State Model Diagrams

2011 ◽  
pp. 192-210
Author(s):  
S Maj
Keyword(s):  
Computer Security ◽  
State Model ◽  
Security Threats ◽  
Management Tools ◽  
Diagram Method ◽  
Model Driven ◽  
Security Issues ◽  
Primary Network ◽  
Average Annual Loss ◽  
Display Configuration

The Internet is an integral part of business communications, however it was based on open standards without due regard to security issues consequently security threats are not only persistent but also increasing. The Computer Security Institute (CSI) 2007 reported a doubling of average annual loss by US companies. There are three primary network security threats: policy, technology, and configuration. This chapter is primarily concerned with the configuration and management of network devices. There are a number of different network management tools currently available, however typically it is problematic to concurrently display configuration data from devices and protocols whilst maintaining a navigational context. This chapter demonstrates how the State Model Diagram method is not only a universal model-driven network tool but also useful for the configuration and management of complex security protocols and devices.

National Concepts of Security and the Problem Of Integration in Transcaucasia

2006 ◽  
Vol 10 (2) ◽  
pp. 287-301
Author(s):  
Anush Begoyan
Keyword(s):  
Regional Integration ◽  
Regional Cooperation ◽  
Balance Of Power ◽  
Regional Security ◽  
Security Threats ◽  
Regional Powers ◽  
Security Issues ◽  
State Security ◽  
Joint Provision

AbstractThe article examines security issues of the Transcaucasian region with the focus on nonmilitary and trans-border security threats and a regional security community that also includes non-state security actors of the region, such as not-recognised autonomous entities, nations, ethnic groups, minorities, etc.This approach to regional security shifts the focus of policies from balance of power to closer regional integration and cooperation, as well as joint provision of regional security. Despite many objectives and existing obstacles to this scenario of regional development, the author sees it to be the only way toward a stable and long-term security in the region. The article argues that closer regional cooperation and integration would allow to accommodate interests and security concerns of non-state actors of the region and would bring the fate of regional issues back in the hands of the regional powers and create bases for sustainable and lasting peace in the region.

scholarly journals Multilevel classification of security threats in cloud computing

2017 ◽  
Vol 7 (1.5) ◽  
pp. 253
Author(s):  
N. Srinivasu ◽  
O. Sree Priyanka ◽  
M. Prudhvi ◽  
G. Meghana
Keyword(s):  
Cloud Computing ◽  
Web Application ◽  
Service Level Agreement ◽  
Service Level ◽  
Security Threats ◽  
Security Threat ◽  
Security Issues ◽  
Network Applications ◽  
Storage Network ◽  
Multilevel Classification

Cloud Security was provided for the services such as storage, network, applications and software through internet. The Security was given at each layer (Saas, Paas, and Iaas), in each layer, there are some security threats which became the major problem in cloud computing. In Saas, the security issues are mainly present in Web Application services and this issue can be overcome by web application scanners and service level agreement(SLA). In Paas, the major problem is Data Transmission. During transmission of data, some data may be lost or modified. The PaaS environment accomplishes proficiency to some extent through duplication of information. The duplication of information makes high accessibility of information for engineers and clients. However, data is never fully deleted instead the pointers to the data are deleted. In order to overcome this problem the techniques that used are encryption[12], data backup. In Iaas the security threat that occurs in is virtualization and the techniques that are used to overcome the threats are Dynamic Security Provisioning(DSC), operational security procedure, for which Cloud Software is available in the market, for e.g. Eucalyptus, Nimbus 6.

Social engineering as a threat to personal financial security

2021 ◽  
Vol 17 (1) ◽  
pp. 150-166
Author(s):  
Andrei L. LOMAKIN ◽  
Evgenii Yu. KHRUSTALEV ◽  
Gleb A. KOSTYURIN
Keyword(s):  
Information Security ◽  
Personal Information ◽  
Public Awareness ◽  
Social Engineering ◽  
Training System ◽  
Security Threats ◽  
Security Threat ◽  
Public And Private ◽  
Security Issues ◽  
The Government

