检索结果-南通市图书馆

Smart Meter Deployment threat and Vulnerability analysis and Response

Journal of Energy and Power Engineering 2015年第2期9卷 199-213页

作者： Steven Dougherty Takaki Saitoh Cyber Security Architect Energy & Utilities Global Center of Competency Global Business Services Sacramento 95814California USA Registered Management Consultant Registered Professional Engineer Global Technology Services Osaka 5340000 Japan

Advanced intelligent or ＂smart＂ meters are being deployed in Asia. A result of deployment of smart meters, with associated equipment, is the electric power industry faced with new and changing threats, vulnerabilities and re-evaluate traditional approaches to cyber security. Protection against emerging cyber-security threats targeting smart meter infrastructures will increase risk to both the utility and customer if not addressed within initial rollouts. This paper will discuss the issues in SMI （smart meter infrastructures） deployments that pertain to cyber security. It will cover topics such as the threats to operations, infrastructure, network and people and organization and their associated risks. SMI deployments include not only the smart meter, but also the interfaces for home energy management systems as well as communication interfaces back to the utility. Utilities must recognize and anticipate the new threat landscape that can attack and compromise the meter and the associated field network collectors. They must also include threats to the WAN （wide-area-network） backhaul networks, smart meter headends, MDMS （meter data management systems） and their interfaces to CIS （customer information systems） and billing and OMS （outage management systems）. Lessons learned from SMI implementations from North America, Europe and recently, Japan, will be discussed. How white-box and black-box testing techniques are applied to determine the threat impact to the SMI. Finally, organizational change risk will be discussed and how utilities have responded to re-organizing and developing a security governance structure for the SMI and other smart grid applications.

关键词： Smart meter infrastructure cyber security risk assessment threat analysis meter vulnerability security operation center privacy.

来源：

维普期刊数据库评论

在线全文

维普期刊数据库

学校读者我要写书评

暂无评论

Systematic Literature Review on Cloud Computing Security: threats and Mitigation Strategies

引用

Journal of Information Security 2024年第2期15卷 148-167页

作者： Sina Ahmadi National Coalition of Independent Scholars Seattle United States

Cloud computing plays a significant role in modern information technology, providing organizations with numerous benefits, including flexibility, scalability, and cost-efficiency. However, it has become essential for organizations to ensure the security of their applications, data, and cloud-based networks to use cloud services effectively. This systematic literature review aims to determine the latest information regarding cloud computing security, with a specific emphasis on threats and mitigation strategies. Additionally, it highlights some common threats related to cloud computing security, such as distributed denial-of-service (DDoS) attacks, account hijacking, malware attacks, and data breaches. This research also explores some mitigation strategies, including security awareness training, vulnerability management, security information and event management (SIEM), identity and access management (IAM), and encryption techniques. It discusses emerging trends in cloud security, such as integrating artificial intelligence (AI) and machine learning (ML), serverless computing, and containerization, as well as the effectiveness of the shared responsibility model and its related challenges. The importance of user awareness and the impact of emerging technologies on cloud security have also been discussed in detail to mitigate security risks. A literature review of previous research and scholarly articles has also been conducted to provide insights regarding cloud computing security. It shows the need for continuous research and innovation to address emerging threats and maintain a security-conscious culture in the company.

关键词： Cloud Security threat analysis Mitigation Strategies Emerging Trends Ethi-cal Considerations Data analysis

来源：

维普期刊数据库评论

在线全文

维普期刊数据库

学校读者我要写书评

暂无评论

Social engineering in cybersecurity:a domain ontology and knowledge graph application examples

引用

Cybersecurity 2021年第1期4卷 480-500页

作者： Zuoguang Wang Hongsong Zhu Peipei Liu Limin Sun School of Cyber Security University of Chinese Academy of SciencesBeijing 100049China Beijing Key Laboratory of IoT Information Security Technology Institute of Information EngineeringChinese Academy of Sciences(CAS)Beijing 100093China

Social engineering has posed a serious threat to cyberspace *** protect against social engineering attacks,a fundamental work is to know what constitutes social *** paper first develops a domain ontology of social engineering in cybersecurity and conducts ontology evaluation by its knowledge graph *** domain ontology defines 11 concepts of core entities that significantly constitute or affect social engineering domain,together with 22 kinds of relations describing how these entities related to each *** provides a formal and explicit knowledge schema to understand,analyze,reuse and share domain knowledge of social ***,this paper builds a knowledge graph based on 15 social engineering attack incidents and scenarios.7 knowledge graph application examples(in 6 analysis patterns)demonstrate that the ontology together with knowledge graph is useful to 1)understand and analyze social engineering attack scenario and incident,2)find the top ranked social engineering threat elements(*** most exploited human vulnerabilities and most used attack mediums),3)find potential social engineering threats to victims,4)find potential targets for social engineering attackers,5)find potential attack paths from specific attacker to specific target,and 6)analyze the same origin attacks.

