51 |
Security Guidelines for the Usage of Open Source SoftwareDomar Bolmstam, Sebastian, Hanifi, Siavash January 2020 (has links)
Open-source software is in average used in more than 65% of the applications within the domains of enterprise software, retail and e-commerce, cybersecurity and internet of things (Synopsys, 2019). With the frequent use of open-source software, security issues arise which need to be handled. These include among other issues; non-patched vulnerabilities and malicious code (Schryen, 2011). Security guidelines for open-source software usage have been defined by numerous security organizations as an effort to increase effective security handling of open source software within organizations. These guidelines often cover directives on many layers of an organization and are often lacking information necessary for them to be understandable, reliable, and useful to the person using them.The purpose of this study is to contribute to increased software security related to open-source software usage, by exploring and providing information on the topic, and by defining a set of improved security guidelines that cover both what measures to take to minimize security risks, and how to implement it, based on the published state-of-the-art security guidelines for using open-source software.The subject was investigated through a research process focused on answering whether the current state-of-the-art security guidelines could be improved, using a qualitative research type based on a document analysis data collection method. The research was exploratory in its design and the main focus was to explore the subject by trying to answer the posed research question.By investigating the state of contemporary security guidelines found in literature, and evaluating them against a set of desirable attributes for high quality guidelines, it became evident that the contemporary guidelines couldbe improved. An effort was therefore made to build on the found guidelines and improve them by trying to resolve the issues found through the evaluation.The effort of trying to improve existing guidelines resulted in a new set of guidelines including added information and reformulations, however, the changes made could not be said to be conclusive or objective improvements. Instead they present suggestions for how and in what aspects the contemporary guidelines could be improved. / Mjukvara med öppen källkod (open-source software) används i genomsnitti mer än 65% av applikationerna för mjukvara till företag, detaljoch e-imageimageimageimagehandel, cybersäkerhet och sakernas internet (Synopsys, 2019). Den frekventa användningen av öppen källkod ger upphov till säkerhetsrisker som behöver motverkas. Dessa risker inkluderar bland annat; skadlig kod och säkerhetsbrister som inte åtgärdas (Schryen, 2011). Säkerhetsriktlinjer har blivit definierade av ett flertal organisationer med målet att effektivisera säkerhetshanteringen av öppen källkod och på så sätt minska risken för attacker. Dessa riktlinjer täcker ofta många olika delar av en organisations hierarki och saknar ofta information som är nödvändig för att göra dem begripliga, pålitliga och användbara för de personer som använder dem. Syftet med denna studieär att bidra till enökad säkerhet vid användan-det av öppen källkod genom att dels öka kunskapen om ämnet, och genom att definiera en samling förbättrade säkerhetsriktlinjer som både beskriver vad som ska göras för att minska säkerhetsrisker och hur det ska göras. De förbättrade riktlinjerna ska baseras på befintliga säkerhetsriktlinjer för användning av öppen källkod. Ämnet studerades genom en forskningsprocess med fokus på att besvara frågan om huruvida befintliga säkerhetsriktlinjer kan förbättras, där information samlades in genom en kvalitativ forskningstyp baserad på dokumentanalys. Forskningsdesignen var av utforskande karaktär, där huvudfokuset låg i att utforska ämnet genom att försöka besvara forskningsfrågan.Genom att undersöka kvalitén av befintliga säkerhetsriktlinjer som hittats i litteraturen och utvärdera dessa med stöd av en stor samling önskvärda egenskaper hos riktlinjer av hög kvalitet, blev det uppenbart att befintliga riktlinjer kan förbättras. Däför genomfördes ett försök att vidareutveckla befintliga riktlinjer för att förbättra dem genom att lösa de problem som hittats genom utvärderingen. Försöket att förbättra existerande riktlinjer resulterade i en ny uppsättning riktlinjer med tillagd information och omformuleringar. Dessa förändringar kan dock inte sägas representera konklusiva eller objectiva förbättringar. Istället representerar de förbättrade riktlinjerna ett förslag på hur riktlinjer skulle kunna förbättras.