Subject. As the socio-economic relationships are getting digitalized so quickly, the society faces more and more instances of cybercrime. To effectively prevent arising threats to personal information security, it is necessary to know key social engineering methods and security activities to mitigate consequences of emerging threats. Objectives. We herein analyze and detect arising information security threats associated with social engineering. We set forth basic guidelines for preventing threats and improving the personal security from social engineering approaches. Methods. The study relies upon methods of systems analysis, synthesis, analogy and generalization. Results. We determined the most frequent instances associated with social engineering, which cause personal information security threats and possible implications. The article outlines guidelines for improving the persona; security from social engineering approaches as an information security threat. Conclusions and Relevance. To make information security threats associated with social engineering less probable, there should be a comprehensive approach implying two strategies. First, the information security protection should be technologically improved, fitted with various data protection, antivirus, anti-fishing software. Second, people should be more aware of information security issues. Raising the public awareness, the government, heads of various departments, top executives of public and private organizations should set an integrated training system for people, civil servants, employees to proliferate the knowledge of information security basics.

Leveraging on Digital Footprints to Identify Potential Security Threats

2020 ◽  
pp. 1003-1017
Author(s):  
Loo Seng Neo
Keyword(s):  
National Level ◽  
The Internet ◽  
Security Threats ◽  
Law Enforcement Agencies ◽  
Security Issues ◽  
Violent Extremism ◽  
Technological Interventions ◽  
The World ◽  
Digital Footprints ◽  
Malicious Intent

The growing pervasiveness of the internet and the rise of social media have revolutionised how individuals communicate and interact with one another. Serving as an effective conduit for communication, these technological advancements have also been exploited by individuals with malicious intent (e.g., criminals, violent extremists). As the world witnesses an upward trend of such crime and security concerns in the online sphere, it places the ‘responsibility' on intelligence and law enforcement agencies to respond with the appropriate technological interventions. Thus, this article will discuss how digital footprints can be leveraged to identify potential security threats, particularly for crime and security issues that will result in negative repercussion at the national level, such as acts of violent extremism and hate crimes.

Economics of Cyber Security and the Way Forward

2018 ◽  
pp. 132-150
Author(s):  
Taiseera Al Balushi ◽  
Saqib Ali ◽  
Osama Rehman
Keyword(s):  
Communication Technology ◽  
Cyber Security ◽  
Cyber Attacks ◽  
Remote Access ◽  
Security Threats ◽  
The Public ◽  
Security Issues ◽  
Information And Communication ◽  
Financial Losses ◽  
Government Perspective

Initiatives carried by companies, institutes and governments to flourish and embellish the Information and Communication Technology (ICT) among the public have led to its penetration into every walk of life. ICT enhances the efficiency of various systems, such as the organisation and transfer of data. However, with the digital and remote access features of ICT comes the motivation towards financial, political and military gains by rivals. Security threats and vulnerabilities in existing ICT systems have resulted in cyber-attacks that are usually followed by substantial financial losses. This study discusses the security in ICT from a business, economic and government perspective. The study makes an attempt to understand the seriousness of the security issues and highlights the consequences of security breech from an economic perspective. Based on the performed analysis, the factors behind these attacks are provided along with recommendations for better preparations against them.

Articulating Wider Smartphone Emerging Security Issues in the Case of M-Government in Turkey

2013 ◽  
pp. 177-205
Author(s):  
Ronan de Kervenoael ◽  
Vasileios Yfantis
Keyword(s):  
Risk Management ◽  
Disaster Recovery ◽  
Intention To Use ◽  
Security Threats ◽  
Government Services ◽  
Security Issues ◽  
Emerging Country ◽  
Future Intention ◽  
Technical Capacity ◽  
Networking Technology

For the last several years, mobile devices and platform security threats, including wireless networking technology, have been top security issues. A departure has occurred from automatic anti-virus software based on traditional PC defense: risk management (authentication and encryption), compliance, and disaster recovery following polymorphic viruses and malware as the primary activities within many organizations and government services alike. This chapter covers research in Turkey as a reflection of the current market – e-government started officially in 2008. This situation in an emerging country presents the current situation and resistances encountered while engaging with mobile and e-government interfaces. The authors contend that research is needed to understand more precisely security threats and most of all potential solutions for sustainable future intention to use m-government services. Finally, beyond m-government initiatives' success or failure, the mechanisms related to public administration mobile technical capacity building and security issues are discussed.

