• Title/Summary/Keyword: Information disclosure

Search Result 640, Processing Time 0.025 seconds

A Systematic Treat Model for Software-Defined Networking

  • Zhang, Wenbin;Wu, Zehui;Wei, Qiang;Yuan, Huijie
    • KSII Transactions on Internet and Information Systems (TIIS)
    • /
    • v.15 no.2
    • /
    • pp.580-599
    • /
    • 2021
  • Software-Defined Networking (SDN) has three key features: separation of control and forwarding, centralized control, and network programmability. While improving network management flexibility, SDN has many security issues. This paper systemizes the security threats of SDN using spoofing, tampering, repudiation, information disclosure, denial of service, and elevation of privilege (STRIDE) model to understand the current security status of SDN. First, we introduce the network architecture and data flow of SDN. Second, we analyze security threats of the six types given in the STRIDE model, aiming to reveal the vulnerability mechanisms and assess the attack surface. Then, we briefly describe the corresponding defense technologies. Finally, we summarize the work of this paper and discuss the trends of SDN security research.

User-Level Delegation in Role-Based Access Control Model (역할기반 접근제어에 기초한 사용자 수준의 위임 기법)

  • 심재훈
    • Journal of the Korea Institute of Information Security & Cryptology
    • /
    • v.10 no.3
    • /
    • pp.49-62
    • /
    • 2000
  • Role-Based Access Control(RBAC) has recently received considerable attention as a alternative to traditional discretionary and mandatory access control to apply variant organizations function hierarchy of commercial or govemment. Also RBAC provides a delegation that is one of control principles in organization. In general delegation occurring in real organization is performed by an user giving permissions to another user. But, RBAC cannot implement these user-level delegation correctly. And delegation result in security problem such as destroying separation of duty policy information disclosure due to inappro-priate delegation. Besides security adminsitrator directly deals with that problem. In this thesis we suggests some methods that is created by the user.

The Economics of Para-social Interactions During Live Streaming Broadcasts: A Study of Wanghongs

  • Yongfu Quan;Jin Seon Choe;Il Im
    • Asia pacific journal of information systems
    • /
    • v.30 no.1
    • /
    • pp.143-165
    • /
    • 2020
  • The rapid growth of economic transactions generated by live streaming broadcasts ("LSB") has created opportunities for retailers to increase sales. However, little is known about what impact LSB celebrities have on customers and what causes LSB celebrities to become famous. This study aimed to fill this gap by studying the economics of LSBs. This study was conducted through a para-social relationship and attractiveness theory framework. Consequently, social and task attraction were assumed to be the antecedents of the para-social relationship that induced purchase intention. This study examined the impact of relationship rewards, self-disclosure, affective interactivity, informative interactivity, and the amount of information provided on purchase intentions through LSB. Celebrities can use the results of this study to enhance their appeal to fans and promote customers' purchase on e-commerce. This study contributed to the IS field by investigate the impact of para-social relationship on the online shopping context.

To Reveal or Conceal? Understanding the Notion of Privacy among Individuals

  • Sana Ansari;Sumeet Gupta
    • Asia pacific journal of information systems
    • /
    • v.28 no.4
    • /
    • pp.258-273
    • /
    • 2018
  • What is individuals' privacy notion, and does it change with the social roles taken up by them? We explored these questions using a qualitative interpretive research approach. We found that individuals have mixed notion of privacy. Individuals view privacy either as a commodity or as a control. Further, we found that an individual's privacy notion is a function of their social role within the society and their privacy preferences. Our research points to the importance of expanding the notion of privacy to encompass a broader understanding of privacy preferences. We theorize our findings using social penetration theory and presents a privacy model which provides the logical framework for interpreting people's views on privacy.

