Information Security Education. Education in Proactive Information Security

Name: Information Security Education. Education in Proactive Information Security | 12th IFIP WG 11.8 World Conference, WISE 12, Lisbon, Portugal, June 25-27, 2019, Proceedings
Brand: Springer
Price: 53.49 EUR
Availability: OnlineOnly

12th IFIP WG 11.8 World Conference, WISE 12, Lisbon, Portugal, June 25-27, 2019, Proceedings

Lynette Drevin Marianthi Theocharidou(Herausgeber*in)

Springer (Verlag)

Erschienen am 18. Juni 2019

X, 171 Seiten

E-Book

PDF mit Wasserzeichen-DRM

Systemvoraussetzungen

978-3-030-23451-5 (ISBN)

53,49 €inkl. 7% MwSt.

Systemvoraussetzungen

für PDF mit Wasserzeichen-DRM

E-Book Einzellizenz

Als Download verfügbar

Beschreibung

Weitere Details

Weitere Ausgaben

Inhalt

Intro
Preface
Organization
Contents
Innovation in Curricula
An Educational Intervention for Teaching Secure Coding Practices
1 Introduction
2 Related Literature
3 Research Design
4 Educational Intervention
4.1 Knowledge Component
4.2 Behavioural Compliance Monitoring Instrument
5 Effectiveness of the Educational Intervention
5.1 Knowledge Verification
5.2 Behavioural Verification
6 Conclusion
7 Ethical Considerations
References
Learning Principles and the Secure Programming Clinic
1 Introduction
2 Methodology
3 Description of the Secure Programming Clinics
4 Teaching Secure Programming
5 Learning Principles
6 Mapping of Clinics to Selected Learning Principles
6.1 Experimental Secure Programming Clinics
6.2 Discussion and Lessons Learned
7 Conclusion
References
Introducing Research into the Undergraduate Curriculum in Cybersecurity
1 Introduction
2 INSuRE
3 Structure of INSuRE in the Context of Senior Design
4 Discussion: Challenges Encountered and Lessons Learned
5 Conclusion and Future Work
References
Training
A Short-Cycle Framework Approach to Integrating Psychometric Feedback and Data Analytics to Rapid Cyber Defense
Abstract
1 Introduction
2 The Cyber Defense Incident Response
3 Event Preparation for Exercises and Cyber Defense Incident Response
4 A New Model Through Which to Understand Types of Data for Both Exercises and Cyber Defense Incidents
5 Cyber Defense Exercise Scenario
5.1 Scenario Description
5.2 Exercise - CEO Injects
6 Cyber Defense Exercise Data Gathered Prior to the CDOT Incident
6.1 Security Incident and Event Management Data
6.2 Security Incident and Event Management Data
6.3 Services Availability - Scenario Scoring Engine Data
7 Identifying and Infusing Personality Trait Preferences and Role Diversity in Cyber Security Teams
8 Live Response Incident Log and After-Action Report
9 Strategy for Relating Data
10 Conclusion and Recommendations
Acknowledgements
References
Identifying Security Requirements Body of Knowledge for the Security Systems Engineer
Abstract
1 Introduction
2 The Need for Security Requirements Engineering Education
3 Methodology
4 Review of Input Factors
4.1 Threat Landscape
4.2 Workforce Needs
4.3 Changing Technology
4.4 Industry Standards
4.5 Government and Regulation
5 Module Development
6 Module Validation
7 Discussion and Recommendations
8 Conclusion
References
Andragogy as a Scientific Basis for Training Professionals in Information Security
Abstract
1 Introduction
2 IS Professional Training Systems
3 Adult Learners: Who Are They?
4 Pedagogy or Andragogy?
5 Andragogical Approach to the Preparation of Training in the Field of IS
5.1 Definition of Goals, Objectives and Expected Learning Outcomes
5.2 Development of Curriculum and Syllabus for Its Components
5.3 The Choice of Technologies for the Educational Process Implementation
5.4 Determining the Syllabus for the Training Implementation
5.5 Formation of the Trainees
5.6 Formation of the Teaching Staff
6 Conclusion
Acknowledgement
References
Applications and Cryptography
Light Cryptography
1 Introduction
2 Model of Light Cryptography
2.1 Overview of Our System
2.2 Shadow Addition
2.3 Defining Protocols
3 Set-Intersection (SI) Protocol
4 Min/Max Protocol
5 Extension to Randomized Input
5.1 Defining Protocols in the Randomized Input Setting
5.2 Addition Protocol
6 Conclusion
References
Blockchain and Its Security: Ignore or Insert into Academic Training?
Abstract
1 Introduction
2 Survey of the BCT Training Worldwide
3 Standards as the Basis for the BCT Training
4 Books Support for the BCT Training
5 Desired Competencies After Mastering a Full-Time BCT Course
6 Exemplary Structure of the Course in the BCT
7 Conclusion
Acknowledgement
References
Identifying Information Security Risks in a Social Network Using Self-Organising Maps
Abstract
1 Introduction
2 Background
2.1 Self-Organising Maps (SOM)
2.2 Social Network Analysis (SNA) in the Context of Information Security
3 Method
4 Results and Discussion
5 Conclusion
References
Organisational Aspects
Lessons Learned from an Organizational Information Security Awareness Campaign
Abstract
1 Introduction
2 Background
2.1 Measuring the Effectiveness of ISA Training
2.2 ISA Capability Model
3 Implementation Methodology
3.1 Awareness Importance (AI)
3.2 Survey Userbase
3.3 Calculate Awareness Capability (AC)
3.4 Calculate Awareness Risk (AR)
3.5 Analyze Results
3.6 Determine Effectiveness
3.7 Target Organization Overview
4 ISAC Implementation and Lessons Learned
4.1 Awareness Importance (AI)
4.2 Survey Userbase
4.3 Calculate Awareness Capability (AC)
4.4 Calculate Awareness Risk (AR)
4.5 Analyze Results
4.6 Determine Effectiveness
5 Conclusions
Acknowledgements
References
A Comprehensive Framework for Understanding Security Culture in Organizations
Abstract
1 Introduction
2 Literature Review of Existing Security Culture Approaches
3 Methodology
3.1 Sample
3.2 Data Collection
3.3 Data Analysis
4 Results
4.1 Security Culture Practices
4.2 Employee Security Behavior Patterns
4.3 Perceptions for Improving the Security Culture
5 Discussion
6 Conclusion and Future Work
References
Using Gamification to Improve Information Security Behavior: A Password Strength Experiment
Abstract
1 Introduction
2 Literature Review
2.1 Extrinsic and Intrinsic Motivation
2.2 Password Meters as Password Strength Feedback Mechanisms
2.3 Gamification as an Opportunity to Improve Password Security Behavior
3 Methodology
3.1 Sampling
3.2 Data Collection Method
4 Data Analysis and Findings
4.1 Assessment of the Average Password Strength
4.2 Discussion
5 Conclusion
Acknowledgements
References
Author Index

Systemvoraussetzungen

Als PDF speichern Als Link merken