|
52 |
ICT and SMEs’ competitiveness in South Africa : how SMEs could use ICT to become competitive in South AfricaModimogale, Lloyd 27 August 2008 (has links)
This mini-dissertation reviews present literature to define ICT and SMEs and determine the current situation in South Africa with regard to the use of ICT by SMEs, including possible benefits to SMEs as well as stumbling blocks to adopting ICT. The research consists of collecting data from ten SMEs in Gauteng in South Africa using questionnaires and interviews, to determine how SMEs can use ICT to become more competitive. The mini-dissertation will have a number of chapters: the first chapter will give an overview of the subject. The second chapter will explain the research motivation and methodology while the third chapter will be the literature review, which will explore the topic of ICT and SMEs in depth, with a focus on South Africa. Chapter four will deal with data collection and analysis; the main source of data will be interviews based on structured questions. The fifth chapter will be the discussion and recommendations based on the results of the analysis and the literature review. Chapter Six will be the conclusion. / Dissertation (MIT)--University of Pretoria, 2008. / Informatics / unrestricted
|
53 |
Rhetoric or reality : US counterinsurgency policy reconsideredTodd, Maurice L. January 2015 (has links)
This study explores the foundations of US counterinsurgency policy and doctrine in order to better understand the main historical influences on that policy and doctrine and how those influences have informed the current US approach to counterinsurgency. The results of this study indicate the US experience in counterinsurgency during the Greek Civil War and the Huk Rebellion in the Philippines had a significant influence on the development of US counterinsurgency policy and doctrine following World War II through the Kennedy presidency. In addition, despite a major diversion from the lessons of Greece and the Philippines during the Vietnam War, the lessons were re-institutionalized in US counterinsurgency policy and doctrine following the war and continue to have significant influence today, though in a highly sanitized and, therefore, misleading form. As a result, a major disconnect has developed between the “rhetoric and reality” of US counterinsurgency policy. This disconnect has resulted from the fact that many references that provide a more complete and accurate picture of the actual policies and actions taken to successfully defeat the insurgencies have remained out of the reach of non-government researchers and the general public. Accordingly, many subsequent studies of counterinsurgency overlook, or only provide a cursory treatment of, aspects that may have had a critical impact on the success of past US counterinsurgency operations. One such aspect is the role of US direct intervention in the internal affairs of a supported country. Another is the role of covert action operations in support of counterinsurgency operations. As a result, the counterinsurgency policies and doctrines that have been developed over the years are largely based on false assumptions, a flawed understanding of the facts, and a misunderstanding of the contexts concerning the cases because of misleading, or at least seriously incomplete, portrayals of the counterinsurgency operations.
|
54 |
Changing from the silo model to the horizontal layers model in public policy regulations: the implications and potential for the telecommunications industrySpencer Logan, Lemuella C. 12 1900 (has links)
The end of the Twentieth Century and the start of the Twenty First Century has been a tumultuous time for the Telecommunications Industry. Even as it moves forward to embrace the new technologies the Industry finds itself embroiled in issues of governance. The Industry finds itself in a dilemma since innovations increase at a rate faster than the laws can be changed and these render its existing laws and policies to be in some cases obsolete and inappropriate for the reality of the present. In the past, the United States of America has relied on vertically integrated top down laws and methods of regulating all the different parts in its Telecommunications Industry. These laws are contained in the different numbered Titles of this Countrys Legal Codes. Since the inception of these laws, emphasis was placed in creating and documenting policies structured by industry, sector and type of content. This form of regulation is usually referred to as the Silo Method. However, in recent years, especially in the regulation of the Telephony industry, the method of law and rule formulation moved from content regulation to one in which the technologies are getting regulated in what has been described as a Layers Method. This paper first considered whether the Silo Method of regulation is in actuality the same as using the Horizontal Layers method and showed that this is the case. Then it determined that Enhanced Services are the same as Basic Services and that Telecommunications Services are the same as Information services and showed that given that the pair sets as noted were the same, it went on to conclude that all these services were essentially the same. While studying to some detail the technologies of VoIP, the paper also showed that VoIP although an Internet technology is similar to traditional telephony, and is both a Telecommunications Service and Information Service based on the definition as given in the law as well as the technologies that are used and that as a result of this, the current regulatory environment for this service with regards to telephony is inconsistent. It concluded that Telecommunications policies though now adequate may need to be modified.
|
Page generated in 0.024 seconds