資訊安全之研究現況－優質英文期刊論文之內容分析

The Current Research Situation of Information Security: Content Analysis for Top-Quality English Journal Papers

陳宏榮(Hong-Rong Chen)

指導教授 ： 樊台聖

國立屏東科技大學/管理學院/資訊管理系所/碩士(2012年)

https://doi.org/10.6346/NPUST.2012.00217

摘要

資訊科技對現代人而言，可以說是形影不離的存在，組織對其更是高度依賴。但隨其應用高速成長，接踵而來的是層出不窮的資訊安全問題。根據電腦危機處理暨協調中心（Computer Emergency Response Team，簡稱CERT）的統計結果，資訊安全事件回報數量逐年攀升。然而，現今的資訊安全研究大都針對特定問題的解決，對於整體資安研究的觀察相對顯得片段與瑣碎，以致無法看出資安研究之全盤發展。因此，本研究之目的為藉由歷史性的文獻分析，完整呈現資安研究的現況與研究議題之發展趨勢。我們採用內容分析法，以優質資訊科學之管理與技術的英文期刊論文為分析對象，並以ISO27001做為歸類工具將每篇論文給予適當的分類，以瞭解近年資訊安全研究議題的重心與發展趨勢。
研究結果發現，資安研究的期刊論文發表數量逐年增加，資安研究的分佈呈現管理類特性與技術類特性並重，研究主題則以『通訊與操作管理』、『資訊系統獲取、開發及維護』和『營運持續管理』議題為主流。論文作者之工作區域主要以美洲為最大宗，工作機構則以大學為主，發表資安研究期刊論文最多的是Rao、Siponen及Zhang，而所有文獻中最常被引用的議題為『資訊流安全』、『RFID安全及隱私』以及『客戶信任與安全控制感知對電子商務接受度之影響』。

關鍵字

內容分析法 ； 資訊安全 ； 文獻回顧 ； ISO27001

並列摘要

Information technology (also known as IT) is inseparable existence for people in modern age. Many organizations are highly dependent on IT, however, information security problems are emerging endlessly with the rapid growth of IT usage. According to CERT, the number of reported information security events is increasing over time. Nowadays, most information security research focuses on solving specific security issues. It is difficult to have a good understanding for the overall development of information security research trend. Therefore, the goal of this study is to present the current research situation of information security by reviewing related literatures historically. By adopting content analysis as the main research method, we analyze top-quality computer science journal articles published in English, and use ISO27001 to properly classify these papers into certain research interests in order to get a clearer picture of research trend for information security.

The results showed that information security research articles published at the top-quality journals were increasing by years. Research for management- orientedtype drew equal attention as the type of technical-oriented in the field of information security in recent years. Research subjects focusing on "Communication and operational management", "Systems development and maintenance" and "Business continuity management" were major trends for information security research. Working area for most of the authors was America, and many of them worked at universities or institutions. Comparing to other authors, Rao, Siponen and Zhang were the most active researchers publishing research articles in the field of information security. Studies titled "Language-based information- flow security", "RFID security and privacy: a research survey" and "Impact of customer trust and perception of security control on the acceptance of electronic commerce" were found to be the most commonly cited journal articles in this study.

並列關鍵字

content analysis ； information security ； the literature review ； ISO27001

參考文獻

3. 林映君、謝翠娟 (2003)，資訊安全管理研究趨勢之探討--- 以台灣碩、博士論文為例，弘光學報，四十一期，頁83~89。

5. 洪國興、趙榮耀 (2003)，資訊安全管理理論之探討，資管評論，第十二期，頁17~47。

14. 賴香菊、黃三益、梁定澎、洪新原、吳祥麟 (2011)，臺灣資訊管理學術單位在學術期刊上的發表狀況之研究，資訊管理學報，第18卷，第3期，175-196頁。

1. Alavi, M. and Carlson, P. (1992). A Review of MIS Research and Disciplinary Development. Journal of Management Information Systems, Vol 8, NO 4, pp.45-62.

2. Anderson, J. M.(2003). Why we Need a New Definition of Information Security. Computers & Security, Vol.22, No.4, pp.308-313.