No abstract

This paper is concerned with supporting the use of ISO 17799: 2005 information security management standard for the purpose of providing a 'common safe environment' for information services. The paper introduces a STOPE view of the standard, integrating its parts and protection measures around the basic domains of 'strategy, technology, organization, people, and environment'. The paper also presents an approach for the application of the standard, considering the STOPE view, in a way that emphasizes continuous improvement. The phases of the approach are based on the phases of six sigma DMAIC approach of 'define, measure, analyze, improve, and control'; the team proposed for the implementation of the work is also based on six sigma principles. The paper concludes with some suggestions for future related and needed work.

Structured Query Language Injection Attack (SQLIA) is the most exposed to attack on the Internet. From this attack, the attacker can take control of the database therefore be able to interpolate the data from the database server for the website. Hence, the big challenge became to secure such website against attack via the Internet. We have presented different types of attack methods and prevention techniques of SQLIA which were used to aid the design and implementation of our model. In the paper, work is separated into two parts. The first aims to put SQLIA into perspective by outlining some of the materials and researches that have already been completed. The section suggesting methods of mitigating SQLIA aims to clarify some misconceptions about SQLIA prevention and provides some useful tips to software developers and database administrators. The second details the creation of a filtering proxy server used to prevent a SQL injection attack and analyses the performance impact of the filtering process on web application.

Cloud computing paradigm has been recognized recently as key enabling efficient and effective technological services that will reshape the delivery and support of the educational services. In this paper, we review the literature on cloud computing adoption by Higher Educational Institutions (HEIs) that were published during the period 2009 -2014. The motivation was to identify the main frameworks, models and architectures that were proposed for establishing cloud computing services inside HEIs. Furthermore, the review researched standard definitions and main characteristics, offered services and delivered models of cloud computing technology. It identified 133 papers that were published during the last six years and were focused on cloud computing adoption frameworks, models and architectures for HEIs. The review also provides a landscape of the research in this area and draws attention for more investigation in this field towards developing a comprehensive unified framework for the adoption of cloud computing services in HEIs.

No abstract