Threats, Countermeasures, and Advances in Applied Information Security

Threats, Countermeasures, and Advances in Applied Information Security

Manish Gupta, John Walp, Raj Sharman

Copyright: © 2012 |Pages: 319

ISBN13: 9781466609785|ISBN10: 1466609788|EISBN13: 9781466609792

DOI: 10.4018/978-1-4666-0978-5

Cite Book Cite Book

MLA

Gupta, Manish, et al., editors. Threats, Countermeasures, and Advances in Applied Information Security. IGI Global, 2012. https://doi.org/10.4018/978-1-4666-0978-5

APA

Gupta, M., Walp, J., & Sharman, R. (Eds.). (2012). Threats, Countermeasures, and Advances in Applied Information Security. IGI Global. https://doi.org/10.4018/978-1-4666-0978-5

Chicago

Gupta, Manish, John Walp, and Raj Sharman, eds. Threats, Countermeasures, and Advances in Applied Information Security. Hershey, PA: IGI Global, 2012. https://doi.org/10.4018/978-1-4666-0978-5

Export Reference

Favorite Full-Book Download

Organizations are increasingly relying on electronic information to conduct business, which has caused the amount of personal information to grow exponentially.

Threats, Countermeasures, and Advances in Applied Information Security addresses the fact that managing information security program while effectively managing risks has never been so critical. This book contains 24 chapters on the most relevant and important issues and advances in applied information security management. The chapters are authored by leading researchers and practitioners in the field of information security from across the globe. The chapters represent emerging threats and countermeasures for effective management of information security at organizations.

Table of Contents

Reset

Front Materials

Title Page

Copyright Page

Preface

Chapters

Chapter 1

A Pragmatic Approach to Intrusion Response Metrics (pages 1-22)

Chris Strasburg, Johnny Wong

The arms race between cyber attackers and defenders has evolved to the point where an effective counter-measure strategy requires the use of an automated, distributed, and coordinated response. A key difficulty in achieving this goal...

Chapter 2

Feature Extraction Methods for Intrusion Detection Systems (pages 23-52)

Hai Thanh Nguyen, Katrin Franke, Slobodan Petrovic

Intrusion Detection Systems (IDSs) have become an important security tool for managing risk and an indispensable part of overall security architecture. An IDS is considered as a pattern recognition system, in which feature extraction...

Chapter 3

A Distributed and Secure Architecture for Signature and Decryption Delegation through Remote Smart Cards (pages 53-65)

Giuseppe Cattaneo, Pompeo Faruolo, Ivan Visconti

The established legal value of digital signatures and the growing availability of identity-based digital services are progressively extending the use of smart cards to all citizens, opening new challenging scenarios. Among them...

Chapter 4

Information Security Management: Awareness of Threats in E-Commerce (pages 66-90)

Mohammad Mahfuzur Rahman, Karim Mohammed Rezaul

The expansion of electronic commerce (E-commerce) has become an increasing reality due to Internet’s rapid growth during the last few years. E-commerce is growing at an exceptional rate with more organizations offering their goods...

Chapter 5

Analyzing Information Security Goals (pages 91-110)

Ella Kolkowska, Karin Hedström, Fredrik Karlsson

One of the problems highlighted within the area of information security is that international standards are implemented in organisations without adopting them to special organisational settings. In this chapter the authors analyse...

Chapter 6

Graphical Passwords (pages 111-128)

Luigi Catuogno, Clemente Galdi

Authentication is probably one of the main security processes that almost everybody has at one point used. Currently, the most widespread authentication mechanism is based on textual passwords, a well-established approach that, with...

Chapter 7

Assessing the Security of Software Configurations (pages 129-157)

Afonso Araújo Neto, Marco Vieira

Security evaluation is a complex problem. As more and more software systems become available, more diversity and alternatives can be found to accomplish the same tasks. However, there is still a lack of a standard approach that can...

Chapter 8

A Decision Support System for Privacy Compliance (pages 158-180)

Siani Pearson, Tomas Sander

Regulatory compliance in areas such as privacy has become a major challenge for organizations. In large organizations there can be hundreds or thousands of projects that involve personal information. Ensuring that all those projects...

Chapter 9

Information Security Management Based on Linguistic Sharing Techniques (pages 181-193)

Marek R. Ogiela, Urszula Ogiela

Secure information splitting is used in many tasks of the intelligent sharing of secrets and key data in business organisations. The significance of information splitting depends on its nature, while the significance of information...

Chapter 10

SQL Injection Attacks Countermeasures (pages 194-213)

Kasra Amirtahmasebi, Seyed Reza Jalalinia

Due to the huge growth in the need for using Web applications worldwide, there have been huge efforts from programmers to develop and implement new Web applications to be used by companies. Since a number of these applications lack...

