2016 Information Security for South Africa (ISSA)最新文献_第2页

Review of data storage protection approaches for POPI compliance 审查符合POPI的数据存储保护方法

2016 Information Security for South Africa (ISSA) Pub Date : 2016-08-01 DOI: 10.1109/ISSA.2016.7802928

Nicholas Scharnick, M. Gerber, L. Futcher

{"title":"Review of data storage protection approaches for POPI compliance","authors":"Nicholas Scharnick, M. Gerber, L. Futcher","doi":"10.1109/ISSA.2016.7802928","DOIUrl":"https://doi.org/10.1109/ISSA.2016.7802928","url":null,"abstract":"In business, information security has always been a debated topic amongst management and executives. Investing in something that is intangible is often not seen as priority expenditure as it brings no Return on Investment nor contributes to expanding the business. However, the newly enacted Protection of Personal Information (POPI) Act forces businesses to re-evaluate their stance on information security and data storage protection as POPI requires that “appropriate and reasonable security measures” be put in place to effectively protect all personal information that large organisations as well as smaller businesses process and more importantly store. However, the lack of comprehensive controls found within any one information security approach (information security standard, best practice or framework) to fully address the requirements of the POPI act, leaves businesses exposed to legislative action under POPI. This paper, through the use of a detailed literature review and qualitative content analysis aims to analyze widely implemented information security approaches in the context of POPI compliance. Through identifying themes for data protection within various information security approaches, an evaluation of the comprehensiveness of these approaches and their proposed mechanisms for protecting data within businesses is conducted.","PeriodicalId":330340,"journal":{"name":"2016 Information Security for South Africa (ISSA)","volume":"72 1","pages":"0"},"PeriodicalIF":0.0,"publicationDate":"2016-08-01","publicationTypes":"Journal Article","fieldsOfStudy":null,"isOpenAccess":false,"openAccessPdf":"","citationCount":null,"resultStr":null,"platform":"Semanticscholar","paperid":"123628349","PeriodicalName":null,"FirstCategoryId":null,"ListUrlMain":null,"RegionNum":0,"RegionCategory":"","ArticlePicture":[],"TitleCN":null,"AbstractTextCN":null,"PMCID":"","EPubDate":null,"PubModel":null,"JCR":null,"JCRName":null,"Score":null,"Total":0}

引用次数: 0

Context Aware Mobile Application for mobile devices 上下文感知移动应用，用于移动设备

2016 Information Security for South Africa (ISSA) Pub Date : 2016-08-01 DOI: 10.1109/ISSA.2016.7802933

M. Masango, Francois Mouton, Alastair Nottingham, J. Mtsweni

引用次数: 5

Specific emitter identification for enhanced access control security 用于增强访问控制安全性的特定发射器标识

2016 Information Security for South Africa (ISSA) Pub Date : 2016-08-01 DOI: 10.1109/ISSA.2016.7802927

J. N. Samuel, W. P. Plessis

引用次数: 4

Adaptable exploit detection through scalable NetFlow analysis 通过可扩展的NetFlow分析进行适应性漏洞检测

