Information systems are exposed to different types of security risks. Theconsequences of information systems security (ISS) breaches can vary from e.g. damaging the data base integrity to physical ..."destruction" of entire information system facilities, and can result with minor disruptions in less important segments of information systems, or with significant interruptions in information systems functionality. The sources of security risks are different, and can origin from inside or outside of information system facility, and can be intentional or unintentional. The precise calculation of loses caused by such incidents is often not possible because a number of small scale ISS incidents are never detected, or detected with a significant time delay, a part of incidents are interpreted as an accidental mistakes, and all that results with an underestimation of ISS risks. This paper addresses the different types and criteria of information system security risks (threats) classification and gives an overview of most common classifications used in literature and in practice. We define a common set of criteria that can be used for information system security threats classification, which will enable the comparison and evaluation of different security threats from different security threats classifications.
In the process of development of the security system of the information system, the risk assessment is the foundation for selection of the security measures. The reduction of the level of risk and ...the amount of costs depend upon the adequate selection of the security measures. The quality of the risk assessment depends upon the adequate assessment of the form and the intensity of the threats. If the forms of threats are not monitored in the business system, it should make its own threat assessment, or use experience of others. The best, but also the most time-consuming solution is to develop own security system, while the fastest way is to use experience of others. However, there is the problem of migration of some other solution to our own system. Depending upon the question whether we are adopting the experiences of domestic or foreign business systems, the question of the applicability to the system from the different business environment becomes relevant. This happens because of the significant differences in the form and intensity of threats in certain local environments or different branches of industry.
From the Editor Željko Hutinski; Mirko Maleković
Journal of information and organizational sciences,
07/2012, Letnik:
29, Številka:
1
Journal Article
Recenzirano
Odprti dostop
This issue of the journal JIOS, “Journal of Information and OrganizationalSciences” presents a selection of the papers presented at the 15th InternationalConference on Information and Intelligent ...Systems held in Varaždin, September2004. The papers were selected after thorough review of at least two internationalreferees. The papers are arranged in alphabetic order, according the surname of thefirst author as referential.
From the Editor Željko Hutinski; Mirko Malkoević
Journal of information and organizational sciences,
07/2012, Letnik:
29, Številka:
2
Journal Article
Recenzirano
Odprti dostop
All the papers in this issue of the JIOS Journal may fit into the Science as Usual categoryand are therefore not going to be dealt with in detail in the introduction. However, for oneof the papers ...included an exception has been provided, namely the paper Sigma-notationand the equivalence of P and NP classes by Miron Ivanovich Telpiz. The circumstancesleading to its publication in this issue of JIOS are presented by the editors in this preface.It is generally acknowledged that, ever since it was defined by S. Cook over thirty yearsago, P = NP has presented one of the major open problems in computing science andinformation science in general. Whereas, on one hand, this problem presents a formidablechallenge to any scientist dealing with it, its solution, especially in case it should turn out tobe a positive one considering that current technology tends to evolve in a practicaldirection and its overall functioning is conducted implicitly under the assumption of anegative solution would have a major impact on the development of informationtechnology as well as the wider context of human society as a whole. Apart from being putforward in conferences, both positive and negative “solutions” to P = NP problem can beoccasionally found in press, scientific and professional journals. The web page titled “Pversus-NP Page” (see http://www.win.tue.nl/~gwoegi/P-versus-NP.htm) provides anexcellent source for this issue. It contains links to papers stating that P = NP, as well asthose contradicting the opposite, i.e., stating that P NP. Furthermore, references are givento Oded Goldreich's rationale behind his decision not to review papers proposing solutionsto P = NP problem and related difficult problems because, in his own words, they “alsoattract the attention of non-experts, and one annoying consequence is a flood of falseclaims of resolutions of these problems” (see http://www.wisdom.weizmann.ac.il/~oded/faq.html). Dr. Goldreich a recognised figure amongmathematicians of our time – recommends other scientists to follow his example when thisissue is concerned. Nevertheless, his arguments (at least those regarding non-experts) aredefinitely not to be acknowledged in the case of the work of the Russian mathematician andlogician Miron Ivanovich Telpiz, (see http://www.tarusa.ru/~mit/ENG/eng.php for details),who has been developing his positionality theory for functions, with a special emphasis onBoolean functions, for over two decades. While doing so, he has been drawing its(primarily conceptual) analogy to positionality theory for number systems. Building on hisextensive theory, which is combinatory very complex one indeed, Dr. Telpiz states theproof of P = NP. The underlying theory itself was proposed in the first volume of his bookPositionality principle for notation and calculation the functions, originally published inRussian by the Institute of Space Researches of the Russian Academy of Science. It was dueto this book that contacts between a member of the Editorial Board and Dr. Telpiz, as wellas Dr. Andrej Fomin, his assistant and associate, were established. During those contactsthe idea evolved of Dr. Tepiz delivering an invited lecture at the IIS2004 Conference.Annual IIS Conferences