URL Manipulation and the Slippery Slope

2015 ◽  
pp. 1648-1655
Author(s):  
Michael E. Whitman ◽  
Humayun Zafar
Keyword(s):  
Information Security ◽  
Computer Use ◽  
Computer Ethics ◽  
Slippery Slope ◽  
Web Browsers ◽  
Ivy League ◽  
Unauthorized Access ◽  
Documented Case ◽  
Black And White ◽  
Computer Misuse

While computer ethics and information security courses try to teach computer misuse and unauthorized access as clear black and white examples, when examining the use and potentially misuse of URLs the discussion becomes less clear. This paper examines a number of computer use ethical scenarios focusing on the modification of URLs within Web browsers. Using the documented case of applicants to several Ivy-league schools as a discussion point, this paper presents a survey of U.S. students enrolled in information security and computer ethics classes, asking at what point does modifying the URL become hacking, and at what point does it become unethical. The findings of this study are discussed.

URL Manipulation and the Slippery Slope

2013 ◽  
Vol 5 (2) ◽  
pp. 43-50
Author(s):  
Michael E. Whitman ◽  
Humayun Zafar
Keyword(s):  
Information Security ◽  
Computer Use ◽  
Computer Ethics ◽  
Slippery Slope ◽  
Web Browsers ◽  
Ivy League ◽  
Unauthorized Access ◽  
Documented Case ◽  
Black And White ◽  
Computer Misuse

While computer ethics and information security courses try to teach computer misuse and unauthorized access as clear black and white examples, when examining the use and potentially misuse of URLs the discussion becomes less clear. This paper examines a number of computer use ethical scenarios focusing on the modification of URLs within Web browsers. Using the documented case of applicants to several Ivy-league schools as a discussion point, this paper presents a survey of U.S. students enrolled in information security and computer ethics classes, asking at what point does modifying the URL become hacking, and at what point does it become unethical. The findings of this study are discussed.

scholarly journals INFORMATION SECURITY AS A COMPONENT OF THE ECONOMIC SECURITY OF THE ENTERPRISE

2021 ◽  
pp. 119-129
Author(s):  
Vera Shumilina ◽  
Elena Tetunashvili
Keyword(s):  
Information Security ◽  
Information Leakage ◽  
Economic Security ◽  
Confidential Information ◽  
Unauthorized Access ◽  
Modern Enterprise

The article is devoted to the study of information security as an integral part of the economic security of any modern enterprise. Threats are described that can lead to disclosure of confidential information, leakage of confidential information, unauthorized access to protected information, etc. Means and ways of countering the presented threats are also given

Intrusion Prevention System

2016 ◽  
pp. 245-258
Author(s):  
Bijaya Kumar Panda ◽  
Manoranjan Pradhan ◽  
Sateesh Kumar Pradhan
Keyword(s):  
Information Security ◽  
Information Sharing ◽  
Rapid Growth ◽  
Detection Methods ◽  
Intrusion Prevention ◽  
Unauthorized Access ◽  
Prevention System ◽  
Intrusion Prevention Systems ◽  
Intrusion Prevention System ◽  
Use Of Internet

In the last decade, there is a rapid growth in the use of Internet by the organization for information sharing. As information is very vital to the organizations, it should be preserved and insulated from any unauthorized access or alternation. In last few years, attacks on the computer infrastructures have increased exponentially. Several information security techniques are available now a days like firewalls, anti-virus software and Intrusion prevention systems (IPSs), which are important tools for protecting an organization from intrusions. Now most attacks are impossible to defend with firewalls and anti-virus software alone. Without an IPS, such attacks are difficult to detect and prevent. This chapter presents different definitions of intrusion prevention system with meaningful explanation; compare network IPS with Host IPS, common and the advanced detection methods, common IPS components, coverage of attacks by IPS and criteria to select right IPS. Finally, this chapter concludes with an analysis of the challenges that still remain to be resolved.

Digital Image Steganography

2017 ◽  
pp. 324-346 ◽  
Author(s):  
Chitra A. Dhawale ◽  
Naveen D. Jambhekar
Keyword(s):  
Communication Network ◽  
Performance Analysis ◽  
Information Security ◽  
Digital Image ◽  
Data Communication ◽  
Image Steganography ◽  
Digital Data ◽  
Confidential Information ◽  
Unauthorized Access ◽  
Data Communication Network

Digital data transmitted over the insecure communication can be prone to attacks. Intruders try various attacks to unauthorized access of the confidential information. The Steganography is such as security system that provide the protection to the images, text and other type of data digitally transferred through the data communication network. This chapter elaborates the basics of Digital Image Steganographic techniques from ancient era to digital edge, types of images used for the steganography, payload used for the steganography, various attacks and different algorithms that can provide the information security. The performance analysis of the various Digital Image Steganographic algorithms are discussed. The current applications and their necessities are discussed in this chapter.

scholarly journals Cloud-Based Global Online Marketplaces Review on Trust and Security

