Security Paradigm in Ubiquitous Computing

Abstract

The vast development of Information and Communication Technologies and the innovations applied in the field of governance and management push the researchers to change their perspectives in finding new security paradigms. The major effort regards the capability to identify some appropriate tools that have the characteristic of better fit with the "object" to protect in the real world.One of main aspect that can ensure the success in this operation is the correct integration and harmonization of the human factor with all remaining factors of a security system. This paper discusses why the CIA (Confidentiality, Integrity and Availability) paradigm is no more valid and able to perform its effect in a post-modern world, and why Cloud and Pervasive Computing requires a new approach in which the user become the main actor of the entire security system.

The Role of Trust and Co-partnership in the Societal Digital Security Culture Approach

“…The main idea was to generate a sort of trust and co-partnership between customers and security organizations in order to enhance the awareness transforming users into stakeholders. As we point out in a previous papers about security paradigm in ubiquitous computing [1], even a pervasive computing system that strives to be minimally intrusive has to be context-aware. In other words, it must be cognizant of its user's state and surroundings, and must modify its behavior based on this information [3].…”

“…In a previous paper [1] we presented the human factor as the main element around which set up a dynamic model. The organizational and technical factors are still important, but alone they can not ensure an effective and efficient security system.…”

A Case for Societal Digital Security Culture

“…[19], [20], and [21]. However, to the best of our knowledge, Colella and Colombini [22] are the only authors who-briefly-discussed security awareness to address threats related to pervasive computing. There is currently no work on SDSC.…”

How to Manage Cloud Risks Based on the BMIS Model

“…Nowadays, ubiquitous (or pervasive) computing, including ambient intelligence, augmented reality, or proactive computing [1], is a hot topic in the information area. Cloud computing is a typical technology in this field.…”

“…Some methods have tried to integrate the management paradigm with critical factors and other requirements in cloud security. Colella and Colombini [1] suggested the centrality of the human factor (other factors are organization and technical factors) and a dynamic approach to both external and internal threats. Ramgovind et al [11] discussed information security requirements and control methods in cloud computing.…”