The invention discloses an information security management system, which is characterized in that the system comprises a client-side capable of generating two-dimensional codes, wherein the client-side is connected with a cloud server through a WiFi (wireless fidelity) network, a sorting system is also connected with the cloud server through the WiFi network, and comprises a master control unit MCU, the MCU is capable of controlling a plurality of electromagnetic switches matched with a conveying belt of the sorting system, and is also capable of controlling a camera, and the cloud server is also connected with a Web foreground through the WiFi network. The information security management system is capable of protecting client information, is convenient and safe in operation and is capable of automatically realizing information updating.

Information security management system

Cyberattacks targeting ICT systems are becoming every day more sophisticated and disruptive. Such malevolent actions are performed by ill-motivated entities (governments, states, administrations, etc.), often featuring almost unlimited resources, but also by skilled individuals due to the accessibility of the attacks source code. In this alarming scenario, the selection of the optimal set of countermeasures to fire against those attacks represents a primary necessity. While significant effort has been made toward the standardization of the representation of security-related knowledge such as vulnerabilities, weaknesses, and attacks, the intelligence surrounding the countermeasures field received considerably less attention. The paper at hand aims at contributing to the reaction ecosystem by proposing a standard representation of the countermeasure instances. With such a proposition, we address one of the critical challenges found in the literature, that is, the absence of a commonly-shared definition of remediations. To demonstrate the feasibility of our approach, we present several scenarios where some relevant countermeasures are efficiently enforced, resulting in mitigating the ongoing cyberthreat. Then, the advantages and disadvantages of our proposal are extensively discussed, opening the debate for novel and effective contributions in this research line.

Battling against cyberattacks: towards pre-standardization of countermeasures

Modeling and efficiently detecting security-critical sequences of actions

Cost-sensitive metrics have been widely used during the past years as financial metrics that quantify the monetary costs and benefits of security investments, assess risks, and select countermeasures accordingly. However, due to the complexity of current attacks, and the level of dynamicity required in the estimation of the parameters composing the metrics, the use of a novel approach that considers restrictions, inter-dependency, as well as, the previous and current state at which the system is exposed to, is required. We propose in this article a Stateful Return on Response Investment (denoted by StRORI) that uses hypergraphs to model actions that have been previously deployed (e.g., at state ST0) while the current state of the system (e.g., ST1) is under analysis. As a result, StRORI is a dynamic tool that considers the changes of the system in terms of number of active devices, previously deployed countermeasures, the cost of adding a new countermeasure or suppressing a previously deployed one, and the effectiveness of a group of security measures due to the implementation of a given action. A case study is presented about the integration of the StRORI index with hypergraph models to assess countermeasures against cyber attacks.

Stateful RORI-based countermeasure selection using hypergraphs

Due to the blooming trend of information technologies, attacks have become widespread and sophisticated, which calls to build a strong defense design that works with the attack evolution. The countermeasure selection enables the system to retrieve its health. However, privacy concerns are also introduced in the selection process, which makes the business companies less credible, which affects both users and services. In this paper we propose a dynamic defense framework that allows selecting the optimal countermeasure which brings between the blockchain-based privacy preserving and the countermeasure selection in order to estimate the privacy coverage in the quantitative metric.

Azka Arshad

Papers

Framework for Calculating Return on Security Investment (ROSI) for Security-Oriented Organizations

Conductive Polymers for Cardiovascular Applications