2019 ◽  
Vol 13 (04) ◽  
pp. 96
Author(s):  
Osman Ghazali ◽  
Chun Yang Leow ◽  
Shahzad Qaiser ◽  
Nanthini Pattabiraman ◽  
Sathiyaroobaa Vasuthevan ◽  
...  
Keyword(s):  
Information Security ◽  
The Internet ◽  
Technical Requirement ◽  
Tabular Form ◽  
Unauthorized Access ◽  
Building Trust ◽  
Online Marketplace ◽  
Online Marketplaces ◽  
Access Information

Customer disposition to data, nature of the information on site, protection<strong> </strong>concerns, trust, security concerns, and the notoriety of organization efficaciously affect the trust of Internet shoppers in the site. Two noteworthy and basic issues for e-commerce sites and consumers are trust as well as security. A belief that someone is good and honest and will not harm you, or something is safe and reliable is called trust; while security is an attempt to safeguard the data from unauthorized access. Information security is a vital management as well as technical requirement over the internet for effective and secure payment transaction activities. The safety of e-commerce resources from use, destruction, unauthorized access and alteration is known as E-commerce security so there is an urgent need to study its dimensions such as authenticity, integrity, availability, privacy, confidentiality and non-repudiation. This paper reports a review of four popular online marketplaces which are Alibaba, Amazon, eBay andTaoBao as case study on two main criteria namely building trust among users and ensuring security on the platform. Furthermore, we discuss the methods being used by each online marketplace to build trust and their unique way ofimproving the security. Finally, different ways of building trust and technique to ensure the security is presented in a tabular form for each online marketplace.

Mobile Public Key Infrastructures

2007 ◽  
pp. 581-588
Author(s):  
I. Chochliouros ◽  
G. Lalopoulos ◽  
S. Chochliouros ◽  
A. Spiliopoulou
Keyword(s):  
Information Systems ◽  
Information Security ◽  
European Commission ◽  
Public Key ◽  
Security Measures ◽  
Data Confidentiality ◽  
Malicious Software ◽  
Unauthorized Access

From today’s perspective, network and information security (European Commission, 2001) is about ensuring the availability of services and data; preventing the disruption and unauthorized interception of communications; confirming that data sent, received, or stored is complete and unchanged; securing data confidentiality; protecting information systems against unauthorized access; and protecting against attacks (involving malicious software and securing dependable authentication—that is, the confirming of an asserted identity of entities or users). Specific security measures therefore should be taken in order to establish an appropriate environment.

Intrusion Prevention System

2020 ◽  
pp. 1285-1298
Author(s):  
Bijaya Kumar Panda ◽  
Manoranjan Pradhan ◽  
Sateesh Kumar Pradhan
Keyword(s):  
Information Security ◽  
Information Sharing ◽  
Rapid Growth ◽  
Detection Methods ◽  
Intrusion Prevention ◽  
Unauthorized Access ◽  
Prevention System ◽  
Intrusion Prevention Systems ◽  
Intrusion Prevention System ◽  
Use Of Internet

In the last decade, there is a rapid growth in the use of Internet by the organization for information sharing. As information is very vital to the organizations, it should be preserved and insulated from any unauthorized access or alternation. In last few years, attacks on the computer infrastructures have increased exponentially. Several information security techniques are available now a days like firewalls, anti-virus software and Intrusion prevention systems (IPSs), which are important tools for protecting an organization from intrusions. Now most attacks are impossible to defend with firewalls and anti-virus software alone. Without an IPS, such attacks are difficult to detect and prevent. This chapter presents different definitions of intrusion prevention system with meaningful explanation; compare network IPS with Host IPS, common and the advanced detection methods, common IPS components, coverage of attacks by IPS and criteria to select right IPS. Finally, this chapter concludes with an analysis of the challenges that still remain to be resolved.

Understanding the Information Security Landscape in South Africa

2012 ◽  
pp. 90-102
Author(s):  
Blessing Maumbe ◽  
Vesper T. Owei
Keyword(s):  
South Africa ◽  
Information Security ◽  
Information Overload ◽  
Security Risks ◽  
Unauthorized Access ◽  
Major Threat ◽  
Individual Privacy ◽  
Security Infrastructure ◽  
Privacy And Confidentiality ◽  
Withholding Information

Information security risks are a major threat to South Africa’s bid to build a broad-based information society. The integration of information security in e-government is no longer an option, but an imperative given the resulting “information overload” and the need to filter “good” from “bad” information. Unless South Africa integrates information security in its e-government development policy and practices, the acclaimed benefits of e-government will not be realized. The moral hazard problems arising from bad information behavior such as human manipulation, withholding information, unauthorized access, and violation of individual privacy and confidentiality heightens the need to combat info-security risks and vulnerabilities. South Africa’s readiness to deal with the information security risks has come under scrutiny. The information security infrastructure in South Africa is also not clearly understood. This chapter examines South Africa’s information security landscape and describes how institutional and agency coordination could help improve information security in e-government.

Sign in / Sign up

Export Citation Format

Share Document