資訊安全情境認知模式之研究

A Study of Situation Awareness Model for Information Security

劉志銘(Jhih-Ming Liou)

指導教授 ： 蕭瑞祥

淡江大學/管理學院/資訊管理學系碩士班/碩士(2005年)

https://doi.org/10.6846/TKU.2005.00018

摘要

人是資訊安全弱點與威脅的連結，尤其在企業中組織人員普遍對資訊安全的認知不足，而難以防範資訊安全事件不斷重演，事件發生時往往錯失處理時機，造成企業內部極大損失。有鑑於此，本研究透過Endsley在1995年提出之情境認知(Situation Awareness：SA)動態決策方式與1986年提出的情境知覺全面評估技術(Situation Awareness Global Assessment technique：SAGAT)，發展一套適合使用在資訊安全上的認知模式，並驗證其適用性與對使用者的成效。本研究採用實驗室實驗法，對象為大學生，在認知學習中以本研究發展的情境認知動畫作為學習上的互動，加深其印象。在最後評量上則利用腳本敘事理論所撰述之情境題，模擬資訊安全認知情境，當遇到類似資安事件時，知道該如何處理。從本研究結果得知，情境式學習會加深使用者資訊安全認知印象，達到顯著效果，因此情境式教學比傳統式教學有顯著成效。對資訊議題的注意程度則影響情境認知與行為成效，因此不管是否為資訊背景的人，在情境認知中若對資訊議題非常注意則在情境認知評量之行為成效上都會有顯著。本研究驗證情境認知模式應用在資訊安全的認知上是可行的，對資訊安全認知效果亦顯著。

關鍵字

情境認知 ； 情境知覺全面評估技術 ； 認知

並列摘要

People are the factor of threats and weakness in the information security. The lack of information security awareness, especially in employees, it was difficult to avoid the security incidents happened. When the event happened, it always missed the chance to deal with and caused mass of losses of the corporation.

This study was referring to Endsley’s “Situation Awareness Dynamic Decision Model” proposed in 1995 and “The Situation Awareness Global Assessment Technique” proposed in 1986. To develop a model that can appropriately to use on information security issues, it verified the performance of user. This study was used the laboratory experiment and the participants were undergraduate students. This study impressed the participants’ information security awareness by the situation awareness animation. In last assessment, we use the Narrative theory to simulate the information security issues and to examine their. As the result, we discovered that situation awareness animation was more effective than the traditional method.

The degree of ”Attention” for the information security issues can affect situation awareness and performance of action. Even people who are not with the background of information, they still had high performance in the situation awareness measure when they were more attention to the issues of the information security. The Model demonstrate applicability and performance of the user, so it was a feasible situation awareness model that used on the awareness of the information security that it had positive effect.

並列關鍵字

Situation Awareness ； Situation Awareness Global Assessment Technique ； Awareness

參考文獻

[11]張靜嚳，傳統教學有何不妥？建構與教學第四期，民國85年，發行:國立彰化師範大學科學教育研究所科學教育中心。

[16]林喬偉，從中國古典文學賞析來探討多媒體製作的腳本結構─以鏡花緣多媒體為例，元智大學資訊研究所碩士論文，民國89年。

[17]廖啟超，多媒體之情境設計探討-以「未來-行的憧憬」創作為例，元智大學資訊傳播系碩士論文，民國91年。

[19]孟令珠，電腦化教學策略對中文輸入學習成效之影響探討，臺灣師範大學資訊教育研究所碩士論文，民國91年。

[21]施志昇，「互動式多媒體敘事分析之研究」，私立元智工學院，碩士論文，民國86年。