The Experts below are selected from a list of 12 Experts worldwide ranked by ideXlab platform

Tommi Kärkkäinen - One of the best experts on this subject based on the ideXlab platform.

  • Tailorable Representation of Security Control Catalog on Semantic Wiki
    Cyber Security: Power and Technology, 2018
    Co-Authors: Riku Nykänen, Tommi Kärkkäinen
    Abstract:

    Selection of Security Controls to be implemented is an essential part of the information Security management process in an organization. There exist a number of readily available information Security management system standards, including Control Catalogs, that could be tailored by the organizations to meet their Security objectives. Still, it has been noted that many organizations tend to lack even the implementation of the fundamental Security Controls. At the same time, semantic wikis have become popular collaboration and information sharing platforms that have proven their strength as an effective way to distribute domain-specific information within an organization. This paper evaluates the adequacy of the semantic wiki as a Security Control Catalog platform for building an information Security knowledge base that would especially help small and medium-sized enterprises to develop and maintain their Security baseline.

Riku Nykänen - One of the best experts on this subject based on the ideXlab platform.

  • Tailorable Representation of Security Control Catalog on Semantic Wiki
    Cyber Security: Power and Technology, 2018
    Co-Authors: Riku Nykänen, Tommi Kärkkäinen
    Abstract:

    Selection of Security Controls to be implemented is an essential part of the information Security management process in an organization. There exist a number of readily available information Security management system standards, including Control Catalogs, that could be tailored by the organizations to meet their Security objectives. Still, it has been noted that many organizations tend to lack even the implementation of the fundamental Security Controls. At the same time, semantic wikis have become popular collaboration and information sharing platforms that have proven their strength as an effective way to distribute domain-specific information within an organization. This paper evaluates the adequacy of the semantic wiki as a Security Control Catalog platform for building an information Security knowledge base that would especially help small and medium-sized enterprises to develop and maintain their Security baseline.

Joshua Lubell - One of the best experts on this subject based on the ideXlab platform.

  • Integrating Top-down and Bottom-up CyberSecurity Guidance using XML.
    Balisage series on markup technologies, 2016
    Co-Authors: Joshua Lubell
    Abstract:

    This paper describes a markup-based approach for synthesizing disparate information sources and discusses a software implementation of the approach. The implementation makes it easier for people to use two complementary, but differently structured, guidance specifications together: the (top-down) CyberSecurity Framework and the (bottom-up) National Institute of Standards and Technology Special Publication 800-53 Security Control Catalog. An example scenario demonstrates how the software implementation can help a Security professional select the appropriate safeguards for restricting unauthorized access to an Industrial Control System. The implementation and example show the benefits of this approach and suggest its potential application to disciplines other than cyberSecurity.

  • XForms User Interfaces for Small Arcane Nontrivial Datasets
    Proceedings of Balisage: The Markup Conference 2014, 1
    Co-Authors: Joshua Lubell
    Abstract:

    Small Arcane Nontrivial Datasets (SANDs) are frequently complex enough to warrant custom software for access and editing, yet too small or specialized to justify a full-blown server-based database application. Such data is typically presented in tabular form within documents or as editable spreadsheets. To test the alternative of using XForms as a user interface for SANDs, an application was built for browsing a conformance test suite for Product and Manufacturing Information, a formal specification of a product's functional and behavioral requirements as they apply to production. XForms proved a much better match than tabulations for the underlying data model. To further test the concept, XForms was evaluated for use with the National Institute of Standards and Technology (NIST) Special Publication 800-53 Security Control Catalog, which is a comprehensive Catalog of Security Controls for managing cyber-risk, many parts of which are already available in extensible markup language (XML) form. The model-view-Controller (MVC) software pattern of XForms seems well-suited for creating specialized applications for tailoring and navigating this Catalog.

Joint Task Force Transformation Initiative - One of the best experts on this subject based on the ideXlab platform.