Chapter 11

Security and Authentication Issues of an Embedded System Designed and Implemented for Interactive Internet Users (pages 214-233)

Siddhartha Baruah, Anjana Kakoty Mahanta, Kanak Ch Sarma

Though embedded applications were originally built on standalone devices, nowadays these devices require a growing integration with other systems through their interconnection with TCP/IP networks. Web Services, which provide a...

Chapter 12

Distributed Key Management Scheme Based on CL-PKC in P2P Networks (pages 234-247)

Zhongwen Li, Zhibin Xu, Chen Liang

P2P networks have characteristics of decentralization, autonomy, and dynamicity. The security problems caused by these characteristics have seriously affected further development of P2P networks. The authors did research on CL-PKC...

Chapter 13

A Privacy Service for Comparison of Privacy and Trust Policies within SOA (pages 248-265)

David S. Allison, Hany F. EL Yamany, Miriam A.M. Capretz

Privacy for Service-Oriented Architecture (SOA) is required to gain the trust of those who would use the technology. Through the use of an independent Privacy Service (PS), the privacy policies of a service consumer and provider can...

Chapter 14

Creating and Applying Security Goal Indicator Trees in an Industrial Environment (pages 266-280)

Alessandra Bagnato, Fabio Raiteri, Christian Jung, Frank Elberzhager

Security inspections are increasingly important for bringing security-relevant aspects into software systems, particularly during the early stages of development. Nowadays, such inspections often do not focus specifically on...

Chapter 15

Security Enhancement of Peer-to-Peer Session Initiation (pages 281-308)

Xianghan Zheng, Vladimir Oleshchuk

Today, Peer-to-Peer SIP based communication systems have attracted much attention from both the academia and industry. The decentralized nature of P2P might provide the distributed peer-to-peer communication system without help of...

Chapter 16

Towards a Framework for Collaborative Enterprise Security (pages 309-334)

Janardan Misra

The role of human behaviour in enterprise security is one of the little studied aspects. The author proposes a reinforcement model of collaborative security employing basic concepts from game theory, socio-psychology, and...

Chapter 17

Privacy-Aware Organisation-Based Access Control Model (PrivOrBAC) (pages 335-360)

Nabil Ajam, Nora Cuppens-Boulahia, Fréderic Cuppens

In this chapter, the authors propose the expression and the modelling of the most important principles of privacy. They deduce the relevant privacy requirements that should be integrated in existing security policy models, such as...

Chapter 18

Can Formal Methods Really Help: Analyzing the Security of Electronic Voting Systems (pages 361-380)

Komminist Weldemariam, Adolfo Villafiorita

In this chapter, first the authors discuss the current trends in the usage of formal techniques in the development of e-voting systems. They then present their experiences on their usage to specify and verify the behaviors of one of...

Chapter 19

Countering Spam Robots: Scrambled CAPTCHA and Hindi CAPTCHA (pages 381-393)

Aditya Raj, Tushar Pahwa, Ashish Jain

CAPTCHAs are employed on websites to differentiate between human users and bot programs that indulge in spamming and other fraudulent activities. With the advent and advancement of sophisticated computer programs to break CAPTCHAs...

Chapter 20

Embedded System Security Risk in a Green-House Environment (pages 394-410)

Trailokya Oraon

Embedded systems are extensively used in the field of pervasive computing. These systems are used to such an extent that embedded systems are now controlled and monitored from remote locations by using Web services. Internet...

Chapter 21

Security in Wireless Sensor Networks with Mobile Codes (pages 411-425)

Frantisek Zboril, Jan Horacek, Martin Drahansky, Petr Hanacek

Security of wireless sensor networks (WSN) relates in many aspects to security of distributed systems. On the first sight WSNs form a large distributed ad-hoc system with lot of tiny devices that sense some phenomena and communicate...

Chapter 22

Grid of Security: A Decentralized Enforcement of the Network Security (pages 426-443)

Olivier Flauzac, Florent Nolot, Cyril Rabat, Luiz-Angelo Steffenel

Network security is in a daily evolving domain. Every day, new attacks, viruses, and intrusion techniques are released. Hence, network devices, enterprise servers, or personal computers are potential targets of these attacks. Current...

Chapter 23

Effective Malware Analysis Using Stealth Breakpoints (pages 444-461)

Amit Vasudevan

Fine-grained malware analysis requires various powerful analysis tools. Chief among them is a debugger that enables runtime binary analysis at the instruction level. One of the important services provided by a debugger is the ability...

Chapter 24

A Dynamic Cyber Security Economic Model: Incorporating Value Functions for All Involved Parties (pages 462-477)

C. Warren Axelrod

One cannot develop effective economic models for information security and privacy without having a good understanding of the motivations, disincentives, and other influencing factors affecting the behavior of criminals, victims...

Back Materials

Compilation of References

About the Contributors

Index

You do not own this content. Please login to recommend this title to your institution's librarian or purchase it from the IGI Global bookstore.

Username or email: *

Password: *

Forgot individual login password?

Create individual account