The Intelligence Cycle as a Tool for Effective Information Security Infrastructure Design

2013 ◽  
Author(s):  
Carlos Francisco Lerma Resendez
Keyword(s):  
Information Security ◽  
Infrastructure Design ◽  
Security Infrastructure

scholarly journals Information Security in E-Government: Legal Aspects

2021 ◽  
Vol 39 (69) ◽  
pp. 361-372
Author(s):  
Viacheslav Politanskyi ◽  
Dmytro Lukianov ◽  
Hanna Ponomarova ◽  
Oleh Gyliaka
Keyword(s):  
Information Security ◽  
Computer Security ◽  
Deep Understanding ◽  
Legal Aspects ◽  
Political Situation ◽  
Modern Computer ◽  
Information And Communication ◽  
Security Infrastructure ◽  
Definition Of ◽  
Concept Of Information

The article examines the characteristics of the functioning of information security in the e-government system, a phenomenon that is only possible based on the development of the information security infrastructure. The authors analyze information security as a key element of the concept of e-government, as well as various interpretations and ways of explaining the concept of information security. The research team's approach to the definition of the concept of information security is formed from the deep understanding of this concept, in terms of general theoretical analysis. Topics, objects, functions, types, principles, forms, levels of provision and structural elements of information security are studied. It is concluded that the organization of modern computer security of the State is undoubtedly a complex, systemic and multilevel phenomenon, whose state, dynamics, and perspectives are directly influenced by many external and internal factors, the most important being the political situation. In the world the presence of possible external and internal threats; state and level of development of information and communication of the country and internal political situation, among other aspects.

Challenges of Information Security Management in a Research and Development Software Services Company

2010 ◽  
Vol 12 (2) ◽  
pp. 16-30 ◽  
Author(s):  
Varadharajan Sridhar
Keyword(s):  
Information Security ◽  
Research And Development ◽  
User Needs ◽  
Information Security Management ◽  
Implementation Team ◽  
Software Company ◽  
Industry Standard ◽  
Physical Isolation ◽  
Security Infrastructure ◽  
Software Services

WirelessComSoft, a software company based in India, provided research and development outsourcing support in an Intellectual Property strong wireless communication products and services space. Over a period, WirelessComSoft developed a robust information security infrastructure and complied with industry standard auditing procedures. However, implementing information security across its different world-wide sites, updating it in tune with evolving user needs, deploying robust business continuity architecture, and maintaining logical and physical isolation of clients’ off-shore development centers were challenges that WirelessComSoft’s security implementation team grappled with every day. The case presents how information security infrastructure at WirelessComSoft evolved, the challenges faced and the methods implemented by the information security team to overcome these challenges.

Digital government security infrastructure design challenges

Computer ◽  
2001 ◽  
Vol 34 (3) ◽  
pp. 66-72 ◽  
Author(s):  
J. Joshi ◽  
A. Ghafoor ◽  
W.G. Aref ◽  
E.H. Spafford
Keyword(s):  
Digital Government ◽  
Infrastructure Design ◽  
Security Infrastructure ◽  
Design Challenges ◽  
Government Security

Information Security Management

2008 ◽  
pp. 350-357 ◽  
Author(s):  
Mariana Hentea
Keyword(s):  
Information Security ◽  
Security Management ◽  
Virtual Private Networks ◽  
Product Lines ◽  
Information Security Management ◽  
Security Technologies ◽  
Detection Systems ◽  
Security Controls ◽  
Security Infrastructure ◽  
Management Capabilities

Information security management is the framework for ensuring the effectiveness of information security controls over information resources to ensure no repudiation, authenticity, confidentiality, integrity and availability of the information. Organizations need a systematic approach for information security management that addresses security consistently at every level. However, the security infrastructure of most organizations came about through necessity rather than planning, a reactive-based approach as opposed to a proactive approach (Gordon, Loeb & Lucyshyn, 2003). Intrusion detection systems, firewalls, anti-virus software, virtual private networks, encryption and biometrics are security technologies in use today. Many devices and systems generate hundreds of events and report various problems or symptoms. Also, these devices may all come at different times and from different vendors, with different reporting and management capabilities and—perhaps worst of all—different update schedules. The security technologies are not integrated, and each technology provides the information in its own format and meaning. In addition, these systems across versions, product lines and vendors may provide little or no consistent characterization of events that represent the same symptom. Also, the systems are not efficient and scalable because they rely on human expertise to analyze periodically the data collected with all these systems. Network administrators regularly have to query different databases for new vulnerabilities and apply patches to their systems to avoid attacks. Quite often, different security staff is responsible and dedicated for the monitoring and analysis of data provided by a single system. Security staff does not periodically analyze the data and does not timely communicate analysis reports to other staff. The tools employed have very little impact on security prevention, because these systems lack the capability to generalize, learn and adapt in time.

