理论研究

科学数据安全问题的成因与解析

  • 张瑜祯
展开
  • 南开大学商学院 天津 300071
张瑜祯,博士研究生,E-mail:1120221305@mail.Nankai.edu.cn。

收稿日期: 2023-04-21

  修回日期: 2023-07-24

  网络出版日期: 2024-02-02

The Cause and Analysis of Scientific Data Security Issues

  • Zhang Yuzhen
Expand
  • Business School, Nankai University, Tianjin 300071

Received date: 2023-04-21

  Revised date: 2023-07-24

  Online published: 2024-02-02

摘要

[目的/意义] 科学数据是国家发展的重要资源,随着科学数据受到越来越多的关注,安全问题也随之而来。为更好保障数据安全,管理科学数据,本研究从现实需求出发,梳理已存在的科学数据安全问题,构建科学数据安全问题成因模型,归纳成因机制。[方法/过程] 在现有理论基础上,运用访谈法和文本分析法开展研究,深度访谈 22 位来自不同科学体系和学科领域的科研人员及科学数据管理利益相关者,使用三级编码方法整理访谈资料,分析科学数据安全现状,构建科学数据安全问题的成因模型。[结果/结论] 研究发现,科学数据安全的成因模型包含意识、需求、管理、制度、社会环境、设施环境以及安全隐患 7 个维度,科学数据全生命周期的每一个阶段都有可能遇到安全威胁。

本文引用格式

张瑜祯 . 科学数据安全问题的成因与解析[J]. 图书情报工作, 2024 , 68(2) : 15 -28 . DOI: 10.13266/j.issn.0252-3116.2024.02.002

Abstract

[Purpose/Significance] Scientific data is an important resource for national development, and its security has received more and more attention. In order to better manage scientific data and guarantee its security, this paper starts from the actual needs, sorts out the existing scientific data security problems, constructs its cause model, and summarizes the cause mechanism.[Method/Process] On the basis of the existing theory, this paper took in-depth interviews with 22 researchers from different scientific disciplines, and stakeholders in scientific data management. With the text analysis, this paper conducted the three-level coding of the interview data, analyzed the current situation of scientific data security, and formed its cause model.[Result/Conclusion] It finds that the causes that affect the security of scientific data include seven model dimensions, including consciousness, demand, management, system, social environment and facility environment. The whole life cycle of scientific data is likely to encounter security threats.

