A survey on common criteria (CC) evaluating schemes for security assessment of IT products
Ontology highlight
ABSTRACT:
SUBMITTER: Fatima M
PROVIDER: S-EPMC8576545 | biostudies-literature |
REPOSITORIES: biostudies-literature
Similar Datasets
Project description:When inferring phylogenies, one important decision is whether and how nucleotide substitution parameters should be shared across different subsets or partitions of the data. One sort of partitioning error occurs when heterogeneous subsets are mistakenly lumped together and treated as if they share parameter values. The opposite kind of error is mistakenly treating homogeneous subsets as if they result from distinct sets of parameters. Lumping and splitting errors are not equally bad. Lumping errors can yield parameter estimates that do not accurately reflect any of the subsets that were combined whereas splitting errors yield estimates that did not benefit from sharing information across partitions. Phylogenetic partitioning decisions are often made by applying information criteria such as the Akaike information criterion (AIC). As with other information criteria, the AIC evaluates a model or partition scheme by combining the maximum log-likelihood value with a penalty that depends on the number of parameters being estimated. For the purpose of selecting an optimal partitioning scheme, we derive an adjustment to the AIC that we refer to as the AIC$^{(p)}$ and that is motivated by the idea that splitting errors are less serious than lumping errors. We also introduce a similar adjustment to the Bayesian information criterion (BIC) that we refer to as the BIC$^{(p)}$. Via simulation and empirical data analysis, we contrast AIC and BIC behavior to our suggested adjustments. We discuss these results and also emphasize why we expect the probability of lumping errors with the AIC$^{(p)}$ and the BIC$^{(p)}$ to be relatively robust to model parameterization.
| S-EPMC6005138 | biostudies-literature
Project description:The structures, relative stabilities, and infrared spectra of the six low-energy conformers of glycine have been characterized using a state-of-the-art quantum-mechanical approach allowing the bond distances, conformational enthalpies and vibrational frequencies to be determined well within the chemical accuracy. Transition state structures governing interconversion among the different energy minima have also been characterized. In detail, the gas-phase thermodynamic properties (at 15 K and 410 K) of the glycine conformers considered have been obtained with a 1 kJ mol(-1) accuracy, and it has been shown that the employment of DFT geometries usually reduces such accuracy by at most 0.1 kJ mol(-1). Regarding molecular structures, the use of two different composite schemes allowed us to further confirm the suitability of a rather cost-effective approach and provide geometrical parameters with an overall accuracy better than 0.002 Å for distances and 1 degree for angles. Thanks to a hybrid CC/DFT approach, the infrared spectra of all conformers considered and of several deuterated isotopologues have been reproduced (when experimental data were available) or predicted with an accuracy of 10 cm(-1). Finally, the joint thermodynamic and spectroscopic investigation allowed us to shed some light on the possible observation of elusive conformers. On the whole, the high accuracy of the computational results allows us to draw a fully consistent interpretation of the available experimental data and to obtain a more complete characterization of the potential energy surface of glycine.
| S-EPMC4596005 | biostudies-literature
Project description:This paper aims to evaluate the cyber security culture readiness of organizations from different countries and business domains when teleworking became a necessity due to the COVID-19 crisis. We have designed a targeted questionnaire and conducted a web-based survey addressing employees while working from home during the COVID-19 spread over the globe. The questionnaire contained no more than 23 questions and was available for almost a month, from 7th April 2020 until 3rd May 2020. During that period, 264 participants from 13 European countries spent approximately 8 minutes to answer it. Gathered data were analyzed from different perspectives leading to evolutionary findings regarding information security readiness and resilience of both individuals and organizations. In this paper, results are being presented and discussed in detail while focusing on future scientific routes and research paths that need to be explored. It concludes on a number of cyber security recommendations addressing both the emerged vulnerabilities and the need for security culture evolution. Supplementary Information The online version contains supplementary material available at 10.1057/s41284-021-00286-2.