Information Risk and Cost of Equity: The Role of Stock Price Crash Risk

  • SALEEM, Sana;USMAN, Muhammad
    • The Journal of Asian Finance, Economics and Business
    • /
    • v.8 no.1
    • /
    • pp.623-635
    • /
    • 2021
  • The purpose of this research is to examine the impact of information risk on the Cost of Equity (COE) and whether the risk of a stock price crash mediates the relation between information risk and COE. To test the dynamic nature of the proposed model, the two-step system GMM dynamic panel estimators are applied to all the non-financial firms listed on the Pakistan Stock Exchange (PSX) from 2007- 2018. The results of this study show that all three types of information risk, as well as the risk of the share price crash, increases the COE. The crash risk strengthens the impact of information risk on the COE. Moreover, these three information risks are correlated with each other and an increase in information quality reduces the effect of asymmetric information and improves the investor interpreting ability, while an increase in private information decreases the transparency. The finding is crucial for asset pricing, portfolio management, and information disclosure. This study contributes to the literature by providing novel findings on the impact of three different types of information risk, i.e. private information, quality of information, and transparency of information on the COE as well as whether crash risk mediates the relationship.

A Study on Public Order Right Based on Analysis of the Administrative Disposition Results Against the Personal Information Protection Act Violation (개인정보 보호법 위반에 따른 행정처분 결과 분석을 통한 공표명령권 도입 연구 395)

  • Jeon, Ju Hyun;Rhee, Kyung Hyune
    • KIPS Transactions on Computer and Communication Systems
    • /
    • v.11 no.11
    • /
    • pp.395-402
    • /
    • 2022
  • In case of violation of the Personal Information Protection Act, administrative dispositions will be taken according to the legal standards, and the results will be announced. However, the current method has limitations in its effectiveness as repeated administrative dispositions are increasing despite the announcement by the disclosure system of the Personal Information Protection Act. In this paper, we deploy the introduction of the 'public announcement commandment' against violators by analyzing the administrative disposition results according to the violation of the Personal Information Protection Act. It is able to strengthen the existing disclosure system for self-disclose violations by providing easy recognition to the people about the fact of violation itself against the Personal Information Protection Act. Furthermore, we analyze major industries through the industry groups and violations of laws that were subject to publication, and data published on the results of administrative dispositions for violation of the Personal Information Protection Act. Finally, we propose the legal basis for the 'public announcement commandment' which allows the violator to publish by oneself for the announcement of the fact that the corrective action has been taken.

Classification of Consumer Review Information Based on Satisfaction/Dissatisfaction with Availability/Non-availability of Information (구매후기 정보의 충족/미충족에 따른 소비자의 만족/불만족 인식 및 구매후기 정보의 유형화)

  • Hong, Hee-Sook
    • Journal of the Korean Society of Clothing and Textiles
    • /
    • v.35 no.9
    • /
    • pp.1099-1111
    • /
    • 2011
  • This study identified the types of consumer review information about apparel products based on consumer satisfaction/dissatisfaction with the availability/non-availability of consumer review information for online stores. Data were collected from 318 females aged 20s' to 30s', who had significant experience in reading consumer reviews posted on online stores. Consumer satisfaction/dissatisfaction with availability or non-availability of review information on online stores is different for information in regards to apparel product attributes, product benefits, and store attributes. According to the concept of quality elements suggested by the Kano model, two types of consumer review information were determined: Must-have information (product attribute information about size, fabric, color and design of the apparel product; benefit information about washing & care and comport of the apparel product; store attribute information about responsiveness, disclosure, delivery and after service of the store) and attracting information (attribute information about price comparison; benefit information about coordination with other items, fashionability, price discounts, value for price, reaction from others, emotion experienced during transaction, symbolic features for status, health functionality, and eco-friendly feature; store attribute information about return/refund, damage compensation and reputation/credibility of online store and interactive and dynamic nature of reviews among customers). There were significant differences between the high and low involvement groups in their perceptions of consumer review information.