参考文献

[1] 法治日报.从互联网时代走向大数据时代[EB/OL].[2023-10-28]. http://media.people.com.cn/n1/2017/0601/c40606-29310298.html.(Legal Daily. From the Internet era to the big data era[EB/OL].[2023-10-28]. http://media.people.com.cn/n1/2017/0601/c40606-29310298.html.)
[2] 新华社.国务院办公厅印发《科学数据管理办法》[EB/OL].[2023-11-07]. http://www.gov.cn/xinwen/2018-04/02/content_5279295.htm.(Xinhua News Agency. State Council releases regulation on scientific data management[EB/OL].[2023-11-07]. http://www.gov.cn/xinwen/2018-04/02/content_5279295.htm.)
[3] 中国人大网.中华人民共和国数据安全法[EB/OL].[2023-11-07]. http://www.npc.gov.cn/npc/c2/c30834/202106/t20210610_311888.html.(www.npc.gov.cn. Data Security Law of the People's Republic of China[EB/OL].[2023-11-07]. http://www.npc.gov.cn/npc/c2/c30834/202106/t20210610_311888.html.)
[4] 新华社.国务院:组建国家数据局[EB/OL].[2023-11-07]. https://baijiahao.baidu.com/s?id=1759698219132176745&wfr=spider&for=pc.(Xinhua News Agency. State Council:establishment of a national data bureau[EB/OL].[2023-11-07]. https://baijiahao.baidu.com/s?id=1759698219132176745&wfr=spider&for=pc.)
[5] 刘莉,刘文云.基于解释结构模型的科研数据共享影响因素分析[J].情报科学, 2020, 38(5):27-33.(LIU L, LIU W Y. Analysis of influencing factors of scientific research data sharing based on interpretative structural model[J]. Information science, 2020, 38(5):27-33.)
[6] 国务院办公厅.《国务院办公厅关于印发科学数据管理办法的通知》[EB/OL].[2023-11-17]. http://www.gov.cn/zhengce/content/2018-04/02/content_5279272.htm.(State Council. State Council releases regulation on scientific data management[EB/OL].[2023-11-17]. http://www.gov.cn/zhengce/content/2018-04/02/content_5279272.htm.)
[7] 张静蓓,吕俊生,田野.国外数据共享行为影响因素研究综述[J].图书情报工作, 2014(4):136-142.(ZHANG J B, LÜ J S, TIAN Y. Review of factors influencing the data sharing behaviors at abroad[J]. Library and information service, 2014(4):136-142.)
[8] 聂云贝,刘桂锋,刘琼.数据生态链视角下科学数据生命周期运行过程分析[J].信息资源管理学报, 2021, 11(2):69-77.(NIE Y B, LIU G F, LIU Q. Analysis of the running process of scientific data life cycle from the perspective of data ecology chain[J]. Journal of information resources management, 2021, 11(2):69-77)
[9] 张瑶,顾立平,杨云秀,等.国外科研资助机构数据政策的调研与分析——以英美研究理事会为例[J].图书情报工作, 2015, 59(6):53-60.(ZHANG Y, KU L P, YANG Y X, et al. Research on data policies of research funding agencies:case study of British and American research councils[J]. Library and information service, 2015, 59(6):53-60.)
[10] 姜鑫.科学数据开放政策研究现状分析及未来研究动向评判[J].现代情报, 2016, 36(2):167-170, 177.(JIANG X. A literature review on research status and developing trend of open research data policy[J]. Journal of modern information, 2016, 36(2):167-170, 177.)
[11] 全国人民代表大会.中华人民共和国数据安全法[EB/OL].[2023-11-10]. http://www.npc.gov.cn/npc/c2/c30834/202106/t20210610_311888.html.(National People's Congress. Data security law of the People's Republic of China[EB/OL].[2023-11-10]. http://www.npc.gov.cn/npc/c2/c30834/202106/t20210610_311888.html.)
[12] 刘瑛.信用视角下的数据安全法律规制[J].暨南学报(哲学社会科学版), 2022, 44(1):79-93.(LIU Y. Legal regulation of data security from the perspective of credit[J]. Jinan journal (philosophy&social sciences), 2022, 44(1):79-93.)
[13] 罗娇,刘细文.知识产权视角下科学数据安全管理的策略选择[J].图书情报工作, 2021, 65(12):38-46.(LUO J, LIU X W. Strategies for scientific data security management from the perspective of intellectual property[J]. Library and information service, 2021, 65(12):38-46.)
[14] 唐素琴,赵宇.《数据安全法》突出科学数据的必要性研究[J].中国科技资源导刊, 2021, 53(2):19-25, 110.(TANG S Q, ZHAO Y. Necessity of highlighting scientific data in the data security law[J]. China science&technology resource eeview, 2021, 53(2):19-25, 110.)