| S-EPMC7908004 | biostudies-literature
Project description:The disturbance, damage and destruction of roosts are key drivers of bat population declines worldwide. In countries where bats are protected by law, bat roost surveys are often required to inform ecological impact assessments. Yet, evidence-based information on survey methodology to detect bat roosts is crucially lacking, and failing to detect a roost can lead to serious errors during decision-making processes. Here, we assess the efficacy of bat roost surveys in buildings as implemented in the UK. These consist of a daytime inspection of buildings, followed by a series of acoustic surveys at dusk/dawn if during the daytime inspection evidence of bats is found, or if the absence of bats cannot be verified. We reviewed 155 ecological consultants' reports to (1) compare survey outcome between daytime inspection and acoustic surveys and (2) determine the minimum sampling effort required during acoustic surveys to be confident that no bats are roosting within a building. We focused on two genera of bats most frequently found in buildings in Europe - Pipistrellus (crevice roosting species with high-intensity echolocation calls that can be easily detected by ultrasound detectors) and Plecotus (species that roost in open spaces and which emit faint echolocation calls that are difficult to detect). Daytime inspections were efficient in detecting open-roosting species such as Plecotus species but were likely to miss the presence of crevice-dwelling ones (here Pipistrellus species) which may lead to erroneous conclusions if no acoustic surveys are subsequently prescribed to confirm their absence. A minimum of three and four acoustic surveys are required to be 95% confident that a building does not host a roost of Pipistrellus species and Plecotus species, respectively, thus exceeding current recommendations. Overall, we demonstrated that reports submitted as part of an ecological impact assessment provide suitable data to test and improve survey methods.
| S-EPMC7687239 | biostudies-literature
Project description:Failed user authentication is a common event. Forgotten passwords and fingerprint non-recognition are the most common causes. Therefore, there is a need for efficient backup authentication methods, known as fallback authentication. However, fallback authentication methods suffer from different security and usability issues. This study aims to improve the security and usability of knowledge-based fallback authentication in the form of static security questions. The approach proposed in this study was designed considering different factors, such as question features, authentication mechanisms, and the use of tools to aid in composing memorable and secure answers. This study used a two-part experiment with 23 participants to evaluate the proposed approach based on security model testing. The results show that the proposed approach offered improved resistance to blind guess, focused guess, and observation guess attacks. While usability was clearly improved with questions that were based on recognition mechanisms, our results indicate that fallback authentication systems need a flexible level of security and avoidance of complexity in composing answers. In addition, our results indicate the effectiveness of using user behavioral details in the choice of topics for questions, where behavioral questions must have both high recall levels and resistance against guessing attacks. This work theoretically extends the knowledge of fallback authentication research by evaluating new security questions for fallback authentication considering replace of classical topics of security questions by introducing new topics of security questions based on user behavior and personal preferences. Also, this study applies methods of managing answers to security questions by encouraging users to compose answers based on free strict rules that inspire them to create strong and memorable answers based on their own rules. In addition, the findings of this study could support the deployment of knowledge-based authentication in fallback systems as a practical contribution to the user authentication field.
| S-EPMC9044221 | biostudies-literature
Project description:The Internet of Medical Things (IoMT) couples IoT technologies with healthcare services in order to support real-time, remote patient monitoring and treatment. However, the interconnectivity of critical medical devices with other systems in various network layers creates new opportunities for remote adversaries. Since most of the communication protocols have not been specifically designed for the needs of connected medical devices, there is a need to classify the available IoT communication technologies in terms of security. In this paper we classify IoT communication protocols, with respect to their application in IoMT. Then we describe the main characteristics of IoT communication protocols used at the perception, network and application layer of medical devices. We examine the inherent security characteristics and limitations of IoMT-specific communication protocols. Based on realistic attacks we identify available mitigation controls that may be applied to secure IoMT communications, as well as existing research and implementation gaps.
| S-EPMC7506588 | biostudies-literature
Project description:BackgroundIn sub-Saharan Africa, the use of skin-lightening products (SLPs) for cosmetic purposes has become common practice among women with dark skin tones. Despite the associated risks, the practice is still significantly increasing in Africa. The objective of this study was to determine the knowledge, perceptions and practice toward skin lightening among young adults.MethodsA cross-sectional survey among health science students at a tertiary institution in the Western Cape of South Africa was conducted.ResultsA total of 401 participants were included in the sample. There was a low prevalence (12%) of skin-lightening practice among students, which could possibly be a result of students being aware of the associated side effects. Participants believed that family and friends are most likely to influence this behavior (48%) and perceived that individuals who practice skin lightening do so because this provides a more fashionable look (76%). Men and women were found to be equally likely to use SLPs, and those residing in urban settings are 10 times more likely to engage in the practice compared with rural dwellers.ConclusionThis study contributes valuable information on the phenomenon of skin lightening among a diverse group of young adults. The results highlight the influential role social media platforms and family members play in motivating use of SLPs. Furthermore, the equal likelihood of use among both sexes suggests that the practice is growing among males.
