Information Security Risk Assessment: Risk Assessment

Purpose




The purpose of the study was to investigate factors promoting innovation and application of internet of things in academic and research information organizations.




Design/methodology/approach




Quantitative research design involved survey of selected academic and research information organizations in public and private chartered institutions. Information professionals, digital content managers, information systems and technologists that normally consume big data and technological resources were involved in the process of data collection using structured questionnaire and content analysis. Information organizations and information practitioners were selected from public and private academic and research institutions.




Findings




Innovation of internet of things has increasingly transformed and changed academic and research information organizations as the source of knowledge in addition to expanding access to education, data, information and communication anywhere anytime through hyperconnectivity and networking. Internet of things technologies such as mobile of things, web of things, digital information systems and personal devices are widely applied by digital natives in academic and research information organizations. Mobilization platform and devices is the single biggest provider of data, information and knowledge in academic and research organizations. Modern trends in education and knowledge practices in academic institutions and information organizations depends upon internet of things, digital repositories, electronic books and journals, social media interfaces, multimedia applications, information portal hubs and interactive websites, although challenges regarding inadequate information communication technology infrastructure and social computing facilities still persist.




Research limitations/implications




Information organizations in public and private chartered academic and research institutions were adopted in the study. Respondents handling and supporting information management, planning and decision-making provided the necessary data. Information professionals, digital content managers, information systems and technologists are proactively involved in data and information analytics.




Practical implications




Academic and research information organizations are powerhouses that provide knowledge to support research, teaching and learning for sustainable development and the betterment of humanity and society. Innovation of internet of things and associated technologies provides practical aspects of attaining sustainable information development practices in the contemporary knowledge society. Internet of things technologies, principles of economies of scale and investment and customer needs entail that information organizations and practitioners should provide appropriate and smart systems and solutions.




Social implications




Modern academic and research information organizations have the social corporate responsibility to offer technological innovations to heighten access to knowledge and learning in academic and research institutions. Economically, innovation and application of internet of things provide unlimited access to big data and information in organizations all the time anywhere anytime.




Originality/value




Data management is a growing phenomenon that information practitioners need to fully understand in the digital economies. Information professionals need to embrace and appreciate innovation and application of internet of things technologies whose role in sustainable development practices is critical in academic and research organizations.

Promoting innovation and application of internet of things in academic and research information organizations

Designing a robotic application is a challenging task. It requires a vertical expertise spanning various fields, starting from hardware and low-level communication to high-level architectural solution for distributed applications. Today a single expert cannot undertake the entire effort of creating a robust and reliable robotic application. The current landscape of robotics middlewares, ROS in primis, does not offer a solution for this problem yet; developers are expected to be both architectural designers and domain experts. In our previous works we used the Architecture Analysis and Description Language to define a model-based approach for robot development, in an effort to separate the competences of software engineers and robotics experts, and to simplify the merge of software artifacts created by the two categories of developers. In this work we present a practical use-case, i.e., an autonomous wheelchair, and how we used a combination of model-based developed and automatic code generation to completely re-design and re-implement an existing architecture originally written by hand.

A use case in model-based robot development using AADL and ROS

The fourth industrial revolution is referred to as Industry 4.0. The current trend with manufacturing is automation and unparalleled levels of data exchange. To bring this trend to realization requires integrating the Internet of Things, Internet of Everything cyber-physical systems, cloud computing technologies, and more into manufacturing. Industry 4.0 involves a hyperconnected system that includes the smarter use of robotics to effectively and efficiently move to manufacture to new heights. With the use of all these technological systems, it is imperative to ensure that cyber security plays a role during the rise of this digital industrial revolution. In the United Kingdom, more than eighty manufacturing plants were hit by cyber attacks while threats in this specific industry have risen. The pitfalls of having hyperconnected systems leave an entire industry even more vulnerable than the traditional enterprise system design.

/pdf/cyber-security-in-industry-4-0-the-pitfalls-of-having-inyvtx93ub.pdf

Cyber Security in Industry 4.0: The Pitfalls of Having Hyperconnected Systems

Nowadays, software development is a more complex process than ever was and it faces the challenges, where security became one of the most crucial. The security issues became an essential part of software engineers and understanding the vulnerabilities, risks and others became the everyday bread. The needs of security in software development resulted in the creation of the so-called Secure Software Development Life Cycle (SSDLC). This is a methodological concept included in classical Software Development Life-Cycle, which is described by five main phases - analysis, design, implementation (building), testing, and evaluation (deployment and maintenance). The SSDLC adds another dimension ensuring the security. We introduce our same named tool "Secure Software Development Life-cycle", which follows the general idea and goes beyond it. Our tool helps to create security, hardening, testing, and validation reporting guidelines for selected use-cases. This tool is an environment for defining the current and future security requirements based on the collection of standards, recommendations, best practice, and many others. Connecting the SSDLC with other tools improves the general level of automation of the Product Life Cycle (PLC). The SSDLC gives a connection and context among security, safety and performance parameters. Compared with static security requirements definition, the SSDLC provides simple future extension and straight integration to the PLC process with non- or nearly-non personal (human) interaction.

Managing the Secure Software Development

This article examines the integration of secure coding practices into the overall Software Development Life Cycle (SDLC). Also detailed is a proposed methodology for integrating software assurance into the Department of Defense Information Assurance Certification & Accreditation Process (DIACAP). This method for integrating software assurance helps in properly securing the application layer as that is where more than half of the vulnerabilities lie in a system.

Integrating software assurance into the software development life cycle (sdlc)

Availability, integrity, and confidentiality (AIC) is a key theme everywhere as cyber security has become more than an emerging topic. The Department of Defense (DoD) has implemented multiple processes such as the Department of Defense information assurance certification and accreditation process (DIACAP), common criteria (CC), and created proven baselines to include information assurance (IA) controls to protect information system (IS) resources. The aim of this research study shall provide insight to the applicable processes, IA controls, and standards to include providing a method for selecting necessary government models and for system development.

Stephen Brewster

Papers

Integrating software assurance into the software development life cycle (sdlc)

DoD cyber technology policies to secure automated information systems