CERT Technologies

Select Volume / Issue:

• Volume 3,Issue 6, Nov. 2015

Year:

2015

Type of Publication:

Article

Keywords:

Cert, Technologies

Authors:

Khaled Abdulkareem Alenezi; Imad Fakhri Al-Shaikhli; Lili Marziana Abdullah; Mohammad A. AlAhmad

Journal:

IJISM

Volume:

3

Number:

6

Pages:

275-282

Month:

November

Abstract:

Members of the incident response team should have excellent technical skills, such as system administration, network administration, programming, technical support, malware analysis, and intrusion detection. Moreover, supporting system state and status reporting are associated with enabling automated mechanisms with the hardware or software that report information about the system, including abnormal behavior, intrusion attempts, or any other data that would be useful in detecting an incident, understanding impact, and quickly supporting resolution. In order to effectively protect GE and Non-GE entities from cyber-attacks, multiple layers of defenses strategies are needed to combat multiple security issues. The strategy is based on using appropriate security countermeasures across operational, network, and host functionality of GE and Non-GE entities. Therefore, we proposed four zones segment information architecture for securing the main assets and services of GE and Non-GE entities in Kuwait. In each of these zones specific and unique security focus are addressed. For each zone of the layered cyber-security systems architecture, technological security elements are presented to help in securing IT assets and services of the organizations. Such a layered cyber-security systems architecture will assist the organizations in creating clear boundaries in order to effectively and practically apply multiple layers of defenses.

Full text: IJISM_472_Final.pdf [Bibtex]