| S-EPMC8714566 | biostudies-literature
Project description:With the rapid development of blockchain technology, the financial and monetary (FM) blockchain fields also began to collide. Therefore, this study aims to explore the relationship between the two fields and efficiently evaluate the security of financial information. Firstly, this study introduces the theoretical basis of blockchain in the dynamic linkage mechanism of FM and gives the overall framework of digital currency based on blockchain. Meanwhile, the relationship between blockchain and digital finance is empirically analyzed and designed. Secondly, the framework of financial information service security assessment (ISSA) is created using blockchain technology, and the frame of security risk evaluation is verified by taking electronic invoice information as the research object. Finally, the results show that: (1) foreign exchange (forex) events and major stock index decline events have a significant impact on the return of Bitcoin (BTC) in the short term. Moreover, more than 70% of uncertainty events will make BTC's abnormal return (AR) significantly positive; (2) Under the influence of forex uncertainty events, only one BTC's AR is remarkably negative in short order, while the other seven times are markedly positive. In the uncertainty events of major stock indexes, only two times are significantly negative, and the other six times are positive. This indicates that uncertain events in the short run make prominent AR of BTC; the proposed blockchain-based ISSA model and assessment index are scientific, feasible, and operable.
| S-EPMC10618252 | biostudies-literature
Project description:An important consideration in the commercialization of cell-based meat, poultry, and seafood is what common or usual name to use on package labels to meet U.S. Food and Drug Administration (FDA) regulations. However, naming these products has been the subject of considerable debate. This study used a 3 × 10 between-subjects online experiment involving a quota sample of 3,186 U.S. adult panel participants to test common or usual names using images of realistic packages of three types of seafood that a consumer might encounter in a supermarket. The terms tested were, "cell-based seafood," "cell-cultured seafood," "cultivated seafood," and "cultured seafood" and the phrases, "produced using cellular aquaculture," "cultivated from the cells of ____," and "grown directly from the cells of ____," where the blanks are filled by the name of the seafood product. Five criteria were used for evaluation, including each term's ability to: enable consumers to distinguish cell-based seafood from wild and farmed fish, to signal potential allergenicity, be seen by consumers as an appropriate term to identify the product, not disparage either cell-based or conventional products, and not evoke thoughts, images, or emotions that are inconsistent with the idea that the products are safe, healthy, and nutritious. The results showed that "cell-based seafood" outperforms the other names tested. It enables consumers to recognize that the products are neither wild caught nor farm raised, signals potential allergenicity, is seen as an appropriate name for describing the technology/process, and it performs well with respect to measures of consumer acceptance, particularly in comparison to conventional products. PRACTICAL APPLICATION: Creating consensus around a single common or usual name for cell-based meat, poultry, and seafood products is clearly important both for regulatory reasons and for shaping public perceptions and understanding of the products that are labeled with it. Our findings suggest that "cell-based" is the best common or usual name for seafood products that both meets FDA regulatory requirements and performs well with respect to potential consumer acceptance. Consistent use of this term by industry, advocates, and regulators would help orient consumers to what is likely to be a transformational food technology.
| S-EPMC7496225 | biostudies-literature
Project description:We propose and study two criteria to assess the usefulness of models that predict risk of disease incidence for screening and prevention, or the usefulness of prognostic models for management following disease diagnosis. The first criterion, the proportion of cases followed?PCF?(q), is the proportion of individuals who will develop disease who are included in the proportion?q?of individuals in the population at highest risk. The second criterion is the proportion needed to follow-up,?PNF?(p), namely the proportion of the general population at highest risk that one needs to follow in order that a proportion?p?of those destined to become cases will be followed.?PCF?(q)?assesses the effectiveness of a program that follows?100q% of the population at highest risk.?PNF?(p)?assess the feasibility of covering?100p% of cases by indicating how much of the population at highest risk must be followed. We show the relationship of those two criteria to the Lorenz curve and its inverse, and present distribution theory for estimates of?PCF?and?PNF. We develop new methods, based on influence functions, for inference for a single risk model, and also for comparing the?PCFs and?PNFs of two risk models, both of which were evaluated in the same validation data.
| S-EPMC3135785 | biostudies-literature