Michel Elliott Kabay | AMiner学者主页 | AMiner

Michel Elliott Kabay | AMiner学者主页 | AMiner

全面呈现 [Michel Elliott Kabay] 的学术影响力

深度挖掘高质量成果与权威引用，让优秀看得见

研究兴趣

暂无数据

论文（49）

专利

基金项目

按年份排序按引用量排序主题筛选期刊级别筛选合作者筛选合作机构筛选

1Penetrating Computer Systems and Networks

Chey Cobb,Stephen Cobb,M. E. Kabay, Tim Crothers

Chapter 15 Penetrating Computer Systems and Networks Chey Cobb, Chey CobbSearch for more papers by this authorStephen Cobb, Stephen CobbSearch for more papers by this authorM. E. Kabay, M. E. KabaySearch for more papers by this authorTim Crothers, Tim CrothersSearch for more papers by this author Chey Cobb, Chey CobbSearch for more papers by this authorStephen Cobb, Stephen CobbSearch for more papers by this authorM. E. Kabay, M. E. KabaySearch for more papers by this authorTim Crothers, Tim CrothersSearch for more papers by this author Book Editor(s):Seymour Bosworth, Seymour BosworthSearch for more papers by this authorMichel E. Kabay, Michel E. KabaySearch for more papers by this authorEric Whyne, Eric WhyneSearch for more papers by this author First published: 02 January 2012 https://doi.org/10.1002/9781118851678.ch15 AboutPDFPDF ToolsRequest permissionExport citationAdd to favoritesTrack citation ShareShareShare a linkShare onFacebookTwitterLinked InRedditWechat Summary This chapter discusses different aspects of penetration of computer systems and networks. Both technical and nontechnical aspects come into play when people attempt to penetrate security systems. Penetration of information systems is possible by means of a wide range of methods, some of which are very hard to defend against. People responsible for securing systems have to defend against this wide range of penetration methods. The cheapest and most effective attacks are often nontechnical, exploiting human frailty rather than weaknesses in the technology. Experienced criminal hackers tend to favor the nontechnical attack over the technical; and the best defense, employee awareness, is also nontechnical. Systems can be attacked at the client, at the server, or at the connection between the two. This chapter looks at methods of tricking people into allowing unauthorized access to systems. It also examines technical measures for overcoming security barriers and specific techniques for penetration, and describes legal and political aspects of system penetration. Computer Security Handbook, Sixth Edition RelatedInformation

2014COMPUTER SECURITY HANDBOOK, 6TH EDITION, VOL 1

引用

2Using Social Psychology to Implement Security Policies

M. E. Kabay,Bridgitt Robertson, Mani Akella, D. T. Lang

Chapter 50 Using Social Psychology to Implement Security Policies M. E. Kabay, M. E. KabaySearch for more papers by this authorBridgitt Robertson, Bridgitt RobertsonSearch for more papers by this authorMani Akella, Mani AkellaSearch for more papers by this authorD. T. Lang, D. T. LangSearch for more papers by this author M. E. Kabay, M. E. KabaySearch for more papers by this authorBridgitt Robertson, Bridgitt RobertsonSearch for more papers by this authorMani Akella, Mani AkellaSearch for more papers by this authorD. T. Lang, D. T. LangSearch for more papers by this author Book Editor(s):Seymour Bosworth, Seymour BosworthSearch for more papers by this authorMichel E. Kabay, Michel E. KabaySearch for more papers by this authorEric Whyne, Eric WhyneSearch for more papers by this author First published: 02 January 2012 https://doi.org/10.1002/9781118820650.ch50Citations: 3 AboutPDFPDF ToolsRequest permissionExport citationAdd to favoritesTrack citation ShareShareShare a linkShare onFacebookTwitterLinked InRedditWechat Summary This chapter discusses use of social psychology for the effective implementation of security policies. Social psychology can help people understand how best to work with human predilections and predispositions to achieve the goals of improving security. The chapter reviews well-established principles of social psychology that help security and network management personnel implement security policies more effectively. It emphasizes that leaders of the security team responsible for implementing security policies should be on the lookout for conflicts of style that interfere with the central task of making the enterprise more secure. Leaders should ensure that if an individual likes short, direct instructions without chitchat about nonessentials, the security team member should adapt and stick to essentials. In every security course or awareness program, instructors and facilitators should explicitly address the question of corporate culture, expectations, and social schemata. They should not rely solely on intellectual discourse when addressing a question of complex perceptions and feelings. They should also use simulations, videos, and role-playing exercises to bridge the gap between intellect and emotion. Citing Literature Computer Security Handbook, Sixth Edition RelatedInformation

2014COMPUTER SECURITY HANDBOOK, 6TH EDITION, VOL 2引用：23

引用

3Understanding Studies And Surveys Of Computer Crime

2014COMPUTER SECURITY HANDBOOK, 6TH EDITION, VOL 1引用：8

引用

4Computer Security Handbook, Set

Seymour Bosworth,Michel E. Kabay,Eric Whyne

Computer security touches every part of our daily lives from our computers and connected devices to the wireless signals around us. Breaches have real and immediate financial, privacy, and safety consequences. This handbook has compiled advice from top professionals working in the real world about how to minimize the possibility of computer security breaches in your systems. Written for professionals and college students, it provides comprehensive best guidance about how to minimize hacking, fraud, human error, the effects of natural disasters, and more. This essential and highly-regarded reference maintains timeless lessons and is fully revised and updated with current information on security issues for social networks, cloud computing, virtualization, and more.

