Towards a More Representative Definition of Cyber Security

Schatz, Daniel; Bashroush, Rabih; Wall, Julie

doi:10.15394/jdfsl.2017.1476

Cited by 111 publications

(63 citation statements)

References 20 publications

Supporting

Mentioning

Contrasting

Unclassified

Order By: Relevance

“…We now provide definitions of the cyber terms. Schatz et al (2017) [p.66] define cyber security as "the approach and actions associated with security risk management processes followed by organizations and states to protect confidentiality, integrity and availability of data and assets used in cyber space. "…”

Section: Information Security and Cyber Security What Goes Where? (Vonmentioning

confidence: 99%

How does intellectual capital align with cyber security?

Renaud

Solms

2019

JIC

View full text Add to dashboard Cite

Purpose The purpose of this paper is to position the preservation and protection of intellectual capital as a cyber security concern. The paper outlines the security requirements of intellectual capital to help boards of directors (BoDs) and executive management teams to understand their responsibilities and accountabilities in this respect. Design/methodology/approach The research methodology is desk research. In other words, we gathered facts and existing research publications that helped us to define key terms, to formulate arguments to convince BoDs of the need to secure their intellectual capital and to outline actions to be taken by BoDs to do so. Findings Intellectual capital, as a valuable business resource, is related to information, knowledge and cyber security. Hence, preservation thereof is also related to cyber security governance and merits attention from BoDs. Research limitations/implications This paper clarifies BoDs intellectual capital governance responsibilities, which encompass information, knowledge and cyber security governance. Practical implications The authors hope that BoDs will benefit from the clarifications, and especially from the positioning of intellectual capital in cyber space. Social implications If BoDs know how to embrace their intellectual capital governance responsibilities, this will help to ensure that such intellectual capital is preserved and secured. Originality/value This paper extends a previous paper published by Von Solms and Von Solms, which clarified the key terms of information and cyber security, and the governance thereof. The originality and value is the focus on the securing of intellectual capital, a topic that has not yet received a great deal of attention from security researchers.

show abstract

Section: Information Security and Cyber Security What Goes Where? (Vonmentioning

confidence: 99%

How does intellectual capital align with cyber security?

Renaud

Solms

2019

JIC

View full text Add to dashboard Cite

show abstract

“…We use the expression “cyber risk management,” however, various terms have been utilized since the beginning of the computer age, such as computer security (Madnick, 1978), information security (Blakley et al, 2001), cyber risk management (Siegel et al, 2002), information security risk management (Bojanc & Jerman‐Blaič, 2008), and cybersecurity (Von Solms & Van Niekerk, 2013). This array of terminology has resulted in multiple papers attempting to reduce semantic confusion (Alshaikh et al, 2014; Craigen et al, 2014; Finne, 2000; Schatz, Bashroush & Wall, 2017; Stubley, 2013; Von Solms & Van Niekerk, 2013). The evolution and legacy of various terms related to cybersecurity continues to cause confusion and hinders an integrated response both to manage corporate cyber risk and engage in interdisciplinary research.…”

Section: Cyber Risk Management: Origins and Historical Developmentmentioning

confidence: 99%

Cyber risk management: History and future research directions

McShane

Eling

Nguyen

2021

Risk Manage Insurance Review

View full text Add to dashboard Cite

Cybersecurity research started in the late 1960s and has continuously evolved under different names such as computer security and information security. This article briefly covers that history but will especially focus on the latest incarnation known as "cyber risk management," which includes both technical and economic/management dimensions. The main focus of the article is to review research on individual steps of the cyber risk management process and on the overall process to highlight gaps and determine research directions. Two main findings are that cyber risk is difficult to include in the overall enterprise risk management process and that a move toward cyber resilience is necessary to deal with such a complex risk. Both findings require a level of interdisciplinary collaboration that is currently lacking.

show abstract

“…The distinct features of connectivity and autonomy, however, means that CAVs may be exposed to more cyber-attacks and, thus, are more vulnerable while exchanging data with their surrounding environment and other vehicles on the road [9]. In computer science, cyber security refers to the protection of a computer system's functions against cyber-attacks, including the damage to its hardware, software and data [10]. In CAVs, the cyber security concerns the protection of the CAV system against the cyber-attacks which compromise the CAV functions.…”

Section: Level 5 Full Driving Automationmentioning

confidence: 99%

Machine Learning-Based Detection for Cyber Security Attacks on Connected and Autonomous Vehicles

Meng

et al. 2020

Mathematics

View full text Add to dashboard Cite

Connected and Autonomous Vehicle (CAV)-related initiatives have become some of the fastest expanding in recent years, and have started to affect the daily lives of people. More and more companies and research organizations have announced their initiatives, and some have started CAV road trials. Governments around the world have also introduced policies to support and accelerate the deployments of CAVs. Along these, issues such as CAV cyber security have become predominant, forming an essential part of the complications of CAV deployment. There is, however, no universally agreed upon or recognized framework for CAV cyber security. In this paper, following the UK CAV cyber security principles, we propose a UML (Unified Modeling Language)-based CAV cyber security framework, and based on which we classify the potential vulnerabilities of CAV systems. With this framework, a new CAV communication cyber-attack data set (named CAV-KDD) is generated based on the widely tested benchmark data set KDD99. This data set focuses on the communication-based CAV cyber-attacks. Two classification models are developed, using two machine learning algorithms, namely Decision Tree and Naive Bayes, based on the CAV-KDD training data set. The accuracy, precision and runtime of these two models when identifying each type of communication-based attacks are compared and analysed. It is found that the Decision Tree model requires a shorter runtime, and is more appropriate for CAV communication attack detection.

show abstract

Towards a More Representative Definition of Cyber Security

Cited by 111 publications

References 20 publications

How does intellectual capital align with cyber security?

How does intellectual capital align with cyber security?

Cyber risk management: History and future research directions

Machine Learning-Based Detection for Cyber Security Attacks on Connected and Autonomous Vehicles

Contact Info

Product

Resources

About