学术信息系统的风险预防方法

IF 0.9 Q3 ENGINEERING, MULTIDISCIPLINARY

Revista Facultad De Ingenieria-universidad De Antioquia Pub Date : 2018-11-30 DOI:10.17533/UDEA.REDIN.N89A11

Isabel Cristina Satizábal-Echavarría, Nancy María Acevedo-Quintana

{"title":"学术信息系统的风险预防方法","authors":"Isabel Cristina Satizábal-Echavarría, Nancy María Acevedo-Quintana","doi":"10.17533/UDEA.REDIN.N89A11","DOIUrl":null,"url":null,"abstract":"Information of academic systems can be stolen, modified or erased by attackers, causing losses to institutions. Applying a risk prevention methodology at educational institutions would help to avoid academic information misuse by users or attackers. MePRiSIA was designed as a risk prevention methodology to be simple and easy to understand while including the human factor in each step. This methodology has four steps to be considered in the process: setting the context, risk identification, risk analysis, and risk prevention. After being applied to the academic information system of Universidad de Pamplona (Colombia) called ACADEMUSOFT, MePRiSIA was evaluated by experts. In conclusion, after applying MePRiSIA to ACADEMUSOFT, the human factor was part of its most important assets and involved in the very high-level risks identified. According to the experts, implementation of MePRiSIA is hard when institution directors do not provide staff and financial resources for this purpose.","PeriodicalId":21428,"journal":{"name":"Revista Facultad De Ingenieria-universidad De Antioquia","volume":null,"pages":null},"PeriodicalIF":0.9000,"publicationDate":"2018-11-30","publicationTypes":"Journal Article","fieldsOfStudy":null,"isOpenAccess":false,"openAccessPdf":"","citationCount":"1","resultStr":"{\"title\":\"MePRiSIA: risk prevention methodology for academic information systems\",\"authors\":\"Isabel Cristina Satizábal-Echavarría, Nancy María Acevedo-Quintana\",\"doi\":\"10.17533/UDEA.REDIN.N89A11\",\"DOIUrl\":null,\"url\":null,\"abstract\":\"Information of academic systems can be stolen, modified or erased by attackers, causing losses to institutions. Applying a risk prevention methodology at educational institutions would help to avoid academic information misuse by users or attackers. MePRiSIA was designed as a risk prevention methodology to be simple and easy to understand while including the human factor in each step. This methodology has four steps to be considered in the process: setting the context, risk identification, risk analysis, and risk prevention. After being applied to the academic information system of Universidad de Pamplona (Colombia) called ACADEMUSOFT, MePRiSIA was evaluated by experts. In conclusion, after applying MePRiSIA to ACADEMUSOFT, the human factor was part of its most important assets and involved in the very high-level risks identified. According to the experts, implementation of MePRiSIA is hard when institution directors do not provide staff and financial resources for this purpose.\",\"PeriodicalId\":21428,\"journal\":{\"name\":\"Revista Facultad De Ingenieria-universidad De Antioquia\",\"volume\":null,\"pages\":null},\"PeriodicalIF\":0.9000,\"publicationDate\":\"2018-11-30\",\"publicationTypes\":\"Journal Article\",\"fieldsOfStudy\":null,\"isOpenAccess\":false,\"openAccessPdf\":\"\",\"citationCount\":\"1\",\"resultStr\":null,\"platform\":\"Semanticscholar\",\"paperid\":null,\"PeriodicalName\":\"Revista Facultad De Ingenieria-universidad De Antioquia\",\"FirstCategoryId\":\"1085\",\"ListUrlMain\":\"https://doi.org/10.17533/UDEA.REDIN.N89A11\",\"RegionNum\":0,\"RegionCategory\":null,\"ArticlePicture\":[],\"TitleCN\":null,\"AbstractTextCN\":null,\"PMCID\":null,\"EPubDate\":\"\",\"PubModel\":\"\",\"JCR\":\"Q3\",\"JCRName\":\"ENGINEERING, MULTIDISCIPLINARY\",\"Score\":null,\"Total\":0}","platform":"Semanticscholar","paperid":null,"PeriodicalName":"Revista Facultad De Ingenieria-universidad De Antioquia","FirstCategoryId":"1085","ListUrlMain":"https://doi.org/10.17533/UDEA.REDIN.N89A11","RegionNum":0,"RegionCategory":null,"ArticlePicture":[],"TitleCN":null,"AbstractTextCN":null,"PMCID":null,"EPubDate":"","PubModel":"","JCR":"Q3","JCRName":"ENGINEERING, MULTIDISCIPLINARY","Score":null,"Total":0}

