...
  • 主题
高级搜索  >
历史搜索 清空历史
首页> 外文期刊>Journal of supercomputing >Security threats to critical infrastructure: the human factor
【24h】

Security threats to critical infrastructure: the human factor

机译：对关键基础设施的安全威胁：人为因素

获取原文
获取原文并翻译 | 示例
           
页面导航
  • 摘要
  • 著录项
  • 相似文献
  • 相关主题

摘要

In the twenty-first century, globalisation made corporate boundaries invisible and difficult to manage. This new macroeconomic transformation caused by globalisation introduced new challenges for critical infrastructure management. By replacing manual tasks with automated decision making and sophisticated technology, no doubt we feel much more secure than half a century ago. As the technological advancement takes root, so does the maturity of security threats. It is common that today’s critical infrastructures are operated by non-computer experts, e.g. nurses in health care, soldiers in military or firefighters in emergency services. In such challenging applications, protecting against insider attacks is often neither feasible nor economically possible, but these threats can be managed using suitable risk management strategies. Security technologies, e.g. firewalls, help protect data assets and computer systems against unauthorised entry. However, one area which is often largely ignored is the human factor of system security. Through social engineering techniques, malicious attackers are able to breach organisational security via people interactions. This paper presents a security awareness training framework, which can be used to train operators of critical infrastructure, on various social engineering security threats such as spear phishing, baiting, pretexting, among others.
机译：在二十一世纪，全球化使公司边界变得无形且难以管理。全球化带来的这种新的宏观经济转型为关键基础设施管理带来了新的挑战。通过用自动化决策和复杂技术代替手动任务，无疑我们比半个世纪前更加安全。随着技术的进步扎根，安全威胁的成熟也随之生根。如今，关键的基础架构通常是由非计算机专家来操作的，例如卫生保健的护士，军人的士兵或紧急服务的消防员。在这种具有挑战性的应用程序中，防范内部攻击通常既不可行也不经济，但是可以使用适当的风险管理策略来管理这些威胁。安全技术，例如防火墙有助于保护数据资产和计算机系统免遭未经授权的入侵。但是，经常被忽略的一个方面是系统安全的人为因素。通过社会工程技术，恶意攻击者能够通过人际互动破坏组织安全。本文提出了一个安全意识培训框架，该框架可用于培训关键基础设施的运营商，以应对各种社会工程安全威胁，例如鱼叉式网络钓鱼，诱饵，假冒等等。

著录项

相似文献

  • 外文文献
  • 中文文献
  • 专利
获取原文

客服邮箱：kefu@zhangqiaokeyan.com

京公网安备：11010802029741号 ICP备案号：京ICP备15016152号-6 六维联合信息科技 (北京) 有限公司©版权所有

  • 客服微信

  • 服务号