NDLI: Paths to creativity in security careers

Please wait, while we are loading the content...

Digital identity management and protection

From concept to commercialiazed product: the challenges of privacy technologies

Computing trust from revision history

A constraint based role based access control in the SECTET a model-driven approach

Towards a precise semantics for authenticity and trust

Dynamic inference control in privacy preference enforcement

Is workplace surveillance legal in Canada?

Using web service enhancements to bridge business trust relationships

Achieving privacy and security in radio frequency identification

Towards reliable trust establishment in grid: a pre-evaluating set based bias-tuned method for dishonest feedback filtering

Virtual identities in authentication and authorization scenarios

Intelligent virus detection on mobile devices

Defining the security required for WAP based mobile ticket sales

Topological analysis of network attack vulnerability

Deep packet inspection comes to the desktop

Analyzing trust in technology strategies

Protected data paths: delivering sensitive data via untrusted proxies

An improved familiarity measurement for formalization of trust in e-commerce based multiagent systems

Privacy policy enforcement in enterprises with identity management solutions

Bridging the gap: software specification meets intrusion detector

An incentive compatible reputation mechanism for ubiquitous computing environments

Privacy enhanced personalization in e-learning

A trust framework model for situational contexts

AA-RR: working with authentication and authorization infrastructures

Towards an MDA-oriented UML profile for critical infrastructure modeling

The quantum nature of cryptography: problems of public-key cryptography and the prospect of quantum key distribution

Paths to creativity in security careers

Label-based access control (LBAC) in DB2 LUW

Requirements of federated trust management for service-oriented architectures

Architecture-based refinements for secure computer systems design

Trust and security in spatial messaging: FoxyTag, the speed camera case study

Formal consistency verification between BPEL process and privacy policy

Phishing defense against IDN address spoofing attacks

Alert correlation survey: framework and techniques

Security hardening of open source software

Trust-based contextual information filtering

Persona concept for web-based identity management

Using an improved C4.5 for imbalanced dataset of intrusion

Is privacy an attainable goal?: a review of the privacy rights dilemma

Role-based access control: past, present and future

Trust modelling for online transactions: a phishing scenario

A new fair non-repudiation protocol for secure negotiation and contract signing

Modeling trust using transactional, numerical units

A privacy-preserving UBICOMP architecture

Using self-organizing maps to build an attack map for forensic analysis

Execution monitoring enforcement for limited-memory systems

Constraint based role based access control (CRBAC) for restricted administrative delegation constraints in the SECTET

Trust determination in ad hoc networks

Off-line verification of one-time ID in distributed environment

Secure algorithm for finding K nearest neighbors in distributed databases

Exploiting a buffer overflow using metasploit framework

A comparison of reputation-based trust systems

Detecting low-profile scans in TCP anomaly event data

Building online trust through privacy policies

Query rewriting for detection of privacy violation through inferencing

An efficient traitor tracing scheme based on MDS code

Embedding verifiable information flow analysis

Security crosscutting concerns and AspectJ

MTRMS: mutual-trust-based reputation management system in community-based peer-to-peer environment

Chinese text watermarking based on occlusive components

Design and implementation of a behavioral difference analyzer for network intrusion detection

Ontario healthcare privacy act: compliant ad hoc healthcare applications

Approximate autoregressive modeling for network attack detection

Privacy in video surveilled areas

Behavior analysis through reputation propagation in a multi-context environment

Privacy-preserving OLAP based on output perturbation across multiple sites

Towards a model for risk and consent management of personal health information

User-credential based role mapping in multi-domain environment

Towards believing answers from cyber-infrastructure-based applications

Mobile access control policy for healthcare applications with XACML

A framework ensuring privacy in a distributed environment

A concept of intelligent biometric-based early detection and warning system

Privacy, traceability, and anonymity for content protection

Mobile healthcare applications: a study of access control

An early release heuristic for k-anonymization

The 'how' and 'why' of persistent information security

Cryptanalysis and improvement on Yang-Shieh authentication schemes

Considering role-based conflicts of interest in analyzing and designing e-health systems with goal-oriented methodologies

