关键词: 信息系统, 资源分配, 约束理论, 信息安全

Abstract: Being safe and economical is the main foundation when enterprises make the decision on information security defense, so that enterprises need to trade off optional allocation of defense resources among many different information nodes in the network information system. This paper firstly establishes a decision model of security defense without resource constraints in order to study how enterprise optimizes the allocation of its defense resources, and the result obtains the defense threshold and relative economical defense level of different nodes. Furthermore, the condition that security resources are limited is combined into the basic model. Through analyzing the impact of factors such as the defensive value of different information nodes, the expected loss, attack probability and so on, we draw conclusions about the priority of different nodes, the amount of resources invested in the defense of different nodes.

Key words: information system, resources allocation, constrains theory, information security