NDLI: Holding management accountable: a new policy for protection against computer crime

Content Provider	IEEE Xplore Digital Library
Author	Wilson, C.
Copyright Year	2000
Description	Author affiliation: Comput. Security Officer for the Congressional Res. Service, Libr. of Congress, USA (Wilson, C.)
Abstract	Attacks by cyber criminals can be potentially just as damaging to the national infrastructure as attacks by cyber terrorists. Effective security countermeasures to combat computer crime parallel those used to protect against potential threats due to cyber terrorism and information warfare. Federal data about crime indicate that the growth in prosecution of computer crime is lower than the growth of computer incidents. A survey of the attitudes and activities of college students also revealed that current policy does not provide a strong deterrent to computer crime. Current policy, as expressed in the Computer Fraud and Abuse Act, does not hold organizational management accountable when their computers are broken into by hackers. However, security organizations repeatedly state that many if not most, computer intrusions occur largely because the host operating system has not had the latest fixes applied. Sometimes notices of system vulnerabilities have been widely published for months, but because available fixes were not applied, hackers using sophisticated attack tools, were able to locate exposed hosts on the Internet and attack those vulnerabilities. Hackers share vulnerability information via informal groups linked through the Internet, while government and private industry are reluctant to share vulnerability information. This characteristic gives attackers an advantage that helps them exploit host weaknesses. A recommendation is made to hold managers in the government and private sector more accountable for keeping their computer assets updated with the latest operating system fixes, to improve computer security and protect the national infrastructure.
Starting Page	272
Ending Page	281
File Size	934375
Page Count	10
File Format	PDF
ISBN	0780362624
DOI	10.1109/NAECON.2000.894921
Language	English
Publisher	Institute of Electrical and Electronics Engineers, Inc. (IEEE)
Publisher Date	2000-10-12
Access Restriction	Subscribed
Rights Holder	Institute of Electrical and Electronics Engineers, Inc. (IEEE)
Subject Keyword	Protection Computer crime Computer hacking Computer security Terrorism Operating systems Internet Government Data security Information security
Content Type	Text
Resource Type	Article

Sl.	Authority	Responsibilities	Communication Details
1	Ministry of Education (GoI), Department of Higher Education	Sanctioning Authority	https://www.education.gov.in/ict-initiatives
2	Indian Institute of Technology Kharagpur	Host Institute of the Project: The host institute of the project is responsible for providing infrastructure support and hosting the project	https://www.iitkgp.ac.in
3	National Digital Library of India Office, Indian Institute of Technology Kharagpur	The administrative and infrastructural headquarters of the project	Dr. B. Sutradhar bsutra@ndl.gov.in
4	Project PI / Joint PI	Principal Investigator and Joint Principal Investigators of the project	Dr. B. Sutradhar bsutra@ndl.gov.in Prof. Saswat Chakrabarti will be added soon
5	Website/Portal (Helpdesk)	Queries regarding NDLI and its services	support@ndl.gov.in
6	Contents and Copyright Issues	Queries related to content curation and copyright issues	content@ndl.gov.in
7	National Digital Library of India Club (NDLI Club)	Queries related to NDLI Club formation, support, user awareness program, seminar/symposium, collaboration, social media, promotion, and outreach	clubsupport@ndl.gov.in
8	Digital Preservation Centre (DPC)	Assistance with digitizing and archiving copyright-free printed books	dpc@ndl.gov.in
9	IDR Setup or Support	Queries related to establishment and support of Institutional Digital Repository (IDR) and IDR workshops	idr@ndl.gov.in

Are we really protected against hackers?

Internet infrastructure security

A signature based password authentication method

Towards a security benchmark for database management systems

Information Security Threats Classification Pyramid

Security analysis and the DSM model

National Information Infrastructure Security and Cyber Terrorism in the Process of Industrializations

Protection of Critical National Information Infrastructure (CNII) against cyber terrorism: Development of strategy and policy framework

Data security-can auditor involvement or use of auditing techniques help in building more secure systems?

Holding management accountable: a new policy for protection against computer crime

Similar Documents

Are we really protected against hackers?

Internet infrastructure security

A signature based password authentication method

Towards a security benchmark for database management systems

Information Security Threats Classification Pyramid

Security analysis and the DSM model

National Information Infrastructure Security and Cyber Terrorism in the Process of Industrializations

Protection of Critical National Information Infrastructure (CNII) against cyber terrorism: Development of strategy and policy framework

Data security-can auditor involvement or use of auditing techniques help in building more secure systems?

Holding management accountable: a new policy for protection against computer crime