A Roadmap for Cloud SECO: EcoData and the New Actors in IoT Era

Franca, Marcelo; Santos, Rodrigo Pereira dos; Werner, Cláudia Maria Lima

doi:10.1109/dcoss.2015.35

Cited by 2 publications

(1 citation statement)

References 10 publications

Supporting

Mentioning

Contrasting

Order By: Relevance

“…Control 1 is presented by Acar et al [16], in which the authors explain that in access control it is important to analyze the security requirements that support identifying risks. In addition, Franc ¸a et al [37] argue that analysis of security requirements is a social activity since people are those who participate in these ecosystems. Control 8 is shown in Xu et al [20] study, whose authors explain that a webview application for mobile needs to have the same cautions that a common application in a web browser has.…”

Section: Resultsmentioning

confidence: 99%

A Study on Organizational IT Security in Mobile Software Ecosystems Literature

Steglich

Majdenbaum

Marczak

et al. 2020

2020 IEEE International Conference on Software Architecture Companion (ICSA-C)

Self Cite

View full text Add to dashboard Cite

Information security is a key topic for most organizations. With the digital revolution, smartphones have become popular not only for personal use but also within organizations where many employees use them for business purposes. As smartphones are increasingly present in organizations, it is necessary to understand what recommendations the literature provides for the safe use of such devices, helping organizations to protect themselves from threats. ISO 27000 is a well-known standard for information security in a business context. It provides a set of controls that must be observed to ensure more secure organizational information. Therefore, the goal of this study is to identify which controls presented in ISO 27000, more specifically ISO 27001, are present in the Mobile Software Ecosystem (MSECO) literature. To do so, we conducted a systematic mapping review supplemented by a snowballing process to identify studies in the field of MSECO that have addressed any subject that is present in ISO 27001. We found that 34 out of the 114 ISO 27001 controls are covered by the MSECO literature. Also, some of the ISO sections (e.g., Asset Management) have not yet been explored in the MSECO literature. Our results can inspire future and further studies on the topic of MSECO information security.

show abstract

Section: Resultsmentioning

confidence: 99%