信息安全视角下的软件供应链厂商开发策略选择研究

Research on Vendor Development Strategy Selection of Software Supply Chain from the Perspective of Information Security

摘要: 信息安全已成为软件产品的基础，引起了软件厂商和软件用户的广泛关注。本文以信息安全视角为切入点，研究软件供应链厂商的开发策略选择。通过构建对称信息安全环境下的软件供应链厂商开发策略选择博弈模型，得到了不同情形下的软件厂商的相应开发策略。研究发现：(1) 在两家软件厂商都开发闭源软件时，较高的产品间替代率会使得两家软件厂商的软件产品提高并影响软件厂商信息安全投入水平，影响消费者的需求，并进一步增加他们在竞争市场中的利润。(2) 若开源开发策略的回报较高，即使信息安全问题较为严重，软件厂商仍更有可能选择开源的开发模式。(3) 同构开发模式下闭源软件厂商的利润高于异构开发模式下闭源厂商的利润。

Abstract: Information security has become the foundation of software products, which has attracted the wide attention of software manufacturers and software users. This paper studies the development strategy choice of software supply chain manufacturers from the perspective of information security. By constructing a game model of software supply chain vendor development strategy selection under symmetric information security environment, the corresponding development strategies of software vendors under different situations are obtained. The results show that: (1) When both software vendors develop closed-source software, the higher inter-product substitution rate will improve the software products of the two software vendors, affect the information security investment level of software vendors, affect the demand of consumers, and further increase their profits in the competitive market. (2) If the return of open source development strategy is higher, even if the information security problem is more serious, software manufacturers are more likely to choose open source development mode. (3) The profit of closed-source software vendors in homogeneous development mode is higher than that of closed-source software vendors in heterogeneous development mode.