資訊倫理與資訊安全認知之關聯性研究-以嘉義市政府警察局為例

The Association between the Information Ethics and Information Security Awareness - A Case Study of Chiayi City Police Bureau

吳建忠(Wu,Chien Chung)

指導教授 ： 洪育忠

國立中正大學/管理學院/會計與資訊科技學系/碩士(2011年)

摘要

網際網路的便捷普及，資通訊科技的發展與運用下，創造出新的警政資訊服務，但相對複雜多變的資安危機也日益嚴重威脅。對於資訊之便捷性與快速性服務應用的依賴程度日深，伴隨而來的警政資訊安全、個資等問題，已使資訊化、網路化逐漸成為影響警政資訊安全的另一項隱憂。
有鑑於此，警政資訊安全是機關必須重視之議題，更應以實際行動落實資訊倫理，強化警察機關對警政資訊安全重要性之意識及認知。
本研究透過資料探勘(Data Mining)之關聯規則Apriori演算法技術，實證分析找出31則高度相關規則，另經逐步分析，排除資訊倫理相同因素，萃取精華，得15則因素對應資訊安全認知11則因素、與8個高度關聯性的相依性網路連結。
本研究關聯分析結果分為無關聯性、1個項目集的關聯性、2個項目集的關聯性等3個分析結果。
無關聯性
關聯分析結果發現資訊倫理量表之「資訊使用」衡量構面與資訊安全認知量表之「資訊保護」衡量構面，此2個衡量構面並無與其他衡量構面產生關聯性。
1個項目集的關聯性
關聯分析結果發現1個項目集的關聯性，資訊倫理量表之「資訊法律」、「警政倫理」、「倫理規範」、「倫理認知」等4個衡量構面與資訊安全認知量表之「使用者」、「警政資訊」、「資安事件」、「資安意識」等4個衡量構面，產生高度關聯性。
2個項目集的關聯性
關聯分析結果發現2個項目集的關聯性，資訊倫理量表之「資訊法律」及「警政倫理」、「倫理認知」及「警政倫理」、「倫理認知」及「倫理規範」等3個組合之衡量構面與資訊安全認知量表之「使用者」衡量構面，產生高度關聯性，顯示有出現先前未知而潛在有用的關聯規則出現。
因此，各衡量構面關聯分析結果如下，所得之資訊為最重要、最關鍵之結果，可以讓實務上快速運用，以最有效的方法讓資訊安全認知快速顯著提升，有效確保警政資訊安全。
資訊倫理量表之「資訊法律」衡量構面與「資訊法律」及「警政倫理」等2個衡量構面之組合對資訊安全認知量表之「使用者」衡量構面產生高度關聯性。
資訊倫理量表之「警政倫理」衡量構面對資訊安全認知量表之「使用者」、「資安事件」等2個衡量構面產生高度關聯性。
資訊倫理量表之「倫理規範」衡量構面對資訊安全認知量表之「使用者」、「資安事件」等2個衡量構面產生高度關聯性。
資訊倫理量表之「倫理認知」衡量構面對資訊安全認知量表之「使用者」、「警政資訊」、「資安事件」、「資安意識」等4個衡量構面產生高度關聯性；另資訊倫理量表之「倫理認知」及「警政倫理」等2個衡量構面之組合與「倫理認知」及「倫理規範」等2個衡量構面之組合對資訊安全認知量表之「使用者」衡量構面產生高度關聯性。

關鍵字

關聯規則 ； 資料探勘 ； 資訊安全認知 ； 資訊倫理 ； 警政資訊安全

並列摘要

As internet and information communication technology are widely used, new police information system is created under increasing thread of complex information crisis. Along with the concern of the security of police imformathion security and privacy, the higher relationship between accessible data and rapid service application causes information technology and network become the potential issue of police information system.
Thus, the police information security is a significant issue that holds the spotlight of everyone. It is also important to take action to implement information ethics and raise the awareness of the importance of police information security.
This research employs Apriori algorithm to identify thirty-one correspondence rules. After excluding duplicate information ethics factors, fifteen factors are correlated with eleven information security awareness, and eight high correlation dependency network links. The results of correlation analysis are revealed below:
No correlation
Both the dimension of Information use from information ethics scale and the dimension of Information protection from information security awareness scale have no correlation between other dimensions.
Correlated with the other one dimension
The result shows high correlation with one dimension set from information ethics scale the dimension of Information law, police ethics, ethics norms, ethical awareness or information security awareness scale the dimension of user, police information, information security event, information security awareness.
Correlated with the other two dimension
While both imformation law and police ethics are significant, the awareness of imformation security of users is significant. It hints that the association among information law, police ethics and the awareness of information security is significant. The following two associations, (1) the association among ethical awareness, police ethics and the awareness of information security, (2) the association among ethical awareness, ethics norms and the awareness of information security, have the similar results.
The analysis results are listed as below and provide the most important and critical implications for the practice to rapid raise information security awareness efficiently and assure police information is secure.
The dimension of information law from information ethic scale, and both the dimension of information law and police ethics, are highly correlated with information security awareness scale the dimension of user.
The dimension of police ethics from information ethic scale is highly correlated with both information security awareness scale the dimension of user and information security event.
The dimension of ethics norms from information ethic scale is highly correlated with both information security awareness scale the dimension of user and information security event.
The dimension of ethical awareness from information ethic scale is highly correlated with information security awareness scale the dimension of user, police information, information security event, information security awareness. And, Information Ethics Scale both the dimension of ethical awareness and police ethics with both the dimension of ethical awareness and ethics norms are highly correlated with information security awareness scale the dimension of user.

並列關鍵字

association rule ； data mining ； information security awareness ； information ethics ； police information security

參考文獻

莊雅茹、郭俊宏，2008，台灣企業資訊倫理政策現況調查，輔仁管理評論，第十五卷第一期，155-176。

王宏德，1996，談網路資訊倫理，台北市立圖書館館訊，14卷1期，頁86-94。

Chaney, L. H. and Simon, J. C. 1994. Strategies for teaching computerethics, Journal of Computer Information Systems, Fall, 19-22.

Cronbach, L. J. 1951. “Coefficient Alpha and the Internal Structure of tests”, Psychometrika, 16（4）, 297-334.

Floridi, L. 2006. Information Ethics: Its Nature and Scope, Computers and Society, 36(3): 21-36.