E-Planning

2010 ◽  
pp. 404-419
Author(s):  
Stephen Kwamena Aikins
Keyword(s):  
Decision Making ◽  
Information Security ◽  
Social Impact ◽  
Gis Technology ◽  
Security Risks ◽  
Urban And Regional Planning ◽  
Emerging Trends ◽  
Security Infrastructure ◽  
Urban Planning And Development ◽  
Development Processes

This chapter discusses the security risks and management implications for the use of information technology to manage urban and regional planning and development processes. The advancement in GIS technology and planning support systems has provided the opportunity for planning agencies to adopt innovative processes to aid and improve decision-making. Although studies show that a number of impediments to the widespread adoption these technologies exist, emerging trends point to opportunities for the integration of planning supporting systems with various models to help estimate urban growth, environmental, economic and social impact, as well as to facilitate participatory planning. At the same time, information security infrastructure and security preparedness of most public agencies lag behind vulnerabilities. Drawing on the literature on planning, e-planning and information security, the author argues that the emergence of e-planning as an efficient approach to urban planning and development also poses enormous security challenges that need to be managed to ensure integrity, confidentiality and availability of critical planning information for decision-making.

Understanding the Information Security Landscape in South Africa

2012 ◽  
pp. 90-102
Author(s):  
Blessing Maumbe ◽  
Vesper T. Owei
Keyword(s):  
South Africa ◽  
Information Security ◽  
Information Overload ◽  
Security Risks ◽  
Unauthorized Access ◽  
Major Threat ◽  
Individual Privacy ◽  
Security Infrastructure ◽  
Privacy And Confidentiality ◽  
Withholding Information

Information security risks are a major threat to South Africa’s bid to build a broad-based information society. The integration of information security in e-government is no longer an option, but an imperative given the resulting “information overload” and the need to filter “good” from “bad” information. Unless South Africa integrates information security in its e-government development policy and practices, the acclaimed benefits of e-government will not be realized. The moral hazard problems arising from bad information behavior such as human manipulation, withholding information, unauthorized access, and violation of individual privacy and confidentiality heightens the need to combat info-security risks and vulnerabilities. South Africa’s readiness to deal with the information security risks has come under scrutiny. The information security infrastructure in South Africa is also not clearly understood. This chapter examines South Africa’s information security landscape and describes how institutional and agency coordination could help improve information security in e-government.

scholarly journals DEVELOPMENT OF AN ALGORITHM FOR INFORMATION SECURITY INFRASTRUCTURE ORGANIZATION USING CONFIGURATION MANAGEMENT SYSTEM SALTSTACK WHEN TRANSMITTING DATA VIA FIBER-OPTIC COMMUNICATION LINES

2019 ◽  
Vol 6 (2) ◽  
pp. 92-98
Author(s):  
Sergey Koryagin ◽  
Evgenij Gritskevich
Keyword(s):  
Information Security ◽  
Management System ◽  
Configuration Management ◽  
Theoretical Description ◽  
Labor Costs ◽  
Qualitative Comparison ◽  
Vulnerability Scanner ◽  
Analytical Review ◽  
Security Infrastructure ◽  
Optic Communication

In the article an approach to organization of information security infrastructure using the configuration management system is considered, which allows reducing of service labor costs, acceleration of installation, tuning of information and technical services and the software on virtual and physical servers. An analytical review and qualitative comparison of the most common similar currently existing systems are presented, taking into account the characteristics directly related to safe storage of information and interaction between the servers and the choice of the most suitable system for this work. A theoretical description of the security infrastructure building algorithm and examples of software implementation using the SaltStack configuration management system are given. Software for processing of vulnerability scanner reports is developed.

Sign in / Sign up

Export Citation Format

Share Document