文章基本信息

标题：Empirical-Analysis Methodology for Information-Security Investment and Its Application to Reliable Survey of Japanese Firms
本地全文：下载
作者：Wei Liu ; Hideyuki Tanaka ; Kanta Matsuura 等
期刊名称：IPSJ Digital Courier
电子版ISSN：1349-7456
出版年度：2007
卷号：3
页码：585-599
DOI：10.2197/ipsjdc.3.585
出版社：Information Processing Society of Japan
摘要：This paper presents a series of empirical analyses of information-security investment based on a reliable survey of Japanese enterprises. To begin with, after showing our methodology for representing the vulnerability level regarding the threat of computer viruses, we verify the relation between vulnerability level and the effects of information security investment.Although in the first section there is only a weak empirical support of the investment model, one can understand that the representing methodology is worth attempting in empirical analyses in this research field. In the second section, we verify the relations between the probability of computer virus incidents and adopting a set of information security countermeasures. It is shown that “Defense Measure” associated with “Information Security Policy” and “Human Cultivation”has remarkable effects on virus incidents. At the last step, we analyze the effect of continuous investment in the three security countermeasures. The empirical results suggest that virus incidents were significantly reduced in those enterprises which adopted the three countermeasures both in 2002 and in 2003.