Nowadays, for information systems at organizational and interorganizational levels, information sharing is essential for business operations and strategic decision-making. As a mixed blessing, however, the information sharing process also exposes information systems to more severe virus attacks. In light of this, research efforts on virus propagation and virus control have drawn increasing interests in both the academic and industrial domains. This paper thus presents a virus propagation model, namely E-SEIR, to gain insights of virus propagation in networks with Point-to-Group (P2G) information sharing patterns. Unlike most existing virus propagation models, E-SEIR has three important characteristics. First, an additional exposed state is integrated into the model to describe the latent period of computer viruses. Second, a P2G infection function is introduced to the model to characterize the real-world networks, which consist of many information-sharing sub-networks. Third, E-SEIR takes various antivirus countermeasures into consideration, which provides unique opportunities for studying the behaviors of virus propagation with the presence of antivirus activities. Based on this E-SEIR model, we have studied the possibility of short-term virus outbreaks and long-term network survivability, and the results revealed some key managerial insights that are helpful for the practice of virus propagation control in information sharing networks.

Technical evaluation: Dial-up communication lines: Can they be secured?

Towards controlling virus propagation in information systems with point-to-group information sharing

This paper proposes a self-similar selection method as an alternative to existing immunization strategies for online networks. Given the self-similar characteristics of online networks which are shown to have fractal and scale-free structure, we presume that the self-similar selection which is well developed in physics outperforms random or targeted vaccination based on incoming or outgoing connections. We examine the effectiveness of the proposed self-similar selection method with random vaccination and other different types of targeted vaccination strategies in terms of delaying the spread of computer virus over a scale-free computer network constructed using real-world World Wide Web data. Our computer simulation results indicate that the self-similar selection method is more effective in deterring virus propagation than the existing vaccination strategies. In addition, vaccination based on self-similar selection is practical since it does not require detailed information about network morphology at the individual node level, which is often not easy to observe. Our findings have significant implications for both policy makers and network security providers.

/pdf/effective-immunization-of-online-networks-a-self-similar-41quet7sbt.pdf

Effective immunization of online networks: a self-similar selection approach

This paper investigates fundamental security issues and the growing impact of security breaches on computer networks. Cost-effective security measures, such as asset-threat analysis, enable monitoring of security levels in complex systems. An evaluation of one technique, called the Livermore Risk Analysis Methodology (LRAM) is documentedC 1 ] . Untrusted communication lines, unauthorized access and unauthorized dissemination of information must be contained. The complexity and corresponding sophistication of todays'This paper investigates fundamental security issues and the growing impact of security breaches on computer networks. Cost-effective security measures, such as asset-threat analysis, enable monitoring of security levels in complex systems. An evaluation of one technique, called the Livermore Risk Analysis Methodology (LRAM) is documentedC 1 ] . Untrusted communication lines, unauthorized access and unauthorized dissemination of information must be contained. The complexity and corresponding sophistication of todays' systems and the reliance of management on information generated by these systems make them attractive targets for computer related crimes. A profile of computer criminals and their crimes emphasize the importance of management involvement and social ethics as determents to crime. An overview of system security, control concepts, communication and transmission security, and a discussion of threats, vulnerabilities, and countermeasures is provided. The growing need for risk management models is presented as well as an overview of LRAM. Risk assessment of a specific system case study and risk profiles are developed using LRAM.

/pdf/network-security-risk-assessment-of-information-systems-37aeufrrcp.pdf

Technical evaluation: Dial-up communication lines: Can they be secured?

Citations

Towards controlling virus propagation in information systems with point-to-group information sharing

Effective immunization of online networks: a self-similar selection approach

Network security: Risk assessment of information systems

Related Papers (5)

Security for Dial Up Lines

Universal subscriber identity module card for operating Internet-enabled mobile station of e.g. global system for mobile communication, has dial-in controlling application allowing/preventing dial-up to be attempted using dial-in parameter

System and method for testing multiple dial-up points in a communications network

Adaptation of dial-up devices to broadband facilities

DATA-DIAL: two-way communication with computers from ordinary dial telphones