2016 Information Security for South Africa (ISSA) Pub Date : 2016-08-01 DOI: 10.1109/ISSA.2016.7802938

Alan Herbert, B. Irwin

{"title":"Adaptable exploit detection through scalable NetFlow analysis","authors":"Alan Herbert, B. Irwin","doi":"10.1109/ISSA.2016.7802938","DOIUrl":"https://doi.org/10.1109/ISSA.2016.7802938","url":null,"abstract":"Full packet analysis on firewalls and intrusion detection, although effective, has been found in recent times to be detrimental to the overall performance of networks that receive large volumes of throughput. For this reason partial packet analysis technologies such as the NetFlow protocol have emerged to better mitigate these bottlenecks through log generation. This paper researches the use of log files generated by NetFlow version 9 and IPFIX to identify successful and unsuccessful exploit attacks commonly used by automated systems. These malicious communications include but are not limited to exploits that attack Microsoft RPC, Samba, NTP (Network Time Protocol) and IRC (Internet Relay Chat). These attacks are recreated through existing exploit implementations on Metasploit and through hand-crafted reconstructions of exploits via known documentation of vulnerabilities. These attacks are then monitored through a preconfigured virtual testbed containing gateways and network connections commonly found on the Internet. This common attack identification system is intended for insertion as a parallel module for Bolvedere in order to further the increase the Bolvedere system's attack detection capability.","PeriodicalId":330340,"journal":{"name":"2016 Information Security for South Africa (ISSA)","volume":"15 1","pages":"0"},"PeriodicalIF":0.0,"publicationDate":"2016-08-01","publicationTypes":"Journal Article","fieldsOfStudy":null,"isOpenAccess":false,"openAccessPdf":"","citationCount":null,"resultStr":null,"platform":"Semanticscholar","paperid":"131135559","PeriodicalName":null,"FirstCategoryId":null,"ListUrlMain":null,"RegionNum":0,"RegionCategory":"","ArticlePicture":[],"TitleCN":null,"AbstractTextCN":null,"PMCID":"","EPubDate":null,"PubModel":null,"JCR":null,"JCRName":null,"Score":null,"Total":0}

引用次数: 0

The pattern-richness of Graphical passwords 图形密码的模式丰富度

2016 Information Security for South Africa (ISSA) Pub Date : 2016-08-01 DOI: 10.1109/ISSA.2016.7802931

J. Vorster, R. V. Heerden, B. Irwin

引用次数: 2

CDMA in signal encryption and information security CDMA中的信号加密与信息安全

2016 Information Security for South Africa (ISSA) Pub Date : 2016-08-01 DOI: 10.1109/ISSA.2016.7802929

O. Wojuola, S. Mneney, V. Srivastava

引用次数: 4

Dridex: Analysis of the traffic and automatic generation of IOCs Dridex:流量分析和ioc自动生成

2016 Information Security for South Africa (ISSA) Pub Date : 2016-08-01 DOI: 10.1109/ISSA.2016.7802932

L. Rudman, B. Irwin

{"title":"Dridex: Analysis of the traffic and automatic generation of IOCs","authors":"L. Rudman, B. Irwin","doi":"10.1109/ISSA.2016.7802932","DOIUrl":"https://doi.org/10.1109/ISSA.2016.7802932","url":null,"abstract":"In this paper we present a framework that generates network Indicators of Compromise (IOC) automatically from a malware sample after dynamic runtime analysis. The framework addresses the limitations of manual Indicator of Compromise generation and utilises sandbox environment to perform the malware analysis in. We focus on the generation of network based IOCs from captured traffic files (PCAPs) generated by the dynamic malware analysis. The Cuckoo Sandbox environment is used for the analysis and the setup is described in detail. Accordingly, we discuss the concept of IOCs and the popular formats used as there is currently no standard. As an example of how the proof-of-concept framework can be used, we chose 100 Dridex malware samples and evaluated the traffic and showed what can be used for the generation of network-based IOCs. Results of our system confirm that we can create IOCs from dynamic malware analysis and avoid the legitimate background traffic originating from the sandbox system. We also briefly discuss the sharing of, and application of the generated IOCs and the number of systems that can be used to share them. Lastly we discuss how they can be useful in combating cyber threats.","PeriodicalId":330340,"journal":{"name":"2016 Information Security for South Africa (ISSA)","volume":"17 1","pages":"0"},"PeriodicalIF":0.0,"publicationDate":"2016-08-01","publicationTypes":"Journal Article","fieldsOfStudy":null,"isOpenAccess":false,"openAccessPdf":"","citationCount":null,"resultStr":null,"platform":"Semanticscholar","paperid":"126473981","PeriodicalName":null,"FirstCategoryId":null,"ListUrlMain":null,"RegionNum":0,"RegionCategory":"","ArticlePicture":[],"TitleCN":null,"AbstractTextCN":null,"PMCID":"","EPubDate":null,"PubModel":null,"JCR":null,"JCRName":null,"Score":null,"Total":0}

引用次数: 15