have been organized by the Faculty of Organization andInformatics for years. A lecture on proving the statement P = NP was arranged.Unfortunately, Dr. Telpiz was eventually not capable of giving the lecture. Nevertheless, heproposed for his lecture to be published in form of an article in the JIOS Journal. Uponreceiving the Russian version of his article named Sigma-notation and the equivalence of Pand NP classes, the Editorial Board had it translated into English and proceeded to havingit reviewed. The paper was sent to several renowned world experts in the field of Booleanfunctions, mathematical logic and algorithm theory for review. Yet, no response wasreceived from reviewers contacted although the Editorial Board and Dr. Telpiz made effortsfor access to all relevant papers, as well as the book itself, to be possible. Bearing in mindnot only the great relevance of P = NP problem but also the constant need for scientificideas and findings to be disseminated, the JIOS Editorial Board has decided to have Dr.Telpiz's paper published although it had not been officially reviewed, which the authorhimself has consented to in writing. Owing to its inclusion in this issue, the paper is beingpresented to a wider scientific and professional audience who are thus given an opportunityto both consider and assess it from their own perspective.Editors
The process of security improvement is a huge problem especiallyin large ships. Terrorist attacks and everyday threatsagainst life and property destroy transport and tourist companies,especially ...large tourist ships. Every person on a ship can berecognized and identified using something that the personknows or by means of something the person possesses. The bestresults will be obtained by using a combination of the person'sknowledge with one biometric characteristic. Analyzing theproblem of biometrics in ITS security we can conclude that facerecognition process supported by one or two traditional biometriccharacteristics can give very good results regarding ship security.In this paper we will describe a biometric system basedon face recognition. Special focus will be given to crew member'sbiometric security in crisis situation like kidnapping, robbelyor illness.
To enable successful performance of any company or business system, both in the world and in the Republic of Croatia, among any problems relating to its operations and particularly to maximum ...utilization and efficiency of the Internet as a media for running business (especially in terms of marketing), they should make the best possible use of the present-day global trends and advantages of sophisticated technologies and approaches to running a business. Bearing in mind the fact of daily increasing competition and more demanding market, this paper addresses certain scientific and practical contribution to continuous analysis of demand market and adaptation thereto by analyzing the log files and by retroactive effect on the web site. A log file is a carrier of numerous data and indicators that should be used in the best possible way to improve the entire business operations of a company. However, this is not always simple and easy. The web sites differ in size, purpose, and technology used for designing them. For this very reason, the analytic analysis frameworks should be such that can cover any web site and at the same time leave some space for analyzing and investigating the specific characteristic of each web site and provide for its dynamics by analyzing the log file records. Those considerations were a basis for this paper.
Demand markets dictate and pose increasingly more requirements to the supplymarket that are not easily satisfied. The supply market presenting its web pages to thedemand market should find the best ...and quickest ways to respond promptly to the changesdictated by the demand market. The question is how to do that in the most efficient andquickest way. The data on the usage of web pages on a specific web site are recorded in alog file. The data in a log file are stochastic and unordered and require systematicmonitoring, categorization, analyses, and weighing. From the data processed in this way, itis necessary to single out and sort the data by their importance that would be a basis for acontinuous generation of dynamics/changes to the web site pages in line with the criterionchosen. To perform those tasks successfully, a new software solution is required. For thatpurpose, the authors have developed the first version of the WLE (WebLogExplorer)software solution, which is actually realization of web page multidimensionality and theweb site as a whole. The WebLogExplorer enables statistical and semantic analysis of a logfile and on the basis thereof, multidimensional control of the web page dynamics. Theexperimental part of the work was done within the web site of HTZ (Croatian NationalTourist Board) being the main portal of the global tourist supply in the Republic of Croatia(on average, daily "log" consists of c. 600,000 sets, average size of log file is 127 Mb, andc. 7000-8000 daily visitors on the web site).
To enable successful performance of any company or business system, both inthe world and in the Republic of Croatia, among many problems relating to its operationsand particularly to maximum ...utilization and efficiency of the Internet as a media forrunning business (especially in terms of marketing), they should make the best possible useof the present-day global trends and advantages of sophisticated technologies andapproaches to running a business. Bearing in mind the fact of daily increasing competitionand more demanding market, this paper addresses certain scientific and practicalcontribution to continuous analysis of demand market and adaptation thereto by analyzingthe log files and by retroactive effect on the web site. A log file is a carrier of numerousdata and indicators that should be used in the best possible way to improve the entirebusiness operations of a company. However, this is not always simple and easy. The websites differ in size, purpose, and technology used for designing them. For this very reason,the analytic analysis frameworks should be such that can cover any web site and at thesame time leave some space for analyzing and investigating the specific characteristicof each web site and provide for its dynamics by analyzing the log file records. Thoseconsiderations were a basis for this paper
