Evolution of HTTPS Usage by Portuguese Municipalities

Gomes, Hélder; Zúquete, André; Dias, Gonçalo; Marques, Fábio; Silva, Catarina

doi:10.1007/978-3-030-45691-7_31

Cited by 2 publications

(3 citation statements)

References 5 publications

Supporting

Mentioning

Contrasting

Order By: Relevance

“…Counts References Technical information gathering 1 [31] Literature studies 7 [2, 6, 8-10, 12, 14] Case studies 9 [9,11,15,17,19,20,22,29,30] Quantitative studies (surveys) 4 [21,23,26,27] Other qualitative methods (expert interviews, document studies, action research) 6 [11, 15, 16, p., 18, 24, 28] data to compare and contrast what works and what does not, many of the specific issues of municipal cybersecurity, such as organization, culture, capabilities, and policies, is likely more suited to qualitative methods.…”

Section: Methodsmentioning

confidence: 99%

“…The authors of [31] investigated the use of the security protocol HTTPS by Portuguese municipalities by performing scanning of the municipalities' web pages and grading their use of certificates and protocols. The study was a follow-up of a previous study to identify drivers or correlations for municipal cybersecurity performance, where a weak correlation between population and tax level was found.…”

Section: Municipal Technologymentioning

confidence: 99%

See 1 more Smart Citation

Municipal Cybersecurity—A Neglected Research Area? A Survey of Current Research

Vestad

Yang

2023

Springer Proceedings in Complexity

View full text Add to dashboard Cite

Municipalities are tasked with ensuring the cybersecurity of critical public services and functions in diverse areas such as safe water supply, healthcare, child protective services, and education with vastly different security requirements—all usually served from a common infrastructure with limited technical and organizational cybersecurity capabilities. This literature review identifies recent research on municipal and local government cybersecurity to identify current research areas, state of the art, and research methods used in research so far. We found research in the areas of smart cities, elections, human factors, operational technology, and crisis management. We also give suggestions for further research to develop better models for cybersecurity in cross-disciplinary organizations.

show abstract

Section: Methodsmentioning

confidence: 99%

Section: Municipal Technologymentioning

confidence: 99%

Municipal Cybersecurity—A Neglected Research Area? A Survey of Current Research

Vestad

Yang

2023

Springer Proceedings in Complexity

View full text Add to dashboard Cite

show abstract

“…Similarly, the study in (Gomes et al, 2019(Gomes et al, , 2020, assesses the state of cybersecurity for the websites of Portuguese city councils. It goes beyond evaluating the adoption of HTTPS and the presence of security certificate errors, to also consider the implementation of security headers recommended by the Open Web Application Security Project (OWASP).…”

Section: Related Workmentioning

confidence: 99%

An Analysis on the Implementation of Secure Web-Related Protocols in Portuguese City Councils

2023

IJMCNM

View full text Add to dashboard Cite

The services supporting the websites, both public and private entities, may support security protocols such as HTTPS or DNSSEC. Public and private entities have a responsibility to ensure the security of their online platforms. Entities in the public domain such as city councils provide their services through their websites. However, each city council has its systems, configurations, and IT teams, and this means they have different standings regarding the security protocols supported. This paper analyzes the status of security protocols on Portuguese city council websites, specifically HTTPS and DNSSEC. The study evaluated 308 city council websites using a script developed for the research, and data was collected from the website of Direção Geral das Autarquias Locais (DGAL) on December 14, 2022, and the websites were scanned on December 22, 2022. The results of this assessment reveal that around 97% of city council websites use RSA as their encryption algorithm and around 84% use 2048-bit length keys for digital certificate signing. Furthermore, about 53% of the city council websites are still supporting outdated and potentially insecure SSL/TLS versions, and around 95% of the councils are not implementing DNSSEC in their domains. These results highlight potential areas for improvement in cybersecurity measures and can serve as a baseline to track progress toward improving cybersecurity maturity in Portuguese city councils.

show abstract

Evolution of HTTPS Usage by Portuguese Municipalities

Cited by 2 publications

References 5 publications

Municipal Cybersecurity—A Neglected Research Area? A Survey of Current Research

Municipal Cybersecurity—A Neglected Research Area? A Survey of Current Research

An Analysis on the Implementation of Secure Web-Related Protocols in Portuguese City Councils

Contact Info

Product

Resources

About