From stakeholder goals to product features: towards a role-based variability framework with decision boundary

Paths to creativity in security careers

Content Provider	ACM Digital Library
Author	Newby, Gregory B.
Abstract	One of the biggest security challenges faced by organizations and institutions today involves technical, social, structural and educational elements. This challenge is fostering the necessary creativity needed to maintain a business edge, to anticipate and respond to environmental change, to protect against unintended consequences, and to grow. Stakes are high, because a major pattern in security breaches is a creative outsider (or insider!) bypassing the stolid corporate machine. This session will present several approaches to fostering creativity in organizations, with an emphasis on the individual. Such individuals, it is hoped, will be better able to anticipate and cope with diverse security challenges. Three approaches will be presented. First is the hacker spirit. This is "hacker" in terms of creativity, curiosity and skill with systems, not an intruder or criminal. Hackers from Thomas Edison to Steve Wozniak, among many others, invented the foundation for today's technological society. Hackers are often characterized by a healthy distrust for authority, combined with the desire to verify facts for oneself, through formal or informal methods. Hackers are likely originators of new methods for bypassing security systems (though less likely as perpetrators), but more importantly can serve on the inside. Second is detailed understanding of today's complex systems. Cyberinfrastructure is complex, environmental systems are complex, social systems are complex - it takes a broad education and experience to be able to design, understand and repair them. Security challenges tend to come at the boundaries of systems, and conscious efforts are required to foster an interdisciplinary approach. Autodidactism will not produce enough people with the requisite skills, nor will they emerge from silos of disciplinary learning. Instead, broad multidisciplinary training is needed. Third is encouraging creativity in the organization, whether it is a school or university, a business, a government agency, or social organization. For a variety of reasons, recent trends are towards decreased individualism and limitations on freedom of self-expression. This is dangerous to a security posture, because it is likely that potential intruders will be thinking creatively. Courageous, creative, educated, empowered and experienced individuals are a key component to building adaptable and healthy organizations. The message for the people and organizations involved with privacy, security and trust is stark: the types of individuals described here will otherwise be adversaries.
Starting Page	1
Ending Page	1
Page Count	1
ISBN	1595936041
DOI	10.1145/1501434.1501438
Language	English
Publisher	Association for Computing Machinery (ACM)
Publisher Date	2006-10-30
Publisher Place	New York
Access Restriction	Subscribed
Content Type	Text
Resource Type	Article

Central Library (ISO-9001:2015 Certified)
Indian Institute of Technology Kharagpur
Kharagpur, West Bengal, India | PIN - 721302

See location in the Map
03222 282435
Mail: support@ndl.gov.in

Sl.	Authority	Responsibilities	Communication Details
1	Ministry of Education (GoI), Department of Higher Education	Sanctioning Authority	https://www.education.gov.in/ict-initiatives
2	Indian Institute of Technology Kharagpur	Host Institute of the Project: The host institute of the project is responsible for providing infrastructure support and hosting the project	https://www.iitkgp.ac.in
3	National Digital Library of India Office, Indian Institute of Technology Kharagpur	The administrative and infrastructural headquarters of the project	Dr. B. Sutradhar bsutra@ndl.gov.in
4	Project PI / Joint PI	Principal Investigator and Joint Principal Investigators of the project	Dr. B. Sutradhar bsutra@ndl.gov.in Prof. Saswat Chakrabarti will be added soon
5	Website/Portal (Helpdesk)	Queries regarding NDLI and its services	support@ndl.gov.in
6	Contents and Copyright Issues	Queries related to content curation and copyright issues	content@ndl.gov.in
7	National Digital Library of India Club (NDLI Club)	Queries related to NDLI Club formation, support, user awareness program, seminar/symposium, collaboration, social media, promotion, and outreach	clubsupport@ndl.gov.in
8	Digital Preservation Centre (DPC)	Assistance with digitizing and archiving copyright-free printed books	dpc@ndl.gov.in
9	IDR Setup or Support	Queries related to establishment and support of Institutional Digital Repository (IDR) and IDR workshops	idr@ndl.gov.in