从一起知识产权泄露事件谈信息安全管理教学
Teaching Information Security Management Using an Incident of Intellectual Property Leakage
摘要：
基于案例的学习是一种在理论与实践之间建立对话的强有力的教学方法。CBL特别适合执行学习，因为它激发了批判性的讨论，并得出了相关的经验。在本文中，我们使用一个真实的案例来教信息安全管理的学生在管理信息系统。真实世界的案例在一份法律起诉书中描述，T-mobile USA Inc诉Huawei Device USA Inc。和华为技术有限公司，指控其窃取知识产权，违反保密和披露敏感信息的合同。该事件场景很有趣，因为它涉及到一项具有数字和物理组件的业务资产，该资产已通过内部人员促成的非常规网络物理攻击而受到损害。这一情景引发了学生们关于安全事件的范围和定义、安全部门的作用和结构、基于合规性的安全方法的效用以及现代安全战略中威胁情报使用不足的有趣辩论。
英文摘要：
Case-based learning is a powerful pedagogical method of creating dialogue between theory and practice. CBL is particularly suited to executive learning as it instigates critical discussion and draws out relevant experiences. In this paper we used a real-world case to teach Information Security Management to students in Management Information Systems. The real-world case is described in a legal indictment, T-mobile USA Inc v Huawei Device USA Inc. and Huawei Technologies Co. LTD, alleging theft of intellectual property and breaches of contract concerning confidentiality and disclosure of sensitive information. The incident scenario is interesting as it relates to a business asset that has both digital and physical components that has been compromised through an unconventional cyber-physical attack facilitated by insiders. The scenario sparked an interesting debate among students about the scope and definition of security incidents, the role and structure of the security unit, the utility of compliance-based approaches to security, and the inadequate use of threat intelligence in modern security strategies.
机构、总结、中文摘要均由AI分析而来，可能存在错误，请以论文正文为准。
