信息安全是一个涉及技术、管理、法律等方面的系统工程。在技术相同的情况下，技术的使用策略就成为提高信息安全能力的关键。本项目基于博弈论研究信息安全理论与方法，研究在资源有限的情况下，如何提高和优化信息系统的整体安全能力。研究特定博弈子集背后的方法证明与其他方法相比的数学优势，并利用博弈论的模型技术优势通过混合策略解决所面临的信息安全问题。利用带权的潜在博弈优化网络安全方案，利用非合作博弈代替合作博弈以实现策略和效用最大化,建立基于博弈论的信息系统安全模型，基于马尔可夫博弈模型对系统的系统（SoS）的信息安全机制进行博弈分析，提出基于博弈论的UC安全协议分析与设计的理论与方法，建立基于博弈论的信息安全技术评价体系，并针对社会网络中恶意行为进行博弈分析，从策略、管理、机制的角度从整体上提高信息系统安全而提供理论和方法。

Information security is a system engineering including technology, management and legal aspects and so on. In the case of the same technology, the use strategies of technology become the key to improving information security capabilities. In this project, we will research on the theories and methods of information security based on game theory and our aim is to improve and optimize the overall security of the information system capacity under conditions of limited resources. In our work, we will examine the methodology behind how certain game subsets have been proven to have mathematical advantages over others and how such game subsets make it easier to prove a solution is optimal. Furthermore, we will take advantage of the modeling techniques exclusive to a game theoretic problem-solving approach through mixed strategies. We will use a weighted potential game for a network security optimization solution and use a noncooperative instead of a cooperative game which focus on strategy and utility maximization to create the information security model based game theory. Then, we analyze on the information security mechanism of system of systems based on the Markov game model and present the theory and method of analysis and design for universally composable security protocol based game theory. We will give the evaluation model of information security technologies based on game theoretic. Finally, the malicious behaviors in social networks are analyzed using game theoretic model. These theories and methods can be used to improve the information security of information system overall from strategy, management and mechanism.