Search

An interview is presented on the subject of data management and security with computer science and engineering professionals Jeremiah Grossman of the Internet security services provider WhiteHat Security, Ben Livshits of the computer software company Microsoft Research, network security technology expert Rebecca Gurley Bace of the network security consultancy Infidel, and software engineer George Neville-Neil.

The article focuses on data services for business owners looking for access control of enterprise data. Topics include the specialization of Web services, the enabling of advanced querying functionality, and service-oriented architectures (SOA). Information is provided on integrated data services, cloud data services, and advanced technical issues in associated data service technologies. Several graphs are presented on service-enabling in relational data stores, an entity data model, and an OData service metadata document. INSETS: Service-Enabling Data Sources;Integrated Data Services.

The article focuses on information security and risk management. The perceived composite risk (PCR) is a composite metric that focuses on the aspects of information security risk including expected loss, expected severe loss, and standard deviation of the loss. Moreover, it provides the user powerful tools for examining proposals for enhancement of an organization's information security system. Meanwhile, it is recommended to use Analytic Hierarchy Process (AHP) in determining the weights in the PCR.

The article focuses on digital security models available for general information security. There are several kinds recommended by professionals including time-based security, principal of least privilege, defense-in-depth, baseline security, perimeter hardening, intrusion detection and intrusion prevention. Time-based security uses time as the measure of risk. The principle of least privilege depends on the degree of control a user has. The "Better-Than-Nothing" Security Practices (BTNSP) model is given as an example of a security prototype. Information is given for BTNSP online.