Information Security Technical Report最新文献_第5页

A survey on fraud and service misuse in voice over IP (VoIP) networks IP语音(VoIP)网络中的欺诈和服务滥用调查

Information Security Technical Report Pub Date : 2011-02-01 DOI: 10.1016/j.istr.2010.10.012

Yacine Rebahi , Mohamed Nassar , Thomas Magedanz , Olivier Festor

引用次数: 16

Side effects of identity management in SIP VoIP environment SIP VoIP环境下身份管理的副作用

Information Security Technical Report Pub Date : 2011-02-01 DOI: 10.1016/j.istr.2011.07.002

Ge Zhang , Yacine Rebahi

引用次数: 2

Challenges for the security analysis of Next Generation Networks 下一代网络安全分析面临的挑战

Information Security Technical Report Pub Date : 2011-02-01 DOI: 10.1016/j.istr.2010.10.010

Serap Atay , Marcelo Masera

{"title":"Challenges for the security analysis of Next Generation Networks","authors":"Serap Atay , Marcelo Masera","doi":"10.1016/j.istr.2010.10.010","DOIUrl":"10.1016/j.istr.2010.10.010","url":null,"abstract":"<div><p>The increasing complexity of information and telecommunications systems and networks is reaching a level beyond human ability, mainly from the security assessment viewpoint. Methodologies currently proposed for managing and assuring security requirements fall short of industrial and societal expectations. The statistics about vulnerabilities and attacks show that the security, reliability and availability objectives are not reached and that the general threat situation is getting worse. With the deployment of Next Generation Networks – NGNs, the complexity of networks, considering their architecture, speed and amount of connections, will increase exponentially. There are several proposals for the network and security architectures of NGNs, but current vulnerability, threat and risk analysis methods do not appear adequate to evaluate them. Appropriate analysis methods should have some additional new characteristics, mainly regarding their adaptation to the continuous evolution of the NGNs. In addition, the application of security countermeasures will require technological improvements, which will demand further security analyses. This paper evaluates the current vulnerability, threat and risk analysis methods from the point of view of the new security requirements of NGNs. Then, the paper proposes to use autonomic and self-adaptive systems/applications for assuring the security of NGNs.</p></div>","PeriodicalId":100669,"journal":{"name":"Information Security Technical Report","volume":"16 1","pages":"Pages 3-11"},"PeriodicalIF":0.0,"publicationDate":"2011-02-01","publicationTypes":"Journal Article","fieldsOfStudy":null,"isOpenAccess":false,"openAccessPdf":"https://sci-hub-pdf.com/10.1016/j.istr.2010.10.010","citationCount":null,"resultStr":null,"platform":"Semanticscholar","paperid":"127875505","PeriodicalName":null,"FirstCategoryId":null,"ListUrlMain":null,"RegionNum":0,"RegionCategory":"","ArticlePicture":[],"TitleCN":null,"AbstractTextCN":null,"PMCID":"","EPubDate":null,"PubModel":null,"JCR":null,"JCRName":null,"Score":null,"Total":0}

引用次数: 27

Clustering NGN user behavior for anomaly detection NGN用户行为聚类异常检测

Information Security Technical Report Pub Date : 2011-02-01 DOI: 10.1016/j.istr.2010.10.011

Claudio Mazzariello , Paolo De Lutiis , Dario Lombardo

引用次数: 5

Matchmaking between PCI-DSS and Security PCI-DSS与安全的对接

Information Security Technical Report Pub Date : 2010-11-01 DOI: 10.1016/j.istr.2011.03.001

André Marïen

引用次数: 0

PCI DSS audit and compliance PCI DSS审计和遵从性

Information Security Technical Report Pub Date : 2010-11-01 DOI: 10.1016/j.istr.2011.02.004

Georges Ataya

引用次数: 16

Compliance complacency: How ‘check-box’ compliancy remains a pitfall for many organizations worldwide 遵从性自满:“复选框”遵从性如何仍然是全球许多组织的陷阱

Information Security Technical Report Pub Date : 2010-11-01 DOI: 10.1016/j.istr.2011.02.002

J. Andrew Valentine

引用次数: 1

How tokenization and encryption can enable PCI DSS compliance 令牌化和加密如何实现PCI DSS合规性

Information Security Technical Report Pub Date : 2010-11-01 DOI: 10.1016/j.istr.2011.02.005

Branden R. Williams

引用次数: 7

From auditor-centric to architecture-centric: SDLC for PCI DSS 从以审计人员为中心到以体系结构为中心:PCI DSS的SDLC

Information Security Technical Report Pub Date : 2010-11-01 DOI: 10.1016/j.istr.2011.02.003

Gunnar Peterson

引用次数: 3

Incident response and compliance: A case study of the recent attacks 事件响应和遵从性:最近攻击的案例研究

Information Security Technical Report Pub Date : 2010-11-01 DOI: 10.1016/j.istr.2011.02.001

Jeff Tutton

引用次数: 11