2014Computer Security Handbook, Set引用：23

引用

5Securing Stored Data

David J. Johnson, Nicholas Takacs,Jennifer Hadley,M. E. Kabay

2014COMPUTER SECURITY HANDBOOK, 6TH EDITION, VOL 1

引用

6Writing Secure Code

Lester E. Nichols,M. E. Kabay, Timothy Braithwaite

This chapter discusses why it is important to write secure code. Writing secure code takes coordination and cooperation of various functional areas within an organization, and may require fundamental changes in the way software development is designed, written, tested, and implemented. It requires the developer to work in conjunction with the rest of the project team and other key stakeholders to meet the challenges that must be defined, reconciled, and overcome prior to the release of the software or system. The additional push to market that can drive the rapid development process can also have a negative impact on the security of the application. The problem must be dealt with in two ways, technical and procedural. Technically, the programmers must be aware of the pitfalls associated with application development and avoid them. Procedurally, the development team and organization need to adhere to a consistent methodology of development. This consistency also needs to include the identification of security risks at every stage of the process, including the requirements analysis.

2014COMPUTER SECURITY HANDBOOK, 6TH EDITION, VOL 1引用：1

引用

7History of Computer Crime

2014COMPUTER SECURITY HANDBOOK, 6TH EDITION, VOL 1引用：4

引用

8Using Pragmatic Metrics In Practice

2013PRAGMATIC SECURITY METRICS: APPLYING METAMETRICS TO INFORMATION SECURITY

引用

9Effect Of Weighting The Pragmatic Criteria

2013PRAGMATIC SECURITY METRICS: APPLYING METAMETRICS TO INFORMATION SECURITY

引用

10Designing Pragmatic Security Measurement System

2013PRAGMATIC SECURITY METRICS APPLYING METAMETRICS TO INFORMATION SECURITY

引用

11Pragmatic Security Metrics Applying Metametrics To Information Security Conclusions

2013PRAGMATIC SECURITY METRICS: APPLYING METAMETRICS TO INFORMATION SECURITY

引用

12Sabsa Security Attributes Table

2013PRAGMATIC SECURITY METRICS: APPLYING METAMETRICS TO INFORMATION SECURITY

引用

13Capability Maturity Model (Cmm)

2013PRAGMATIC SECURITY METRICS: APPLYING METAMETRICS TO INFORMATION SECURITY引用：1

引用

14150+Example Security Metrics

2013PRAGMATIC SECURITY METRICS: APPLYING METAMETRICS TO INFORMATION SECURITY

引用

15Example Opinion Survey Form

2013PRAGMATIC SECURITY METRICS: APPLYING METAMETRICS TO INFORMATION SECURITY

引用

16Pragmatic Security Metrics Applying Metametrics to Information Security Preface

2013PRAGMATIC SECURITY METRICS APPLYING METAMETRICS TO INFORMATION SECURITY

引用

17Metametrics And The Pragmatic Approach

2013PRAGMATIC SECURITY METRICS: APPLYING METAMETRICS TO INFORMATION SECURITY

引用

18Business Model Of Information Security (Bmis)

2013PRAGMATIC SECURITY METRICS: APPLYING METAMETRICS TO INFORMATION SECURITY引用：2

引用

19Downsides Of Metrics

2013PRAGMATIC SECURITY METRICS: APPLYING METAMETRICS TO INFORMATION SECURITY

引用

20Why Measure Information Security?

2013PRAGMATIC SECURITY METRICS APPLYING METAMETRICS TO INFORMATION SECURITY

引用

作者统计

合作学者

合作机构

D-Core

合作者
学生
导师

Seymour Bosworth

Seymour Bosworth合作论文数2

Eric Whyne

Eric Whyne合作论文数2

Jennifer Hadley

Jennifer Hadley合作论文数1

Bridgitt Robertson

Bridgitt Robertson合作论文数1

Stephen Cobb

Stephen Cobb合作论文数1

相似学者

Seymour Bosworth

Seymour Bosworth

Jennifer Hadley

Jennifer Hadley

Bridgitt Robertson

Bridgitt Robertson

数据免责声明

页面数据均来自互联网公开来源、合作出版商和通过AI技术自动分析结果，我们不对页面数据的有效性、准确性、正确性、可靠性、完整性和及时性做出任何承诺和保证。若有疑问，可以通过电子邮件方式联系我们：report@aminer.cn