关键词： Social engineering attack Cyber security Ontology Knowledge graph Attack scenarios threat analysis Attack path Attack model Taxonomy Composition and structure

来源：

维普期刊数据库评论

在线全文

维普期刊数据库

学校读者我要写书评

暂无评论

A Systematic Risk Assessment Framework of Automotive Cybersecurity

引用

Automotive Innovation 2021年第3期4卷 253-261页

作者： Yunpeng Wang Yinghui Wang Hongmao Qin Haojie Ji Yanan Zhang Jian Wang School of Transportation Science and Engineering Beihang UniversityBeijing 100191China School of Electronic and Information Engineering Beihang UniversityBeijing 100191China Hefei Innovation Research Institute Beihang UniversityHefei 230012China China Automotive Technology and Research Center Co. Ltd.Tianjin 300300China

The increasingly intelligent and connected vehicles have brought many unprecedented automotive cybersecurity threats,which may cause privacy breaches,personal injuries,and even national security *** providing effective security solutions,a comprehensive risk assessment of the automotive cybersecurity must be carried out.A systematic cybersecurity risk assessment framework for automobiles is proposed in this *** consists of an assessment process and systematic assessment methods considering the changes of threat environment,evaluation target,and available information in vehicle *** the process of risk identification and risk analysis,the impact level and attack feasibility level are assessed based on the STRIDE model and attack tree *** automotive cybersecurity risk matrix using a global rating algorithm is then constructed to create a quantitative risk ***,the applicability and feasibility of the proposed risk assessment framework are demonstrated through a use case,and the results prove that the proposed framework is *** proposed assessment framework helps to systematically derive automotive cybersecurity requirements.

关键词： Cybersecurity Assessment process threat analysis Attack tree Risk matrix Vehicle lifecycle

来源：

维普期刊数据库评论

在线全文

维普期刊数据库

学校读者我要写书评

暂无评论

Data access control in data exchanging supporting big data arena

引用

Journal of Management Analytics 2018年第3期5卷 155-169页

作者： Haoyang Jia Yimin Sheng Weili Han X.Sean Wang Software School Fudan UniversityShanghaiPeople’s Republic of China

A big data arena(BDA)is proposed to offer an effective trial-and-error environment for analysis algorithm design and application exploration through the provision of computational resources and intensive *** is expected to innovate the theories and technologies of,*** analytics,when a huge volume of data are shared in the *** to provide an effective data protection mechanism,however,is one of the most serious challenges that the BDA *** to resolve the above issues,this paper analyzes potential security threats that the data in the BDA face at four different processing stages,and puts forward effective access control mechanisms with their design and implementation,to resist the threats from different stages.

关键词： Access control big data arena threat analysis

来源：

维普期刊数据库评论

在线全文

维普期刊数据库

学校读者我要写书评

暂无评论

欢迎您,

建议与咨询留下您的常用邮箱和电话号码，以便我们向您反馈解决方案和替代方法

时间限定

文献类型

馆藏选择

核心期刊

语言

文献类型

帮助

文字说明：

检索规则说明：

检索范例：

分类表

所选分类

限定检索结果

文献类型

馆藏范围

日期分布

学科分类号

主题

机构

作者

语言

在线全文

在线全文

在线全文

在线全文

在线全文

请选择保存的检索档案：

请选择收藏分类：

通借通还

欢迎您,

建议与咨询 留下您的常用邮箱和电话号码，以便我们向您反馈解决方案和替代方法

时间限定

文献类型

馆藏选择

核心期刊

语言

文献类型

帮助

文字说明：

检索规则说明：

检索范例：

分类表

所选分类

限定检索结果

文献类型

馆藏范围

日期分布

学科分类号

主题

机构

作者

语言

在线全文

在线全文

在线全文

在线全文

在线全文

请选择保存的检索档案： 新增检索档案 确定 取消

请选择收藏分类： 新增自定义分类 确定 取消

通借通还

建议与咨询留下您的常用邮箱和电话号码，以便我们向您反馈解决方案和替代方法

请选择保存的检索档案：

请选择收藏分类：