Information Security Technical Report最新文献_第3页

Feature extraction from vein images using spatial information and chain codes 基于空间信息和链码的静脉图像特征提取

Information Security Technical Report Pub Date : 2012-02-01 DOI: 10.1016/j.istr.2012.02.003

Anika Pflug , Daniel Hartung , Christoph Busch

引用次数: 28

Corrigendum to “Social networking as a nexus for engagement and exploitation of young people” [Inform Secur Tech Rep 16 (2) (2011) 44–50] “社交网络作为参与和利用年轻人的纽带”的勘误表[信息安全技术代表16 (2)(2011)44-50]

Information Security Technical Report Pub Date : 2012-02-01 DOI: 10.1016/j.istr.2012.02.002

Ethel Quayle , Max Taylor

引用次数: 0

Economics and the cyber challenge 经济和网络挑战

Information Security Technical Report Pub Date : 2012-02-01 DOI: 10.1016/j.istr.2011.12.003

Simon Walker

{"title":"Economics and the cyber challenge","authors":"Simon Walker","doi":"10.1016/j.istr.2011.12.003","DOIUrl":"10.1016/j.istr.2011.12.003","url":null,"abstract":"<div><p>Economics can be used as a tool to explain, describe, and to a certain extent predict many forms of human behaviour. However, there is only a limited body of work on its application to information security, much of which is acknowledged as partial or incomplete. As a consequence, there is a paucity of robust explanatory or predictive models that are tuned for the peculiarities of the “cyber” challenge, either to organisations, or, at a higher level, the nation state.</p><p>The effect of this is that the base arguments for information security business cases are often weak or flawed; as a result, there is an argument that both organisations and nation states will therefore tend to underinvest in information security. To improve this position, there would be benefits for information security, as a profession adopting economic models used in other areas of endeavour that historically have suffered similar problems. One potential model is full-cost accounting.</p><p>However, there are a number of further implications. These include an underlining of the importance of information security professional “speaking business language”. Also highlighted is the potential value of building a common knowledge base of the true cost of security failures, akin to the actuarial bodies of knowledge used in the insurance industry, rather than the partial and imperfect measures in use today.</p></div>","PeriodicalId":100669,"journal":{"name":"Information Security Technical Report","volume":"17 1","pages":"Pages 9-18"},"PeriodicalIF":0.0,"publicationDate":"2012-02-01","publicationTypes":"Journal Article","fieldsOfStudy":null,"isOpenAccess":false,"openAccessPdf":"https://sci-hub-pdf.com/10.1016/j.istr.2011.12.003","citationCount":null,"resultStr":null,"platform":"Semanticscholar","paperid":"115786490","PeriodicalName":null,"FirstCategoryId":null,"ListUrlMain":null,"RegionNum":0,"RegionCategory":"","ArticlePicture":[],"TitleCN":null,"AbstractTextCN":null,"PMCID":"","EPubDate":null,"PubModel":null,"JCR":null,"JCRName":null,"Score":null,"Total":0}

引用次数: 7

Integrated assessment and mitigation of physical and digital security threats: Case studies on virtualization 物理和数字安全威胁的综合评估和缓解:虚拟化案例研究

Information Security Technical Report Pub Date : 2011-08-01 DOI: 10.1016/j.istr.2011.08.003

André van Cleeff , Wolter Pieters , Roel Wieringa , Frits van Tiel

{"title":"Integrated assessment and mitigation of physical and digital security threats: Case studies on virtualization","authors":"André van Cleeff , Wolter Pieters , Roel Wieringa , Frits van Tiel","doi":"10.1016/j.istr.2011.08.003","DOIUrl":"10.1016/j.istr.2011.08.003","url":null,"abstract":"<div><p>Virtualization is one of the enabling technologies of cloud computing. It turns once dedicated physical computing resources such as servers into digital resources that can be provisioned on demand. Cloud computing thus tends to replace physical with digital security controls, and cloud security must be understood in this context. In spite of extensive research on new hardware-enabled solutions such as trusted platforms, not enough is known about the actual physical-digital security trade-off in practice. In this paper, we review what is currently known about security aspects of the physical-digital trade-off, and then report on three case studies of private clouds that use virtualization technology, with the purpose of identifying generalizable guidelines for security trade-off analysis. We identify the important security properties of physical and digital resources, analyze how these have been traded off against each other in these cases, and what the resulting security properties were, and we identify limits to virtualization from a security point of view. The case studies show that physical security mechanisms all work through inertness and visibility of physical objects, whereas digital security mechanisms require monitoring and auditing. We conclude with a set of guidelines for trading off physical and digital security risks and mitigations. Finally, we show how our findings can be used to combine physical and digital security in new ways to improve virtualization and therefore also cloud security.</p></div>","PeriodicalId":100669,"journal":{"name":"Information Security Technical Report","volume":"16 3","pages":"Pages 142-149"},"PeriodicalIF":0.0,"publicationDate":"2011-08-01","publicationTypes":"Journal Article","fieldsOfStudy":null,"isOpenAccess":false,"openAccessPdf":"https://sci-hub-pdf.com/10.1016/j.istr.2011.08.003","citationCount":null,"resultStr":null,"platform":"Semanticscholar","paperid":"121297363","PeriodicalName":null,"FirstCategoryId":null,"ListUrlMain":null,"RegionNum":0,"RegionCategory":"","ArticlePicture":[],"TitleCN":null,"AbstractTextCN":null,"PMCID":"","EPubDate":null,"PubModel":null,"JCR":null,"JCRName":null,"Score":null,"Total":0}

