网络安全保险的策略分析——以网络安全保险的生命流程为研究架构

发布时间：2018-06-15 12:13

本文选题：网络安全 + 风险管理　；参考：《情报杂志》2017年11期

【摘要】：[目的/意义]网络安全需要从技术、管理和法律等层面进行综合保障,基于"消除风险"的网络安全风险管理途径已经较为丰富,但网络安全风险的本性决定了需要遵循风险管理的规律研究拓展分散风险的工具:网络安全保险。[方法/过程]基于风险的"不可消除性",得出分散网络安全风险的重要意义,并阐释了网络安全保险的定义和必要性;以网络安全保险的生命流程为坐标,系统分析了其面临的挑战或困境。[结果/结论]结合网络安全保险策略的特点,针对网络安全保险策略的难点,提出了策略动态性、信息对称、运用新技术方法准确测定风险和加强网络安全情报信息共享等未来理论研究和实践需要重点关注的具体建议。
[Abstract]:[purpose / significance] Network security needs to be guaranteed comprehensively from the aspects of technology, management and law, and the ways of network security risk management based on "eliminating risks" are already abundant. However, the nature of network security risk determines the need to follow the law of risk management to expand the risk diversification tool: network security insurance. [method / process] based on the "irremovability" of risk, the significance of dispersing network security risk is obtained, and the definition and necessity of network security insurance are explained. The challenges and difficulties are analyzed systematically. [results / conclusion] considering the characteristics of the network security insurance policy and aiming at the difficulties of the network security insurance policy, this paper puts forward that the policy is dynamic and the information is symmetrical. Some suggestions for future theoretical research and practice, such as accurately measuring risks and enhancing information sharing of network security, need to be paid more attention to.
【作者单位】：西安交通大学法学院;
【基金】：国家社会科学基金重大项目“网络社会治理创新研究”(编号:15ZDA047)的阶段性成果;国家社会科学基金项目“我国网络安全立法研究”(编号:15BFX050)的阶段性成果陕西省社会科学基金项目“基于IT国际供应链国家安全审查的IT供应商法规遵从与应对研究”(编号:13F060)的阶段性成果;陕西省社会科学基金项目“基于IT国际供应链国家安全审查的IT供应商法规遵从与应对研究”(编号:13F060)的阶段性成果陕西省软科学项目“陕西省大数据环境下个人信息数据挖掘的法律规制研究”(编号:2014KRM73)的阶段性成果
【分类号】：TP393.08

【相似文献】