Search

ABSTRACT Successful Security Risk Analysis (SRA) enables us to develop a secure information management system and provides valuable analysis data for future risk estimation. One of the qualitative techniques for SRA is the scenario method. This provides a framework for our explorations that raises our awareness and appreciation of uncertainty. However, the existing scenario methods are too abstract to be applicable to some situations and have not been formalized in information systems (ISs) because they do not explicitly define artifacts or have any standard notation. Therefore, this paper proposes the improved scenario-based SRA approach, which can create SRA reports using threat scenario templates and manage security risk directly in ISs. Furthermore, in order to show how to apply the proposed method in a specific environment, especially in a Broadband convergence Network (BcN) environment, a case study is presented. Copyright © 2011 John Wiley & Sons, Ltd. [ABSTRACT FROM AUTHOR]

Mobile agent paradigm is recognized as a new environment for distributed computing and provides many merits such as mobility, security, self-decision, and so on. However, its security problems should be resolved to increase its application to a variety of real domains. Especially, we must guarantee integrity of transferred mobile agents. Although many mobile agent systems were developed, the integrity issue remains a critical one. In this paper, we propose an integrity checking mechanism to do the aforementioned issue. The proposed mechanism is independent of specific security frameworks and can be added and used easily for various mobile agent platforms. [ABSTRACT FROM AUTHOR]

As mobile and Internet technologies evolve, mobile services (e.g., Internet banking, social commerce) continuously expand and diversify. In order to use these mobile services, it is essential that security services, especially distribution certificates (e.g., bank certificates), relevant to mobile devices be provided. Some approaches to providing distribution certificates between a user's mobile device and a personal computer (PC) have been proposed. However, the existing approaches do not guarantee that the certificate in the mobile devices same with the issued one from the PC, causing constraints on mobile services such as mobile phone banking and mobile commerce (M-commerce). In this paper, we propose a novel approach that shares certificates securely without modification of the existing standard certificate format between a smartphone and a PC. We also implemented the certificate sharing system (CSS) in a virtual private network (VPN). The CSS provides strong end-to-end data security for the certificate with a key size of 192-bits which is able to guarantee an expiration date of three years. It also provides strong data security on physical devices with the use of device ID. The certificate that is shared between devices is available only through the CSS's authorization process. In addition, the CSS provides a flexible and extensible system for sharing certificates in enterprise environments. The CSS module of a PC was implemented by way of a standard web language, and the CSS module of a smartphone was developed with the assistance of mobile applications with a small size of 1210KB. [ABSTRACT FROM AUTHOR]

• Internet protocol television recommendation based on information fusion is proposed. • Over-the-top data are added to solve data sparsity problem. • Actual internet protocol television data are used for evaluation. • An explicit information fusion approach can improve accuracy of recommendation. Internet protocol television (IPTV) provides video on demand (VOD), internet service, and real-time broadcasting to users as a service that combines broadcasting and communication technology. Among various services, the sales of VOD are profitable because VODs offer relatively strong direct revenue models in IPTV services. However, the development of a VOD recommender system for IPTV service is highly challenging owing to the lack of explicit preference information of users in an IPTV environment. Previous studies for IPTV VOD recommender systems have attempted to solve the data sparsity problem through implicit preference information; however, it is better to utilize explicit preference information to improve the performance of system. Recently, IPTV service providers have provided their own over-the-top (OTT) services such that explicit preference information of users for items can be combined. Therefore, we proposed a novel information fusion method for an IPTV VOD recommender system that integrates the explicit information of both IPTV and OTT services. In addition, we utilized the probabilistic matrix factorization, that guarantees high performance in most recommender systems, as a recommender algorithm in this study. Finally, we conducted comparative evaluations based on various metrics and validated that the information fusion of IPTV and OTT services contribute to the IPTV VOD recommender system. [ABSTRACT FROM AUTHOR]