scholarly journals Bangkolo: Aplikasi Vulnerability Identification Berbasis Hybrid Apps

2020 ◽  
Vol 3 (1) ◽  
pp. 39-44
Author(s):  
Dedy Hariyadi ◽  
Fazlurrahman Fazlurrahman ◽  
Hendro Wijayanto
Keyword(s):  
Information System ◽  
Information Systems ◽  
User Interface ◽  
System Security ◽  
Graphic User Interface ◽  
Command Line ◽  
Information Systems Security ◽  
Command Line Interface ◽  
Penetration Testing ◽  
Systems Security

Keamanan merupakan hal penting dalam sistem maupun jaringan dalam melindungi data informasi. Tingginya tingkat laporang celah keamanan dari Edgescan menunjukkan masih minimnya pengembang sistem dan jaringan dalam hal menutamakan keamanan. Information System Security Assesment Framework (ISSAF) merupakan metodologi penetration testing yang dikembangkan oleh Open Information Systems Security Group. Dalam framework tersebut terdiri dari tiga fase, yaitu Planing and Preparation, Assessment dan Reporting, Clean-up and Destroy Astefacts. Dalam melakukan Vulnerabilities Identification diperlukan tools untuk mengetahui potensi celah keamanan dalam bentuk laporan. Ini sangat diperlukan untuk mempermudah analisis, penggunaan dan meminimalisir biaya pentesting. Selama ini tools pentesting kebanyakan masih menggunakan model Command Line Interface (CLI) sehingga sulit digunakan oleh orang awam. Sehingga diperlukan tools berbasis Graphic User Interface (GUI). Dengan pendekatan Hybrid Apps dapat dikembangkan aplikasi pentesting berbasis Graphic User Interface  yang memanfaatkan kelebihan teknologi native dan web. Bangkolo merupakan aplikasi untuk pentesting yang dikembangkan dari framework ISSAF dan pendekatan Hybrid Apps.

scholarly journals Challenges Facing Information Systems Security Management in Higher Learning Institutions: A Case Study of the Catholic University of Eastern Africa - Kenya

2014 ◽  
Vol 3 (1) ◽  
pp. 336-349
Author(s):  
Bichanga Walter Okibo ◽  
Obara Brigit Ochiche
Keyword(s):  
Information System ◽  
Information Systems ◽  
Security Management ◽  
System Security ◽  
Higher Learning ◽  
Eastern Africa ◽  
Information Systems Security ◽  
Information System Security ◽  
Systems Security ◽  
Learning Institutions

With the popularity of internet applications, many organizations are facing unprecedented security challenges. Security techniques and management tools have caught a lot of attention from both academia and practitioners. However, there is lacking a theoretical framework for the challenges facing information security management in higher learning institutions. Thus this research looked into the challenges facing information systems security management in higher learning institutions. The study was guided by understanding the major challenges facing Information Systems Security Management and establishing the extent of the use of Information Systems Security Management in higher learning institutions. The study used descriptive survey design. It targeted information systems projects managers, administrators or top management and other users (staff) of the systems in key departments. Systematic sampling strategy was used. Descriptive statistics of SPSS were used to analyze the data. Factor analysis technique was used to identify the major challenges that affect management of an institution’s information system security. Pearson’s Chi-Square was used to test the relationships that exist between the categorical variables. The study found out that system vulnerability, computer crime and abuse, environmental security and financial backing/security are key challenges institutions of higher learning are experiencing in the management of their information systems. The study recommends the implementation of new policies and procedures to guide information system security. Programs for monitoring and evaluating information systems security in relation to performance indicators should be put in place. Institutions should invest heavily in developing their staff through training programmes such as seminars, workshops and conferences to further develop staff skills and abilities on information systems security issues.

scholarly journals Implementation of Regular Expressions for CLI and WEB-based Backdoor Scanners

2021 ◽  
Vol 1 (1) ◽  
Author(s):  
Nikko Enggaliano Pratama ◽  
Arif Fitrani
Keyword(s):  
Information System ◽  
Information Systems ◽  
Private Sector ◽  
Data Security ◽  
False Positive ◽  
Regular Expressions ◽  
Command Line ◽  
Command Line Interface ◽  
Web Based ◽  
Security Issues

The author realizes that in this era, information systems are increasingly developing, there are so many system developers who can develop great and useful applications. But not many of these developers care about data security issues or information systems. The more an application that is running and is also being developed will have an impact along with the increasing number of cybercrime or hacktivists attacking the application or a server. The actors not only carried out attacks and then ignored the servers, many of them left a backdoor, to facilitate future actions. Many of the information system developers do not understand what a backdoor is and what a backdoor looks like, because many of the backdoor is developed with complicated techniques or with common syntax that the developer considers reasonable. Here the author developed a backdoor scanner application that can run on any OS, Windows or Unix with the same results, and can run in CLI (Command Line Interface) or in Web mode. Testing of the backdoor scanner application has been carried out by various elements ranging from government, private sector and the Open Source community who can still detect all tested backdoors with 100% accuracy even though the results issued are still False Positive. The backdoor tested is a backdoor that has been developed and has been in circulation before or is called a well-know backdoor.

scholarly journals Fractal Network Security Theory: A Dynamic Theory to Better Explain and Predict Information System Network Security Risks

