Search

The paper presents the reader into the issue of ITIL ® and provides it as a basic overview of the concepts, terminology and philosophyof IT Service management. All this information is contained in 5 key ITIL ® publications on around 1400 pages. The aim therefore is a brief summary of the issue, which also serves as an introduction to the following articles (Differences Between ITIL® v2 and ITIL® v3, ITIL® and Information Security, ITIL® Tools and ITIL® Implementation). [ABSTRACT FROM AUTHOR]

This paper discusses the context of ITIL framework and management of information security. It is therefore a summary study, where the first part is focused on the safety objectives in connection with the ITIL framework. First of all, there is a focus on ITIL process ISM (Information Security Management), its principle and system management. The conclusion is about link between standards, which are related to security, and ITIL framework. [ABSTRACT FROM AUTHOR]

This paper follows the article: Differences Between ITIL® V2 and ITIL® V3 with Respect to Service Strategy and Service Design. The main aim is to summarize the changes that relate to key publications, Service Transition and Service Operation. In conclusion, areevaluated the objectives of the current version of ITIL® v3 and the unofficial benefits. The purpose of these papers is to provide the necessary overview of the current situation in the field of IT management to facilitate and streamline the work of IT managers. [ABSTRACT FROM AUTHOR]

Since the release of the latest version of ITIL® v3 - 2011 edition, several years have passed. Nevertheless the question of differences between versions and editions remains up-to-date. The main reason is the large diversity of business environment and culture (company size, use of ICT, company strategy and policy etc.). Therefore article discusses the differences between the last two versions of ITIL®. It is especially focused on changes in publications dealing with service strategy and service design. The aim of this paper is to provide an overview of differences and changes, and thus simplify decision making for implementing ITIL® practices. [ABSTRACT FROM AUTHOR]

This paper presents using of JSBSim library for flight dynamics modelling of a mini-UAV (Unmanned Aerial Vehicle). The first part of the paper is about general information of UAVs and about the fundamentals of airplane flight mechanics, forces, moments, and the main components of typical aircraft. The main section briefly describes a flight dynamics model and summarizes the information about JSBSim library. Then, a way of using the library for the modelling of a mini-UAV is shown. A basic script for lifting and stabilization of the UAV has been developed and described. Finally, the results of JSBSim test are discussed. [ABSTRACT FROM AUTHOR]

This paper presents using of FlightGear application for flight simulation of a mini-UAV (Unmanned Aerial Vehicle). The first part of the paper is about general information of UAVs and about the fundamentals of airplane flight mechanics. The main section summarizes the information about FlightGear application and describes a way of using the application to simulate a mini-UAV. The process of altitude change by using autopilot has been simulated. In the created simulation, three stage cascade controller was used for an altitude control. Heading was controlled by 2 stage cascade PID (Proportional-Integral-Derivative) controller. An automatic throttle system was applied for a velocity control. The setting of all controllers is included in the description of the simulation. Finally, the results of FlightGear simulation are discussed. [ABSTRACT FROM AUTHOR]

Mobile technologies have transformed rapidly with their rate of adoption increasing for several years. Smartphones, tablets, and other small form-factor devices are integrated in educational institutions, medical and commercial facilities with further military, governmental as well as industrial deployment expected in future. However, the complexity from interconnected hardware and software layers opens up multiple attack vectors for adversaries, allowing personally identifiable data exfiltration, malicious modifications of the device's intended functionality, pushing unauthorized code without user consent, or incorporating it into a botnet. Mobile threat landscape has become the next stage of cyberwarfare. Here, users unable or unwilling to adequately protect themselves make decisions based on information originating from untrusted third parties with potentially harmful intents. Recognizing the situation, a comprehensive array of tools and concepts such as ASLR, DEP, closing the source code, sandboxing, and code validation has been implemented. In this asymmetric security model, developers invalidate novel attack vectors while adversaries employ sophisticated techniques to thwart detection for large-scale penetration. The former are further penalized by heterogeneous base of software versions, some entirely defenseless against recent exploits. The paper presents an overview of techniques in current mobile operating systems and best practices the vendors incorporated to minimize unauthorized third-party modifications. It also aims to provide high-level description of exploits malware creators use to target users who, as we further postulate, underestimate capabilities of their devices. Best practices for safer use are briefly outlined, too. [ABSTRACT FROM AUTHOR]

