arXivDaily arXiv每日学术速递 周一至周五更新
arXiv 2108.09754cs.CY
收藏

尼日利亚大学网络犯罪风险管理框架

Framework for Managing Cybercrime Risks in Nigerian Universities

Bukhari Badamasi, Samuel C. Avemaria Utulu

摘要:

发展中国家的大学,包括尼日利亚的大学,由于其网络空间和资源管理不善,面临着网络犯罪的风险。这些网络犯罪的结果是威胁和破坏大学的网络安全。这些威胁和违规行为造成了巨大的经济、社会和知识产权损失。最近,尼日利亚的大学已经开始对这些网络攻击做出回应。他们中的许多人现在投资于反网络犯罪工具和计划,以减轻网络安全威胁和漏洞。尽管如此,尼日利亚大学遭受网络攻击的次数以及由此造成的损失不断增加。然而,我们的观察表明,大多数尼日利亚大学在运行网络安全时没有使用科学衍生的框架,这些框架说明了如何管理来自内部和外部的威胁和漏洞。我们认为这是尼日利亚大学为减轻网络安全威胁和违规行为所做努力的一个问题。因此,本文中报告的研究旨在阐述尼日利亚大学如何制定可操作的框架,以帮助他们减轻网络安全威胁和漏洞。这项研究是基于文献综述,并提出了如何尼日利亚大学可以采用的可操作的框架,以抵消网络安全计划可以开发。该过程包括问题识别、目标描述、人工制品的设计和开发、人工制品的测试和评估以及结果的交流。我们的结论是,该框架为尼日利亚大学提供了一个有利可图的起点,以抵消高效和有效的网络安全计划。

英文摘要:

Universities in developing countries, including those in Nigeria, experience cybercrime risks due to poor management of their cyber spaces and resources. The outcome of these cybercrimes are threats and breaches of universities' cyber security. The threats and breaches have resulted in substantial financial, social, and intellectual property losses. In the recent past, Nigerian universities have started to respond to these cyber-attacks. Many of them now invest in anti-cybercrime tools and programs to mitigate cyber security threats and breaches. Despite this, the number of times Nigerian universities suffer from cyber-attacks and the losses that result from them keeps increasing. Our observation, however, indicates that most Nigerian universities run their cyber security without using scientifically derived frameworks that spell out how to manage threats and breaches that emanate from within and outside them. We consider this a problem to ongoing efforts made by Nigerian universities to mitigate cyber security threats and breaches. The study reported in this paper was therefore, carried out to explicate how Nigerian universities can develop actionable frameworks that can help them to mitigate cyber security threats and breaches. The study is based on literature review and propose how an actionable framework that Nigerian Universities can adopt to setoff cybersecurity programs can be developed. The process comprises of problem identification, description of objectives, designing and developing the artefact, testing, and evaluating the artefact, and communicating the result. We conclude that the framework provides a lucrative starting point for Nigerian universities to setoff efficient and effective cyber security program.

机构、总结、中文摘要均由AI分析而来,可能存在错误,请以论文正文为准。

↑