The human beings are stepping into the information society. The information industry develops very rapidly, so do the hackers, trick-playing teens, exploring children, fraudsters, and serious white-collar criminals. Thus, information security becomes an impending important issue.

人類步入信息社會。信息產(chǎn)業(yè)的發(fā)展非常迅速，黑客，特技播放的青少年，探索兒童，騙子，和嚴(yán)重的白領(lǐng)罪犯也是一樣。因此，信息安全成為一個(gè)迫在眉睫的重要問題。

In case of information breach, the victims－government department, an organization or an institution, or a company will inevitably suffer great or small loss. Government may be threatened with national security. Companies may lose opportunities to develop new projects. And the public’s and users’ confidence will be damaged.

一旦信息被打破，受害者——政府部門，組織或機(jī)構(gòu)，或大或小的公司將不可避免地遭受損失。政府可能會威脅到國家安全。公司可能會失去開發(fā)新項(xiàng)目的機(jī)會。與公眾和用戶的信心將被損壞。

Then how to deal with this issue? Technology is only a partial solution to information security. What’s more important is that organizations and companies should promote the awareness on information security to its staff. However, since no system can ever be 100 percent secure, a prevention-only approach to information security management is not enough. Companies and organizations should adopt a dual approach to information security management by combing prevention and detection techniques

那么如何處理這個(gè)問題？技術(shù)只是解決信息安全的一部分。更重要的是組織和公司應(yīng)促進(jìn)其工作人員的信息安全意識。然而，由于沒有系統(tǒng)能百分之百的安全，只有一個(gè)保護(hù)信息安全管理的方法是不夠的。公司和組織應(yīng)該通過預(yù)防和檢測技術(shù)相結(jié)合采取一個(gè)信息安全管理的二元的方法。