Researchers have for a time been struggling to change inert mindset of users regarding passwords as a response to advances in processing power, emergence of highly-scalable computing models, and attackers prioritizing human element for attacks. Recommendations regarding security are ignored as documented by recent corporate database breaches and releases of unencrypted password caches which corroborated lacking security awareness in vast majority of Internet users. In order to educate users about computer security, terms such as hashing, cipher systems and their weaknesses, brute-force attacks, social engineering, multi-factor authentication, and balance between usability and ease of use must be clearly explained. However, academia tend to focus on areas requiring deep mathematical or programmatic background, clear communication of these security elements while minimizing scientific rigor thus remains challenging. The article aims to provide a concise, comprehensive research overview and outline of authentication, including information entropy, hashing algorithms, reverse password engineering, importance of complexity and length in passwords, general-purpose attacks such as brute-force and social engineering as well as specialized ones, namely side-channel interception. Novel ways of increasing security by utilizing two- and multi-factor authentication, visual passwords, pass phrases, mnemonic-based strings will be considered as well along with their advantages over the traditional textual password model and pitfalls for their widespread propagation. In particular, we hypothesize that technological developments allow vendors to offer solutions which limit unauthorized third parties from gaining windows of opportunity to exploit weaknesses in the authentication schemes. However, as infrastructure becomes more resilient, attackers shift their focus towards human-based attacks (social engineering, social networking). Due to largely unchanging short-term behavior patterns, institutions need to lecture employees over extended periods about being vigilant to leaks of procedural and organizational information which may help attackers bypass perimeter-level security measures. We conclude the article by listing emerging threats in the field, specifically social networks-distributed malware and mobile devices targeting. [ABSTRACT FROM AUTHOR]

With the number of nodes in the Internet's backbone networks rising exponentially the possibility of emergence of entities exhibiting outwardly hostile intents has been steadily increasing. The cyberspace is fittingly termed "the no man's land" because of an unprecedented growth pattern and lackluster control mechanisms. Distributed Denial of Service (DDoS) attacks take advantage of the current situation and primarily aim at destabilizing or severely limiting usability of infrastructure to the end-users in part or whole. A typical DDoS incursion exploiting heterogeneous base of personal computers consists of two phases: insertion of predefined set of instructions into the host systems via either self-propagating or non-reproducing malware and simultaneous execution of repeating queries to a destination unit. Generally targeted and deployed to impede functionality of a single or multiple servers with similar properties and utilizing substantial resources with little to no discernible selection criteria, DDoSes poses a significant threat. Moreover, effective and efficient countermeasures require experience, precision, speed, operational awareness, appropriate security protocols summarizing and alleviating potential consequences in case of failure to contain as well as proactive detection algorithms in place. Global response instruments (batch filtering, temporary IP address blacklisting) are only suitable for SYN floods, whereas during GET DDoS the same tools can't be used due to presence of legitimate incoming requests. The article scrutinizes methodology and policies currently in effect as a part of Critical Infrastructure Protection initiatives. The examination allows to outline procedural decision-making trees in the event of a DDoS violation while maintaining predefined and consistent quality of service level. Furthermore, rationale of perpetrators' motives to instigate the attacks are hypothesized with preferential focus on economic infrastructure components. These hubs of virtualized economy are detailed and target selection probabilities in tactical and strategic perspectives are identified based on known facts. Financial losses, worst case scenarios and social repercussions following a successful intrusion are also investigated by means of inference from successful DDoS insurgences. [ABSTRACT FROM AUTHOR]