Cybersecurity and Privacy in Government
Permanent URI for this collection
Browse
Recent Submissions
1 - 5 of 5
-
ItemSimulating Municipal Cybersecurity Incidents: Recommendations from Expert Interviews( 2021-01-05)As cyberattacks on city and public infrastructures become increasingly common and harmful, it is critical that we train the professional workforce to prepare and respond appropriately. This paper supports the development of educational simulations and related experiential learning exercises that help prepare city and public infrastructure personnel to effectively respond to cybersecurity attacks. Specifically, it synthesizes the findings from 8 expert interviews including 12 cybersecurity experts from federal, state, city organizations, as well as academics with relevant expertise. We organize the findings into key learning outcomes, scenarios, roles, and issues that simulation designers should consider. The result paints a vivid picture of the complex socio-technical context of city and public infrastructure attacks and responses and the most salient skills needed to respond to them.
-
ItemRegulatory and Security Standard Compliance Throughout the Software Development Lifecycle( 2021-01-05)Our systematic literature review aims to survey research on regulatory and security standard requirements as addressed throughout the Software Development Lifecycle. Also, to characterize current research concerns and identify specific remaining challenges to address regulatory and security standard requirements throughout the SDLC. To this end, we conducted a systematic literature review (SLR) of conference proceedings and academic journals motivated by five areas of concern: 1. SDLC & Regulatory Requirement 2. Risk Assessment and Compliance requirements 3. Technical Debt 4. Decision Making Process throughout the SDLC 5. Metric and Measurements of found Software Vulnerability. The initial search produced 100 papers, and our review process narrowed this total to 20 articles to address our three research questions. Our findings suggest that academic software engineering research directly connecting regulatory and security standard requirements to later stages of the SDLC is rare despite the importance of compliance for ensuring societally acceptable engineering.
-
ItemEnhancing Cybersecurity Capability in Local Governments through Competency-Based Education( 2021-01-05)Local government agencies face significant challenges related to cybersecurity. Advances in cybersecurity threats have been part of the difficulty, but government agencies, particularly communities, also face unique challenges given their broad mandates and challenges. This is particularly true in large metropolitan areas where activities cross many local and county jurisdictions yet require a coordinated and collaborative response. Local jurisdictions face differing cybersecurity challenges related to local issues such as criminal activity, population, and the mix of land use as well as external considerations such as ports, airports and international borders requiring enhanced coordination with state and federal authorities. Rapid ongoing changes in technology also provide a relentless pattern of change which must be managed. These widely differing challenges, along with resource constraints, lead neighboring communities to possess widely varying cybersecurity capabilities. This research project is an effort to speed the process of training and developing talent to meet these challenges.
-
ItemCOVID-19: Privacy and Confidentiality Issues with Contact Tracing Apps( 2021-01-05)Contact tracing has been a main topic of conversation in the COVID-19 pandemic. While implementation of app-based contact tracing can be beneficial, it raises concerns of privacy and confidentiality. To better understand how these issues were addressed, a qualitative study was conducted which analyzes the current status of contact tracing apps from Iceland, Italy, Germany, India, Singapore, Japan, and 4 states within the United States. The comparisons made amongst the contact tracing apps will be surveyed across numerous criteria. The results show contact tracing apps are able to assist in the COVID-19 caseloads by determining self-isolation periods. Future developments can change these apps into a tool for returning to normalcy that may require more user information disclosure, but limited protections of privacy and confidentiality issues have not been addressed at a worldwide level
-
Item