Cyber Assist Project and Its Security Requirement

Abstract Objective The objective of this paper is to provide a general understanding and awareness of the physical security requirement in Oil & Gas Industry, explore various Physical security solutions and how the same is different from Network Security and highlight its importance followed by explaining how same can be achieved in industrial environment by implementing different layers of security measures.

Download Full-text

Idea: Simulation Based Security Requirement Verification for Transaction Level Models

Lecture Notes in Computer Science - Engineering Secure Software and Systems ◽

10.1007/978-3-642-19125-1_21 ◽

2011 ◽

pp. 264-271

Author(s):

Johannes Loinig ◽

Christian Steger ◽

Reinhold Weiss ◽

Ernst Haselsteiner

Keyword(s):

Security Requirement ◽

Simulation Based ◽

Transaction Level

Download Full-text

A Mark-Up Language for the Specification of Information Security Governance Requirements

Privacy Solutions and Security Frameworks in Information Protection ◽

10.4018/978-1-4666-2050-6.ch007 ◽

2013 ◽

pp. 103-123

Author(s):

Anirban Sengupta ◽

Chandan Mazumdar

Keyword(s):

Information Systems ◽

Information Security ◽

Security Requirements ◽

Security Requirement ◽

Security Governance ◽

Digital World ◽

Information Security Governance ◽

Version 2.0 ◽

Enterprise Security ◽

And Control

As enterprises become dependent on information systems, the need for effective Information Security Governance (ISG) assumes significance. ISG manages risks relating to the confidentiality, integrity and availability of information, and its supporting processes and systems, in an enterprise. Even a medium-sized enterprise contains a huge collection of information and other assets. Moreover, risks evolve rapidly in today’s connected digital world. Therefore, the proper implementation of ISG requires automation of the various monitoring, analysis, and control processes. This can be best achieved by representing information security requirements of an enterprise in a standard, structured format. This paper presents such a structured format in the form of Enterprise Security Requirement Markup Language (ESRML) Version 2.0. It is an XML-based language that considers the elements of ISO 27002 best practices.

Download Full-text

Computationally Efficient Cooperative Public Key Authentication Protocols in Ubiquitous Sensor Network

Advancements in Distributed Computing and Internet Technologies ◽

10.4018/978-1-61350-110-8.ch010 ◽

2011 ◽

pp. 211-229

Author(s):

Abedelaziz Mohaisen ◽

Tamer AbuHmed ◽

DaeHun Nyang

Keyword(s):

Sensor Networks ◽

Sensor Network ◽

Key Management ◽

Sensor Nodes ◽

Public Key ◽

Wireless Sensor ◽

Security Requirement ◽

Computationally Efficient ◽

Authentication Protocols ◽

Public Keys

The use of public key algorithms to sensor networks brings all merits of these algorithms to such networks: nodes do not need to encounter each other in advance in order to be able to communicate securely. However, this will not be possible unless “good” key management primitives that guarantee the functionality of these algorithms in the wireless sensor networks are provided. Among these primitives is public key authentication: before sensor nodes can use public keys of other nodes in the network to encrypt traffic to them, they need to make sure that the key provided for a particular node is authentic. In the near past, several researchers have addressed the problem and proposed solutions for it as well. In this chapter we review these solutions. We further discuss a new scheme which uses collaboration among sensor nodes for public key authentication. Unlike the existing solutions for public key authentication in sensor network, which demand a fixed, yet high amount of resources, the discussed work is dynamic; it meets a desirable security requirement at a given overhead constraints that need to be provided. It is scalable where the accuracy of the authentication and level of security are merely dependent upon the desirable level of resource consumption that the network operator wants to put into the authentication operation.

Download Full-text