2018 ◽  
Author(s):  
Kevin McReynolds
Keyword(s):  
Information System ◽  
Information Systems ◽  
Network Security ◽  
Dynamic Theory ◽  
Current View ◽  
Information Systems Security ◽  
Security Risks ◽  
Systems Security ◽  
Fractal Network

<p>Monthly, even weekly, information systems security researchers seem to report thousands of Information Systems Network (ISN) node attacks and hundreds of new attack vectors. The current view of networking nodes does not account for their roughness and complexity. This paper presents a theory, Fractal Network Security (FNS), which is more dynamic and natural and the only theory addressing hardware nodes on ISNs.</p>

scholarly journals Fractal Network Security Theory: A Dynamic Theory to Better Explain and Predict Information System Network Security Risks

2018 ◽  
Author(s):  
Kevin McReynolds
Keyword(s):  
Information System ◽  
Information Systems ◽  
Network Security ◽  
Dynamic Theory ◽  
Current View ◽  
Information Systems Security ◽  
Security Risks ◽  
Systems Security ◽  
Fractal Network

<p>Monthly, even weekly, information systems security researchers seem to report thousands of Information Systems Network (ISN) node attacks and hundreds of new attack vectors. The current view of networking nodes does not account for their roughness and complexity. This paper presents a theory, Fractal Network Security (FNS), which is more dynamic and natural and the only theory addressing hardware nodes on ISNs.</p>

scholarly journals ENHANCING SAFETY INFORMATION SYSTEMS WITH THE USE ISO/IEC 27000

2014 ◽  
Vol 4 (1) ◽  
Author(s):  
JOŽE ŠREKL ◽  
ANDREJKA PODBREGAR
Keyword(s):  
Information Technology ◽  
Information System ◽  
Information Systems ◽  
Safety Information ◽  
System Management ◽  
Information Systems Security ◽  
Cyber Terrorism ◽  
Systems Security ◽  
Improper Use ◽  
A Company

A company should pay much attention to information systems security. It is necessary to secure the support system of the organization if we want continuity and effectiveness of business. In addition to providing security through technological precautions to prevent intrusion and abuse, it is necessary to pay more attention to the vulnerability and threats caused by the engaged users. Here we refer to unintentional threats, as a result of faulty workmanship or lack of knowledge of the information system. It is important to strive to reduce the possibility of causing the occurrence of incidents which are the result of improper use of information technology, which is due to ignorance. An organization shall consider and identify vulnerabilities of the system and threats to it. We confront the growing amounts of information in electronic form. Ensuring security of information systems (IS) in the workplace involves many steps that a company must adopt and carry out. The vulnerability of the systems is being examined, whereas the form of the new age of terrorism, cyber- terrorism, is being presented. This paper deals with ways of reducing risks and increasing safety and security of IS. It presents possible ways of ensuring the safe use of IS. Key words:Information system, management, safety, security.

scholarly journals The Octave Allegro Method in Risk Management Assessment of Educational Institutions

2020 ◽  
Vol 2 (2) ◽  
pp. 167-179
Author(s):  
Jane Hom ◽  
Boonsri Anong ◽  
Kim Beom Rii ◽  
Lee Kyung Choi ◽  
Kenita Zelina
Keyword(s):  
Information System ◽  
Risk Management ◽  
Information Systems ◽  
Business Processes ◽  
Educational Institutions ◽  
Information Systems Security ◽  
Financial Loss ◽  
Systems Security ◽  
Academic Information ◽  
A Company

Risk management is useful in overcoming various problems such as not optimal business processes, the company’s reputation down, financial loss, or bankruptcy of a company. In the application of information systems, most organizations or companies have not noticed the importance of information systems security as well as the assets and impacts that arise. For that, the risk management assessment is used in reducing the errors that occur in the information system of the company's business processes. The risk management assessment is applied to the information system along with its assets in evaluating the possibilities of menaces and vulnerabilities. The Risk management assessment analysis is applied to the academic information system in universities. The result of the risk assessment is the results of recommendations on the stages that need to be done in protecting the assets of information systems and information systems themselves.

The effectiveness of web advertising, its legal regulation and the problem of information systems security

2020 ◽  
Vol 4 (3(12)) ◽  
pp. 1-15
Author(s):  
Samira Ilgarovna Proshkina ◽  
Keyword(s):  
Information Systems ◽  
Computational Models ◽  
Evolutionary Dynamics ◽  
Legal Regulation ◽  
Information Systems Security ◽  
Systematic Analysis ◽  
Web Advertising ◽  
Systems Security ◽  
Business Structures ◽  
Display Location

The work is devoted to an urgent problem — the study of the evolutionary dynamics of web advertising, its assessment and effectiveness, as well as the problem of legal support and security of information systems. The goal is a systematic analysis of web advertising in an unsafe information field, its relevance and criteria for assessing marketing efforts, minimizing risks, maximizing additional profits and image. Research hypothesis — the effectiveness of web advertising is determined by the form of advertising, place of display, location of the block, model of calculation of the advertising campaign. An approach based on the establishment of preferences, partnership between the state and business structures is emphasized. It takes into account the COVID-19 pandemic, a slowdown in the pace and features of the evolution of business companies in self-isolation. The subtasks of influence on the advertising efficiency of the site’s features and web advertising are highlighted. A comprehensive analysis of information and logical security and computational models of web advertising companies was also carried out.

Sign in / Sign up

Export Citation Format

Share Document