Computer Security in Electronic Government

2011 ◽  
pp. 2026-2044 ◽  
Author(s):  
Alison Radl ◽  
Yu-Che Chen
Keyword(s):  
Computer Security ◽  
Electronic Government ◽  
Software Selection ◽  
Key Factors ◽  
District Size ◽  
School District Size ◽  
Security Issues ◽  
School Year ◽  
Mandatory Participation

As e-government projects proliferate at all levels of government, and as they transition from voluntary to mandatory participation, close examination is required, particularly the examination of security issues. The CIA (Confidentiality, Integrity, Availability) model offers a framework for examining e-government projects. This study examines the factors impacting security, using as a case study an education information system in the 2003-2004 school year. The study focuses on how CIA factors relate to a host of variables, such as school district size, software selection, technology staffing, technical competence and support, awareness of security issues, and project commitment. For the organizations participating in the project, typical factors of district size and software selection are found to be insignificant, and technical support is identified as one of the key factors promoting security.

Research on Campus Network Security Problem and Protection Strategy

2021 ◽  
pp. 1352-1369
Author(s):  
Yongli Liu ◽  
Weifang Zhai ◽  
Song Ji
Keyword(s):  
Network Security ◽  
The Internet ◽  
Security Threats ◽  
Campus Network ◽  
Application Layer ◽  
Layer System ◽  
Protection Measures ◽  
Protection Strategy ◽  
Security Issues ◽  
Security Problem

With the “Internet +” era of arrival, the major colleges and universities are in the construction of the wisdom of the campus, students and teachers living with the campus network is more and more closely related, Campus network security has become the protection of the wisdom of the campus construction. Campus network security issues become increasingly serious; a single security protection has been unable to meet the current security needs. This paper analyzes the major security threats facing the campus network, and presents the campus network security protection measures from the physical layer, network layer, system layer, application layer and management of five aspects, thus constructing the campus network's overall security defense system. The system has multiple security protection for Campus Network, thus improving the security of the campus network.

Auditor Evaluation and Reporting on Cybersecurity Risks

2022 ◽  
pp. 19-38
Author(s):  
Jeffrey S. Zanzig ◽  
Guillermo A. Francia III
Keyword(s):  
Computer Security ◽  
Management Program ◽  
Internet Security ◽  
Audit Committees ◽  
Certified Public Accountants ◽  
Security Risks ◽  
Internal Auditors ◽  
Security Issues ◽  
Proper Training ◽  
Risk Management Program

Tremendous improvements in information networking capabilities have brought with them increased security risks resulting from the deterioration of the ability of a physical layer of computer security to protect an organization's information system. As a result, audit committees have had to deal with new security issues as well as the need to understand the cyber perpetrator and ensure the proper training of employees to consider cybersecurity risks. Standard setters including the Institute of Internal Auditors and the American Institute of Certified Public Accountants have issued guidance about lines of defense and reporting on an entity's cybersecurity risk management program and controls, respectively. Each of these topics is considered along with how cybersecurity guidance from COBIT, the National Institute of Standards and Technology, and the Center for Internet Security can be mapped into five cyber infrastructure domains to provide an approach to evaluate a system of cybersecurity.

Analysis of Various Security Issues and Challenges in Cloud Computing Environment

2016 ◽  
pp. 221-247 ◽  
Author(s):  
Zhaolong Gou ◽  
Shingo Yamaguchi ◽  
B. B. Gupta
Keyword(s):  
Cloud Computing ◽  
Comparative Analysis ◽  
Solution Space ◽  
Future Research ◽  
Security Threats ◽  
Computing Environment ◽  
Cloud Computing Environment ◽  
Security Issues ◽  
On Demand ◽  
Recent Developments

Cloud computing is a system, where the resources of a data center are shared using virtualization technology, such that it provides elastic, on demand and instant services to its customers and charges them based on the resources they use. In this chapter, we will discuss recent developments in cloud computing, various security issues and challenges associated with Cloud computing environment, various existing solutions provided for dealing with these security threats and will provide a comparative analysis these approaches. This will provide better understanding of the various security problems associated with the cloud, current solution space, and future research scope to deal with such attacks in better way.

Sign in / Sign up

Export Citation Format

Share Document