IDEAS home Printed from https://ideas.repec.org/h/spr/prochp/978-3-319-23929-3_9.html
   My bibliography  Save this book chapter

Integrating Case Studies into Information Security Education

In: Emerging Trends in Information Systems

Author

Listed:
  • Alexandra Savelieva

    (Microsoft Corporation)

  • Sergey Avdoshin

    (National Research University Higher School of Economics)

Abstract

Today the demand is growing for information security experts capable of analyzing problems and making decisions in business situations that involve risk or uncertainty. These skills can be acquired through systematic studying of various information security incidents. In this paper we propose a framework of methods, tools and taxonomies for analysis of case studies in information security field. Our framework allows to study every situation in a formal rather than ad-hoc way, and apply a wide range of threat modeling, risk analysis and project management techniques under lifelike conditions. We illustrate it by providing two case studies based on real situations: a conflict between a free email service provider and a commercial bank, and an attack on a famous security company by a powerful hacktivist group. The first situation explores the risks of using cloud services, while the second highlights the importance of applying secure code principles for in-house software development. Although the cases are seemingly different, we demonstrate that they can be analyzed with similar tools.

Suggested Citation

  • Alexandra Savelieva & Sergey Avdoshin, 2016. "Integrating Case Studies into Information Security Education," Progress in IS, in: Jörg Becker & Oleg Kozyrev & Eduard Babkin & Victor Taratukhin & Natalia Aseeva (ed.), Emerging Trends in Information Systems, pages 99-115, Springer.
  • Handle: RePEc:spr:prochp:978-3-319-23929-3_9
    DOI: 10.1007/978-3-319-23929-3_9
    as

    Download full text from publisher

    To our knowledge, this item is not available for download. To find whether it is available, there are three options:
    1. Check below whether another version of this item is available online.
    2. Check on the provider's web page whether it is in fact available.
    3. Perform a search for a similarly titled item that would be available.

    Corrections

    All material on this site has been provided by the respective publishers and authors. You can help correct errors and omissions. When requesting a correction, please mention this item's handle: RePEc:spr:prochp:978-3-319-23929-3_9. See general information about how to correct material in RePEc.

    If you have authored this item and are not yet registered with RePEc, we encourage you to do it here. This allows to link your profile to this item. It also allows you to accept potential citations to this item that we are uncertain about.

    We have no bibliographic references for this item. You can help adding them by using this form .

    If you know of missing items citing this one, you can help us creating those links by adding the relevant references in the same way as above, for each refering item. If you are a registered author of this item, you may also want to check the "citations" tab in your RePEc Author Service profile, as there may be some citations waiting for confirmation.

    For technical questions regarding this item, or to correct its authors, title, abstract, bibliographic or download information, contact: Sonal Shukla or Springer Nature Abstracting and Indexing (email available below). General contact details of provider: http://www.springer.com .

    Please note that corrections may take a couple of weeks to filter through the various RePEc services.

    IDEAS is a RePEc service. RePEc uses bibliographic data supplied by the respective publishers.