中心機率型資訊安全投資之分析 = Probability-based Information Security Investment Analysis on Information Centers

紀錄類型:	書目-語言資料,印刷品 : 單行本
並列題名:	Probability-based Information Security Investment Analysis on Information Centers
作者:	陳軍達,
其他團體作者:	國立高雄大學
出版地:	[高雄市]
出版者:	撰者;
出版年:	2009[民98]
面頁冊數:	60面圖、表 : 30公分;
標題:	不安全性機率
標題:	Economy of Information Security
電子資源:	http://handle.ncl.edu.tw/11296/ndltd/07023648118377381394
附註:	參考書目：面
附註:	指導教授：王學亮
摘要註:	由於資訊威脅逐年增加，造成各大企業與組織日趨嚴重資源損失及個人隱私之嚴重侵犯，因此如何提高資訊之安全性是一個倍受關注的研究課題。本研究提出一個簡單、有效的資訊安全投資模型，協助一般資訊中心計算其最佳之資訊安全投資策略，以提升其整體之資訊安全性。針對一個資訊中心，本研究首先提出一個簡單的模型來表達其結構。此模型基本上使用兩個概念元件–資源(resource)及過濾器(filter)來表達整個資訊中心的所有實體，以及使用4個基本式樣(pattern)來表達資訊中心各元件之間的各種可能之連接性。接著我們提出一個機率式的計算模型來計算各個概念元件之被成功入侵(或稱不安全性)之累進機率。最後基於最小投資最大效益回收的原則，我們提出一個演算法以計算各過濾器(即防禦實體)之最佳投資以達到資訊安全之最佳提升。實驗結果顯示，對單層之資訊中心架構，我們的數值計算結果與Gordon & Loeb[11]之理論分析結果一致。同時，我們對無法用理論分析之一般常見的雙層資訊中心架構進行分析比較並提出其差異性。若能給定適當之入侵機率函數，本研究所提之計算模型可做為一個簡單有效率之資訊中心資訊安全最佳投資計算工具之一。 In recent years, the growing threat to information security has caused tremendous amount of loses to organization and serious breaches to personal privacy. How to improve the information security has become an important research topic lately. In this work, we propose a simple but effective information security investment model to assist information center to calculate the optimal information security investment for the proposition of enhancing their information security.For a given information center, we first propose a simple model to represent the structure of the information center. Basically the model proposes using two conceptual components: resource and filter, to represent all the information center entities, and using four basic patterns to represent the possible connectivities among the conceptual components. Then we propose a probability-based calculation model to calculate cumulative probabilities of insecurity of insecurity of each resource when an attack occurs. Finally, we propose an algorithm to calculate the optimal investments on the filters to enhance overall information security, based on max expected net benefit of the investment.To examine the feasibility of the proposed model, we perform numerical experiment on one-tier and two-tier information center structures. Numerical simulations show that the calculated results coincide with analytical results[11] for simple one-tier structure. In addition, numerical simulations on two common two-tier information center structures, which can not be analyzed theoretically, we presented. When combined with property-assumed security breach function on filter, the proposed model can be a simple but efficient tool to calculate the optimal security investment for information centers.

資訊中心機率型資訊安全投資之分析 = Probability-based Information Security Investment Analysis on Information Centers
陳, 軍達

資訊中心機率型資訊安全投資之分析 = Probability-based Information Security Investment Analysis on Information Centers / 陳軍達撰 - [高雄市] : 撰者, 2009[民98]. - 60面 ; 圖、表 ; 30公分.
參考書目：面指導教授：王學亮.
不安全性機率Economy of Information Security

資訊中心機率型資訊安全投資之分析 = Probability-based Information Security Investment Analysis on Information Centers
LDR:04427nam a2200277 4500 001 220400
005 20170214100000.0
009 220400
010 0 $b 平裝
010 0 $b 精裝
100 $a 20170214y2009 k y0chiy09 ea
101 1 $a chi $d chi $d eng
102 $a tw
105 $a ak am 000yy
200 1 $a 資訊中心機率型資訊安全投資之分析 $d Probability-based Information Security Investment Analysis on Information Centers $z eng $f 陳軍達撰
210 $a [高雄市] $c 撰者 $d 2009[民98]
215 0 $a 60面 $c 圖、表 $d 30公分
300 $a 參考書目：面
300 $a 指導教授：王學亮
328 $a 碩士論文--國立高雄大學資訊管理學系碩士班
330 $a 由於資訊威脅逐年增加，造成各大企業與組織日趨嚴重資源損失及個人隱私之嚴重侵犯，因此如何提高資訊之安全性是一個倍受關注的研究課題。本研究提出一個簡單、有效的資訊安全投資模型，協助一般資訊中心計算其最佳之資訊安全投資策略，以提升其整體之資訊安全性。針對一個資訊中心，本研究首先提出一個簡單的模型來表達其結構。此模型基本上使用兩個概念元件–資源(resource)及過濾器(filter)來表達整個資訊中心的所有實體，以及使用4個基本式樣(pattern)來表達資訊中心各元件之間的各種可能之連接性。接著我們提出一個機率式的計算模型來計算各個概念元件之被成功入侵(或稱不安全性)之累進機率。最後基於最小投資最大效益回收的原則，我們提出一個演算法以計算各過濾器(即防禦實體)之最佳投資以達到資訊安全之最佳提升。實驗結果顯示，對單層之資訊中心架構，我們的數值計算結果與Gordon & Loeb[11]之理論分析結果一致。同時，我們對無法用理論分析之一般常見的雙層資訊中心架構進行分析比較並提出其差異性。若能給定適當之入侵機率函數，本研究所提之計算模型可做為一個簡單有效率之資訊中心資訊安全最佳投資計算工具之一。 In recent years, the growing threat to information security has caused tremendous amount of loses to organization and serious breaches to personal privacy. How to improve the information security has become an important research topic lately. In this work, we propose a simple but effective information security investment model to assist information center to calculate the optimal information security investment for the proposition of enhancing their information security.For a given information center, we first propose a simple model to represent the structure of the information center. Basically the model proposes using two conceptual components: resource and filter, to represent all the information center entities, and using four basic patterns to represent the possible connectivities among the conceptual components. Then we propose a probability-based calculation model to calculate cumulative probabilities of insecurity of insecurity of each resource when an attack occurs. Finally, we propose an algorithm to calculate the optimal investments on the filters to enhance overall information security, based on max expected net benefit of the investment.To examine the feasibility of the proposed model, we perform numerical experiment on one-tier and two-tier information center structures. Numerical simulations show that the calculated results coincide with analytical results[11] for simple one-tier structure. In addition, numerical simulations on two common two-tier information center structures, which can not be analyzed theoretically, we presented. When combined with property-assumed security breach function on filter, the proposed model can be a simple but efficient tool to calculate the optimal security investment for information centers.
510 1 $a Probability-based Information Security Investment Analysis on Information Centers $z eng
610 0 $a 不安全性機率 $a 最佳化投資 $a 資訊中心 $a 資訊安全 $a 資訊安全投資 $a 資訊安全經濟
610 1 $a Economy of Information Security $a Information Center $a Information Security $a Investment of Information Security $a Optimal Investment $a Probability of Insecurity
681 $a 008M/0019 $b 464105 7533 $v 2007年版
700 1 $a 陳 $b 軍達 $4 撰 $3 354064
712 0 2 $a 國立高雄大學 $b 資訊管理學系碩士班 $3 353936
801 0 $a tw $b 國立高雄大學 $c 20091020 $g CCR
856 7 $2 http $u http://handle.ncl.edu.tw/11296/ndltd/07023648118377381394