A Study on the Operation and Personal Information Management of Public and Private Kindergarten Homepages (공·사립 유치원 홈페이지의 운영 및 개인정보 관리 실태 연구)

  • Kim, Jong Min;Chun, Hui Young;Choi, Eun A
    • Korean Journal of Child Studies
    • /
    • v.37 no.6
    • /
    • pp.119-132
    • /
    • 2016
  • Objective: The purpose of this study was to analyze the operation and personal information management of public and private kindergarten homepages. Methods: A total of 2,846 kindergartens were selected from the I-Sarang portal service for analyzing operation, and 217 self-operating homepages were selected for evaluating management. Seven evaluation items from three domains (information gathering procedures and scope, information security, and management of file exposure protection) were used. Wireshark and Google were used for analyzing some evaluation items. Results: The operating ratio of kindergarten homepages was low and most of the kindergartens self-operated their homepages. The evaluation of the information gathering procedures and scope showed that the rule of consent process was not rigidly followed but that the rule of legality for information gathering was followed. Items related to information security were followed at very low levels. As for the management of file exposure protection, the evaluation of items related to the prevention of attachment disclosure showed that the rule of protecting personal information included in an attached file was followed but that the notice regarding information protection was not. Across all evaluation items, the level of personal information management was higher in public (vs. private) kindergartens. Conclusion: These results indicate methods to more securely and effectively manage personal information on kindergarten homepages.

A Study on the Relationship between the Disclosure of the Company's Internal Control System and the Agency Costs -Focused on SSE Listed Companies (기업 내부통제시스템 도입과 기업 대리 비용과의 관계연구 - SSE 상장기업을 중심으로)

  • Kim, Dong-Il;Choi, Seung-Il
    • Journal of Digital Convergence
    • /
    • v.18 no.8
    • /
    • pp.111-118
    • /
    • 2020
  • This study conducted an empirical analysis of SSE-listed companies to verify the effects of evaluation and disclosure of internal control systems on the agency costs management and controlling shareholders. Agency costs can affect the valuation of accounting information as asymmetry of information in the relationship between a company and its stakeholders, or induce financial costs as an adverse selection. If the firm's agency costs are reasonable, the valuation of the company can also move in a relatively positive direction. In this study, the evaluation information of the internal control system was analyzed through sales management ratio and equity ratio as substitute variables to analyze the relationship between management and agent costs of the controlling shareholders. In addition, independent control ratio, capital balance ratio, and company scale were used as control variables, as a result of the analysis, the evaluation information of internal control was found to be related to the agency costs of managers and governance structure. This study can be conducted to positive factors in evaluating the reliability and corporate value of accounting information according to the evaluation of internal control of SSE-listed companies and helps to understand the financial reporting environment.

An Analytical Study on Differences between the Types of Disputes in Food Service Franchises and the Relevant Corporate Information (외식 프랜차이징 분쟁 유형과 기업정보 간의 차이분석 연구)

  • Kang, Seok-Woo;Rha, Young-Ah
    • Culinary science and hospitality research
    • /
    • v.19 no.5
    • /
    • pp.264-279
    • /
    • 2013
  • This study aimed to analyze the differences between the types of disputes in food service franchises and the relevant corporate information. For this aim, the types of disputes were analyzed on the basis of the cases reported by the Korea Fair Trade Commission, and whether there are any differences from the relevant corporate information was analyzed using SPSS WIN(V.17.0). According to analysis results, the most often seen types of disputes were failure to provide the information disclosure sheet (58.5%) and failure to deposit franchising fee (15.1%). In Kruskal-Wallis test between the type of disputes and related corporate information variables, significant difference was found under significance level p<.05 for sales volume, the establishment period and the number of franchisees, and under p<.1 for the number of full-time employees. In correlation coefficient, the establishment period, the number of full-time employees and the number of franchisees showed positive correlation(p<.05), and the number of full-time employees showed correlation in the number of franchisees and the number of brands under the significance level p<.05. As a solution for the dispute, there should be franchisors' responsibility to comply with the principle of good faith, the authorities' strengthening exemplary transaction criteria and legal systems, as well as experts' consulting for prospective franchisees prior to establishing business.

  • PDF