[15] 刘桂锋,阮冰颖,苏文成.科研人员视角下科学数据安全风险识别框架探究[J].图书馆建设, 2022(4):81-91.(LIU G F, RUAN B Y, SU W C. Research on scientific data security risk identification framework from the perspective of scientific researchers[J]. Library development, 2022(4):81-91.)
[16] 阮建海,杨燕.科学数据安全行为研究综述[J].现代情报, 2019, 39(9):151-159.(RUAN J H, YANG Y. A literature review on scientific data security behavior[J]. Journal of modern information, 2019, 39(9):151-159.)
[17] 马费成,望俊成,张于涛.国内生命周期理论研究知识图谱绘制[J].情报科学, 2010, 28(3):334-340.(MA F C, WANG J C, ZHANG Y T. Knowledge map of domestic life cycle theory studies[J]. Information science, 2010, 28(3):334-340.)
[18] 马费成,望俊成.信息生命周期研究述评(I)——价值视角[J].情报学报, 2010(5):939-947.(MA F C, WANG J C. Review of the information lifecycle research (I):value perspective[J]. Journal of the China Society for Scientific and Technical Information, 2010(5):939-947.)
[19] 储节旺,夏莉.嵌入生命周期理论的科学数据管理体系构建研究——牛津大学为例[J].现代情报, 2020, 40(10):34-42.(CHU J W, XIA L. Research on scientific data management construction based on life cycle theory[J]. Journal of modern information, 2020, 40(10):34-42)
[20] CARLSON J. Research data management:practical strategies for information professionals[M]. West Lafayetee:Purdue University Press, 2014:63-86.
[21] HEINRICH H W, PETERSON D, ROOS N, et al. Industrial accident prevention:a safety management approach[M]. New York:McGraw-Hill, 1980.
[22] 杜莉莉,郑前进,姜喜迪,等.基于海因里希事故致因理论的高校实验室安全管理[J].实验技术与管理, 2021, 38(8):257-260, 264.(DU L L, ZHENG Q J, JIANG X D, et al. University laboratory safety management based on Heinrich accidentcausing theory[J]. Experimental technology and management, 2021, 38(8):257-260, 264.)
[23] 文禹衡,戴文怡.云环境中学术数据安全事件的风险致因及其检视——以事故致因理论为视角[J].信息资源管理学报, 2021, 11(3):50-58.(WEN Y H, DAI W Y. Risk cause and validation of academic data security incidents in cloud environment:from the perspective of the theory of the accidentcausing[J]. Journal of information resources management, 2021, 11(3):50-58.)
[24] 朱玲玲,茆意宏,朱永凤,等.政府数据开放准备度关键影响因素识别——以省级地方政府为例[J].图书情报工作, 2021, 65(3):75-83.(ZHU L L, MAO Y H, ZHU Y F, et al. Identification of key influencing factors of government data openness readiness:a case study of provincial local governments[J]. Library and information service, 2021, 65(3):75-83.)
[25] 袁国杰.政府数据开放安全影响因素研究[D].哈尔滨:黑龙江大学, 2018.(YUAN G J. Research on influencing factors of government data opening security[D]. Harbin:Heilongjiang University, 2018)
[26] WANG F, ZHANG J, ZHANG P. Influencing factors of smart government information security:experience from China[J]. Tehnicki vjesnik-technical gazette, 2022, 29(2):572-579.
[27] 王雪涛,袁文秀.基于大数据的企业信息安全影响因素实证研究[J].情报探索, 2016(7):30-34, 40.(WANG X T, YUAN W X. Big data-based empirical study on influential factors to enterprise information security[J]. Information research, 2016(7):30-34, 40.)
[28] 杨燕.高校教师科学数据安全行为研究[D].重庆:西南大学, 2019.(YANG Y. Research on the scientific data security behavior of university faculty[D]. Chongqing:Southwest University, 2019.)
[29] 阮冰颖,刘桂锋,刘琼.科研人员视角下科学数据安全影响因素仿真分析[J].情报理论与实践, 2022, 45(2):137-145.(RUAN B Y, LIU G F, LIU Q. Simulation analysis of influencing factors of scientific data security from the perspective of scientific researchers[J]. Information studies:theory&application, 2022, 45(2):137-145.)
[30] 魏丹阳,马海群.网络环境下个人数据存储安全和隐私保护影响因素研究[J].图书馆理论与实践, 2018(1):89-95, 100.(WEI D Y, MA H Q. Research on the influencing factors of personal data storage security and privacy protection under network environment[J]. Library theory and practice, 2018(1):89-95, 100.)
[31] 魏丹阳,江尚谦.网络环境下个人数据的存储安全和隐私保护的影响因素研究[J].图书情报导刊, 2016, 1(8):128-131.(WEI D Y, JIANG S Q. Study on the factors influencing the storage security and privacy protection of personal data network environment[J]. Journal of library an information science, 2016, 1(8):128-131.)
