Extending a Security Evaluation Standard (the ITSEC) to Dependability

1995 ◽  
pp. 117-130
Author(s):  
Alan Hawes
Keyword(s):  
Security Evaluation ◽  
Evaluation Standard

A fuzzy evaluation method of road vehicle automatic weighing instrument in dynamic force metrological performance

2020 ◽  
Vol 64 (1-4) ◽  
pp. 1365-1372
Author(s):  
Xiaohui Mao ◽  
Liping Fei ◽  
Xianping Shang ◽  
Jie Chen ◽  
Zhihao Zhao
Keyword(s):  
Evaluation Method ◽  
Comprehensive Evaluation ◽  
Evaluation Model ◽  
Dynamic Performance ◽  
Dynamic Force ◽  
Fuzzy Evaluation ◽  
Road Vehicle ◽  
Evaluation Standard ◽  
The Road ◽  
Metrological Performance

The measurement performance of road vehicle automatic weighing instrument installed on highways is directly related to the safety of roads and bridges. The fuzzy number indicates that the uncertain quantization problem has obvious advantages. By analyzing the factors affecting the metrological performance of the road vehicle automatic weighing instrument, combined with the fuzzy mathematics theory, the weight evaluation model of the dynamic performance evaluation of the road vehicle automatic weighing instrument is proposed. The factors of measurement performance are summarized and calculated, and the comprehensive evaluation standard of the metering performance of the weighing equipment is obtained, so as to realize the quantifiable analysis and evaluation of the metering performance of the dynamic road vehicle automatic weighing instrument in use, and provide data reference for adopting a more scientific measurement supervision method.

MILP-Aided Security Evaluation of Differential Attacks on KCipher-2

2021 ◽  
Vol E104.A (1) ◽  
pp. 203-212
Author(s):  
Jin HOKI ◽  
Kosei SAKAMOTO ◽  
Fukang LIU ◽  
Kazuhiko MINEMATSU ◽  
Takanori ISOBE
Keyword(s):  
Security Evaluation ◽  
Differential Attacks

Comparative Assessment of Optical Techniques for Semi-Invasive SRAM Data Read-out on an MSP430 Microcontroller

2018 ◽  
Author(s):  
Tuba Kiyan ◽  
Heiko Lohrke ◽  
Christian Boit
Keyword(s):  
Supply Voltage ◽  
Photon Emission ◽  
Random Access ◽  
Integration Time ◽  
Security Evaluation ◽  
Testing And Debugging ◽  
Advantages And Disadvantages ◽  
The Core ◽  
Voltage Signal ◽  
Chip Testing

Abstract This paper compares the three major semi-invasive optical approaches, Photon Emission (PE), Thermal Laser Stimulation (TLS) and Electro-Optical Frequency Mapping (EOFM) for contactless static random access memory (SRAM) content read-out on a commercial microcontroller. Advantages and disadvantages of these techniques are evaluated by applying those techniques on a 1 KB SRAM in an MSP430 microcontroller. It is demonstrated that successful read out depends strongly on the core voltage parameters for each technique. For PE, better SNR and shorter integration time are to be achieved by using the highest nominal core voltage. In TLS measurements, the core voltage needs to be externally applied via a current amplifier with a bias voltage slightly above nominal. EOFM can use nominal core voltages again; however, a modulation needs to be applied. The amplitude of the modulated supply voltage signal has a strong effect on the quality of the signal. Semi-invasive read out of the memory content is necessary in order to remotely understand the organization of memory, which finds applications in hardware and software security evaluation, reverse engineering, defect localization, failure analysis, chip testing and debugging.

GIS Analysis of Ecological Security Evaluation in Xinfengjiang River Valley Using ALOS Data

2010 ◽  
Vol 12 (2) ◽  
pp. 301-308 ◽  
Author(s):  
Caige SUN ◽  
Kaiwen ZHONG ◽  
Xulong LIU ◽  
Liang XIE
Keyword(s):  
River Valley ◽  
Security Evaluation ◽  
Ecological Security ◽  
Gis Analysis

A Practical Conflicting Role-based Cloud Security Risk Evaluation Method

2019 ◽  
Vol 13 ◽  
Author(s):  
Jin Han ◽  
Jing Zhan ◽  
Xiaoqing Xia ◽  
Xue Fan
Keyword(s):  
Risk Evaluation ◽  
Evaluation Method ◽  
Service Providers ◽  
Risk Preferences ◽  
Cloud Service ◽  
Cloud Security ◽  
Third Party ◽  
Security Evaluation ◽  
Security Risk ◽  
Cloud Users

Background: Currently, Cloud Service Provider (CSP) or third party usually proposes principles and methods for cloud security risk evaluation, while cloud users have no choice but accept them. However, since cloud users and cloud service providers have conflicts of interests, cloud users may not trust the results of security evaluation performed by the CSP. Also, different cloud users may have different security risk preferences, which makes it difficult for third party to consider all users' needs during evaluation. In addition, current security evaluation indexes for cloud are too impractical to test (e.g., indexes like interoperability, transparency, portability are not easy to be evaluated). Methods: To solve the above problems, this paper proposes a practical cloud security risk evaluation method of decision-making based on conflicting roles by using the Analytic Hierarchy Process (AHP) with Aggregation of Individual priorities (AIP). Results: Not only can our method bring forward a new index system based on risk source for cloud security and corresponding practical testing methods, but also can obtain the evaluation result with the risk preferences of conflicting roles, namely CSP and cloud users, which can lay a foundation for improving mutual trusts between the CSP and cloud users. The experiments show that the method can effectively assess the security risk of cloud platforms and in the case where the number of clouds increased by 100% and 200%, the evaluation time using our methodology increased by only by 12% and 30%. Conclusion: Our method can achieve consistent decision based on conflicting roles, high scalability and practicability for cloud security risk evaluation.

Cyber Security Analysis of Academic Services based on Domain Delivery Services and Support using Indonesian E-Government Ratings (PEGI)

2020 ◽  
pp. 263-270
Author(s):  
Imam Riadi ◽  
Iwan Tti Riyadi Yanto ◽  
Eko Handoyo
Keyword(s):  
Higher Education ◽  
Information Systems ◽  
Information Service ◽  
Information Services ◽  
Security Evaluation ◽  
Security Level ◽  
Framework Analysis ◽  
Academic Information ◽  
Education Academic ◽  
Academic Services

Safe academic services are the most important part of universities. The security of academic services is very important to maintain information optimally and safely. Along with the development of technology, academic information services are often misused by some irresponsible parties that can cause threats. To prevent these things from happening, it is necessary to know the extent of governance of higher education academic information system security by evaluating. So the research was conducted to determine the maturity of the security of Higher Education academic information service security by using the COBIT 5 framework in the DSS05 domain. The DSS05 domain in COBIT 5 is a good framework for use in implementing and evaluating the security of academic information services. Meanwhile, to determine the achievement of the evaluation of the security level of academic information systems, the Indonesian e-government ranking (PEGI) method is required. The combination of the COBIT 5 framework in the DSS05 domain using the PEGI method in academic information security service is able to provide a level of achievement in the form of Customer Value. The results of the COBIT 5 framework analysis of the DSS05 domain using the PEGI method get a score of 3.50 so that the quality of academic information service security evaluation achievement is at a very good level. At this level, universities are increasingly open to technological development. Higher education has applied the concept of quantification in every process, and has always been monitored and controlled for its performance in the security of academic information systems.

Sign in / Sign up

Export Citation Format

Share Document