引用次数: 1

摘要

学术系统的信息可能被攻击者窃取、修改或删除，给院校造成损失。在教育机构应用风险预防方法将有助于避免使用者或攻击者滥用学术信息。MePRiSIA被设计为一种简单易懂的风险预防方法，同时在每个步骤中都包含人为因素。该方法在过程中有四个步骤需要考虑:设置背景、风险识别、风险分析和风险预防。MePRiSIA应用于哥伦比亚潘普洛纳大学学术信息系统ACADEMUSOFT后，由专家进行评估。综上所述，在将MePRiSIA应用于ACADEMUSOFT之后，人为因素是其最重要的资产的一部分，并且涉及识别出的非常高的风险。专家认为，当机构负责人不为此目的提供人员和财政资源时，MePRiSIA的实施是困难的。

本文章由计算机程序翻译，如有差异，请以英文原文为准。

查看原文本刊更多论文

MePRiSIA: risk prevention methodology for academic information systems

Information of academic systems can be stolen, modified or erased by attackers, causing losses to institutions. Applying a risk prevention methodology at educational institutions would help to avoid academic information misuse by users or attackers. MePRiSIA was designed as a risk prevention methodology to be simple and easy to understand while including the human factor in each step. This methodology has four steps to be considered in the process: setting the context, risk identification, risk analysis, and risk prevention. After being applied to the academic information system of Universidad de Pamplona (Colombia) called ACADEMUSOFT, MePRiSIA was evaluated by experts. In conclusion, after applying MePRiSIA to ACADEMUSOFT, the human factor was part of its most important assets and involved in the very high-level risks identified. According to the experts, implementation of MePRiSIA is hard when institution directors do not provide staff and financial resources for this purpose.

求助全文

通过发布文献求助，成功后即可免费获取论文全文。去求助

来源期刊

Revista Facultad De Ingenieria-universidad De Antioquia 工程技术-工程：综合

CiteScore

2.00

自引率

0.00%

发文量

审稿时长

2 months

期刊介绍： Revista Facultad de Ingenieria started in 1984 and is a publication of the School of Engineering at the University of Antioquia. The main objective of the journal is to promote and stimulate the publishing of national and international scientific research results. The journal publishes original articles, resulting from scientific research, experimental and or simulation studies in engineering sciences, technology, and similar disciplines (Electronics, Telecommunications, Bioengineering, Biotechnology, Electrical, Computer Science, Mechanical, Chemical, Environmental, Materials, Sanitary, Civil and Industrial Engineering). In exceptional cases, the journal will publish insightful articles related to current important subjects, or revision articles representing a significant contribution to the contextualization of the state of the art in a known relevant topic. Case reports will only be published when those cases are related to studies in which the validity of a methodology is being proven for the first time, or when a significant contribution to the knowledge of an unexplored system can be proven. All published articles have undergone a peer review process, carried out by experts recognized for their knowledge and contributions to the relevant field. To adapt the Journal to international standards and to promote the visibility of the published articles; and therefore, to have a greater impact in the global academic community, after November 1st 2013, the journal will accept only manuscripts written in English for reviewing and publication. Revista Facultad de Ingeniería –redin is entirely financed by University of Antioquia Since 2015, every article accepted for publication in the journal is assigned a DOI number.