[32] 魏丹阳.基于网络环境中个人数据的隐私安全影响因素研究[D].哈尔滨:黑龙江大学, 2017.(WEI D Y. Research on influencing factors of personal data privacy security in network environment[D]. Harbin:Heilongjiang University, 2017.)
[33] 赵保国,张雅琼.互联网用户数据安全影响因素研究——基于演化博弈模型[J].现代情报, 2020, 40(6):106-113.(ZHAO B G, ZHANG Y Q. Research on influencing factors of internet user data security:based on evolutionary game model[J]. Journal of modern information, 2020, 40(6):106-113.)
[34] 黄璐璐.高校网络财务系统数据安全影响因素及其对策研究[J].经济师, 2011(12):107, 109.(HUANG L L. Research on the influencing factors and countermeasures of data security in university network finance system[J]. China economist, 2011(12):107, 109.)
[35] 朱新生.影响图书馆服务器数据安全的因素[J].河北科技图苑, 2005(3):34-35.(ZHU X S. Factors affecting data security of library server[J]. Hebei library journal of science and technology, 2005(3):34-35.)
[36] 孙培彦,田卫萍,杨树青.影响RFID数据安全的因素分析[J].电脑开发与应用, 2009, 22(5):13-16.(SUN P Y, TIAN W P, YANG S Q. Analysis on problems that affect RFID data security[J]. Computer development&applications, 2009, 22(5):13-16.)
[37] 王雷,周晓明,张轶男.影响疗养院信息系统数据安全的因素及应对策略[J].中国疗养医学, 2011, 20(11):977-978.(WANG L, ZHOU X M, ZHANG Y N. Factors affecting data security of sanatorium information system and countermeasures[J]. Chinese journal of convalescent medicine, 2011, 20(11):977-978.)
[38] 张涛,马海群.人工智能数据安全影响因素的系统动力学研究[J].情报探索, 2021(3):1-10.(ZHANG T, MA H Q. System dynamics research on the influencing factors of data security in artificial intelligence[J]. Information research, 2021(3):1-10.)
[39] LIDSTER W W, RAHMAN S S M. Identifying influences to information security framework adoption:applying a modified UTAUT[C]//2020 IEEE international conference on big data. Atlanta:IEEE, 2020.
[40] 肖冬梅,孙蕾.云环境中科学数据的安全风险及其治理对策[J].图书馆论坛, 2021, 41(2):89-98.(XIAO D M, SUN L. On the security risks of scientific data in the cloud environment and its governance measures[J]. Library tribune, 2021, 41(2):89-98.)
[41] 刘桂锋,阮冰颖,包翔.数据生命周期视角下高校科学数据安全内容框架构建[J].情报杂志, 2021, 40(2):146-153.(LIU G F, RUAN B Y, BAO X. Construction of content framework of university scientific data security from the perspective of data life cycle[J]. Journal of intelligence, 2021, 40(2):146-153.)
[42] 张梦华,盛晓敏,黄红武,等.高速精密磨削数据共享系统的设计研究[J].机床与液压, 2007(4):37-40.(ZHANG M H, SHENG X M, HUANG H W, et al. Design and research of highspeed&precision grinding data-sharing system[J]. Machine tool&hydraulics, 2007(4):37-40.)
[43] Policy paper national data strategy. Updated 9 December 2020[EB/OL].[2023-11-12]. https://www.gov.uk/government/publications/uk-national-data-strategy/national-datastrategy#data-1-4.
[44] 李爱君,苏桂梅.国际数据保护规则要览[M].北京:法律出版社, 2018.(LI A J, SU G M. Highlight for international data protection rule[M]. Beijing:Law Press, 2018.)
[45] 金晶.欧盟《一般数据保护条例》:演进、要点与疑义[J].欧洲研究, 2018, 36(4):1-26.(JIN J. An overview of the general data protection regulation:evolution, key points and major issues[J]. Chinese journal of European studies, 2018, 36(4):1-26.)
[46] 秦顺,邢文明.开放·共享·安全:我国科学数据共享进入新时代——对《科学数据管理办法》的解读[J].图书馆, 2019(6):36-42.(QIN S, XING W M. Opening·sharing·security:China's scientific data sharing enters a new era:interpretation of the scientific data management rules[J]. Library, 2019(6):36-42.)
[47] 李善青,郑彦宁,邢晓昭,等.科学数据共享的安全管理问题研究[J].中国科技资源导刊, 2019, 51(3):11-17.(LI S Q, ZHENG Y N, XING X Z, et al. Study on security managements of scientific data sharing[J]. China science&technology resources review, 2019, 51(3):11-17.)