引用次数: 8

Analysis of recommended cloud security controls to validate OpenPMF “policy as a service” 分析推荐的云安全控制以验证OpenPMF“策略即服务”

Information Security Technical Report Pub Date : 2011-08-01 DOI: 10.1016/j.istr.2011.08.001

Ulrich Lang , Rudolf Schreiner

引用次数: 11

Looking at clouds from both sides: The advantages and disadvantages of placing personal narratives in the cloud 从两个角度看云:将个人叙述放在云中的利弊

Information Security Technical Report Pub Date : 2011-08-01 DOI: 10.1016/j.istr.2011.09.001

Lizzie Coles-Kemp , Joseph Reddington , Patricia A.H. Williams

引用次数: 25

Positive perspectives on cloud security 对云安全的积极看法

Information Security Technical Report Pub Date : 2011-08-01 DOI: 10.1016/j.istr.2011.08.002

Piers Wilson

引用次数: 32

Trust in the Cloud 对云的信任

Information Security Technical Report Pub Date : 2011-08-01 DOI: 10.1016/j.istr.2011.08.006

Imad M. Abbadi, Andrew Martin

{"title":"Trust in the Cloud","authors":"Imad M. Abbadi, Andrew Martin","doi":"10.1016/j.istr.2011.08.006","DOIUrl":"10.1016/j.istr.2011.08.006","url":null,"abstract":"<div><p>Cloud infrastructure is expected to be able to support Internet scale critical applications (e.g. hospital systems and smart grid systems). Critical infrastructure services and organizations alike will not outsource their critical applications to a public Cloud without strong assurances that their requirements will be enforced. Central to this concern is that the user should be provided with evidence of the trustworthiness of the elements of the Cloud. Establishing Cloud’s trust model is important but the Cloud’s infrastructure complexity and dynamism makes it difficult to address.</p><p>Establishing trust in the Cloud is one of the key objectives of the EU funded TClouds (Trustworthy Clouds) project<span><sup>1</sup></span>. In TClouds we focus on building trust models that provide various levels of transparency in the context of technical complexities and trust establishment. These trust models are not only beneficial to a Cloud’s users, but also to Cloud providers, collaborating Clouds-of-Clouds, and external auditors. In this paper we explore this problem, and summarize some of the recent results from the TClouds project in context of trust establishment.</p></div>","PeriodicalId":100669,"journal":{"name":"Information Security Technical Report","volume":"16 3","pages":"Pages 108-114"},"PeriodicalIF":0.0,"publicationDate":"2011-08-01","publicationTypes":"Journal Article","fieldsOfStudy":null,"isOpenAccess":false,"openAccessPdf":"https://sci-hub-pdf.com/10.1016/j.istr.2011.08.006","citationCount":null,"resultStr":null,"platform":"Semanticscholar","paperid":"132796836","PeriodicalName":null,"FirstCategoryId":null,"ListUrlMain":null,"RegionNum":0,"RegionCategory":"","ArticlePicture":[],"TitleCN":null,"AbstractTextCN":null,"PMCID":"","EPubDate":null,"PubModel":null,"JCR":null,"JCRName":null,"Score":null,"Total":0}

引用次数: 91

Considerations for mobile authentication in the Cloud 云中的移动身份验证注意事项

Information Security Technical Report Pub Date : 2011-08-01 DOI: 10.1016/j.istr.2011.09.009

Zaheer Ahmad , Keith E. Mayes , Song Dong , Kostas Markantonakis

引用次数: 24

Internet cloud security: The illusion of inclusion 互联网云安全:包容的幻觉

Information Security Technical Report Pub Date : 2011-08-01 DOI: 10.1016/j.istr.2011.08.005

David Teneyuca

引用次数: 59