[48] 陈祖芬.妈祖信俗口述访谈记录的转录与档案整理[J].档案学通讯, 2013(1):16-19.(CHEN Z F. The transcription and archival arrangement of the oral interview records on Mazu belief and customs[J]. Archives science bulletin, 2013(1):16-19.)
[49] 李志刚.扎根理论方法在科学研究中的运用分析[J].东方论坛, 2007(4):90-94.(LI Z G. The study of grounded theory in business research[J]. Eastern forum, 2007(4):90-94.)
[50] 罗宝勇,胡丹.基于扎根理论的档案社交媒体信息服务质量影响因素研究[J].档案管理, 2021(6):30-33.(LUO B Y, HU D. Research on influential factors of archival social media information service quality based on grounded theory[J]. Archives management, 2021(6):30-33.)
[51] FRANCIS J J, JOHNSTON M, ROBERTSON C, et al. What is an adequate sample size?operationalising data saturation for theory-based interview studies[J]. Psychology and health, 2009, 25(10):1229-1245.
[52] 谢爱磊,陈嘉怡.质性研究的样本量判断——饱和的概念、操作与争议[J].华东师范大学学报(教育科学版), 2021, 39(12):15-27.(XIE A L, CHEN J Y. Determining sample size in qualitative research:saturation, its conceptualization operationalization and relevant debates[J]. Journal of East China Normal University (educational sciences), 2021, 39(12):15-27.)
[53] 盛小平,袁圆.科学数据开放共享中的数据权利治理研究[J].中国图书馆学报, 2021, 47(5):80-96.(SHENG X P, YUAN Y. Data rights governance in open sharing of scientific data[J]. Journal of library science in China, 2021, 47(5):80-96.)
[54] 中国青年网.篡改、伪造和剽窃是损害科研的"罪魁祸首"[EB/OL].[2023-11-10]. https://baijiahao.baidu.com/s?id=1672153580879649820&wfr=spider&for=pc.(www.Youth.cn. Falsification, counterfeiting and plagiarism are the main culprits in research[EB/OL].[2023-11-10]. https://baijiahao.baidu.com/s?id=1672153580879649820&wfr=spider&for=pc.)
[55] 欧阳菲菲.数据分级及防数据泄漏规划与实现[J].数码世界, 2018(1):357.(OUYANG F F. Planning and implementation of data classification and data leakage prevention[J]. Digital space, 2018(1):357.)
[56] 张文金,覃仲宇,冯钊,等.大数据下的web暴力破解攻击检测[J].深圳大学学报(理工版), 2020, 37(S1):44-49.(ZHANG W J, QIN Z Y, FENG Z, et al. Big data analysis for detection of web brute-force attack[J]. Journal of Shenzhen University (science and engineering), 2020, 37(S1):44-49.)
[57] 朱志强.基于区块链的档案数据共享风险防控因素探析[J].黑龙江档案, 2020(5):15.(ZHU Z Q. Analysis on risk prevention and control factors of archival data sharing based on blockchain[J]. Heilongjiang archives, 2020(5):15.)
[58] 李茹姣,张欣,宋述慧,等.基因组科学数据的安全管理与应用[J].大数据, 2022, 8(1):37-45.(LI R J, ZHANG X, SONG S H, et al. Safety management and application of genomics data[J]. Big data research, 2022, 8(1):37-45.)
[59] 道客巴巴.信息安全风险评估概述[EB/OL].[2023-11-12]. https://www.doc88.com/p-7708965864683.html?r=1.(www.doc88.com. Information security risk assessment overview[EB/OL].[2023-11-12]. https://www.doc88.com/p-7708965864683.html?r=1.)
[60] 中国人民共和国国家标准. GB/T 20984-2007.信息安全技术信息安全风险评估规范[EB/OL].[2023-11-14]. https://max.book118.com/html/2019/0503/6211144225002025.shtm.(National Standard of the People's Republic of China. GB/T 20984-2007. Information security technology Information security risk assessment specification[EB/OL].[2023-11-14]. https://max.book118.com/html/2019/0503/6211144225002025.shtm.)
[61] 郑香伟.大数据全生命周期安全隐患分析[J].内蒙古科技与经济, 2021(14):86-87.(ZHENG X W. Analysis on the security risk of big data full life cycle[J]. Inner Mongolia science technology&economy, 2021(14):86-87.)
[62] 李伟超.计算机网络信息安全中的数据加密技术[J].网络安全技术与应用, 2022(11):23-24.(LI W C. Data encryption technology in computer network information security[J]. Network security technology&application, 2022(11):23-24.)
[63] 吴钟灿.政府数据开放中的隐私风险:类型、成因与治理策略[J].贵州省党校学报, 2021(5):38-48.(WU Z C. A privacy risks in opening government data:types, causes and governance strategies[J]. Journal of Guizhou provincial party school, 2021(5):38-48.
文章导航

/

〈 〉