Enemy at the gate

Subscribe (Full Service)


	Search: The ACM Digital Library The Guide

	Feedback

Enemy at the gate: threats to information security

Full text

Html (27 KB), Pdf

Pdf (97 KB)

Source

Communications of the ACM archive
Volume 46 , Issue 8 (August 2003) table of contents
Program compaction

Pages: 91 - 95

Year of Publication: 2003

ISSN:0001-0782

Author

Michael E. Whitman

Kennesaw State University, Kennesaw, GA

Publisher

ACM New York, NY, USA

Bibliometrics

Downloads (6 Weeks): n/a, Downloads (12 Months): n/a, Citation Count: 15

Additional Information:

abstract references cited by index terms collaborative colleagues

Tools and Actions:	Request Permissions Review this Article Save this Article to a Binder Display Formats: BibTeX EndNote ACM Ref

DOI Bookmark:	Use this link to bookmark this Article: http://doi.acm.org/10.1145/859670.859675 What is a DOI?

ABSTRACT

A firm can build more effective security strategies by identifying and ranking the severity of potential threats to its IS efforts.

REFERENCES

Note: OCR errors may be found in this Reference List extracted from the full text article. ACM has opted to expose the complete List rather than only correct and linked references.

	1	James C. Brancheau , Brian D. Janz , James C. Wetherbe, Key issues in information systems management: 1994–95 SIM Delphi results, MIS Quarterly, v.20 n.2, p.225-236, June 1996 [doi>10.2307/249479]
	2	Loch, K.D., Carr, H.H., and Warkentin, M.E. Threats to information systems: Today's reality, yesterday's understanding. MIS Q. 16, 2 (1992), 173--186.
	3	Power, R. 2002 CSI/FBI computer crime and security survey. Computer Security Issues & Trends 8, 1 (2002), 1--24.
	4	Detmar W. Straub , Richard J. Welke, Coping with systems risk: security planning models for management decision making, MIS Quarterly, v.22 n.4, p.441-469, Dec. 1998 [doi>10.2307/249551]
	5	Tzu, S. The Art of War: Translation by Samuel B. Griffith. Oxford University Press, Oxford, U.K., 1988.
	6	Wood, C.C. Integrated approach includes information security. Security 37, 2 (2000), 43--44.

CITED BY 15

	Ling Ma , Nazli Goharian, Using relevance feedback to detect misuse for information retrieval systems, Proceedings of the thirteenth ACM international conference on Information and knowledge management, November 08-13, 2004, Washington, D.C., USA
	Ling Ma , Nazli Goharian, Query length impact on misuse detection in information retrieval systems, Proceedings of the 2005 ACM symposium on Applied computing, March 13-17, 2005, Santa Fe, New Mexico
	James A. M. McHugh , Fadi P. Deek, An incentive system for reducing malware attacks, Communications of the ACM, v.48 n.6, p.94-99, June 2005
	Wade H. Baker , Loren Paul Rees , Peter S. Tippett, Necessary measures: metric-driven information security risk assessment and decision making, Communications of the ACM, v.50 n.10, p.101-106, October 2007
	Jeffrey L. Duffany, Optimal resource allocation for securing an enterprise information infrastructure, Proceedings of the 4th international IFIP/ACM Latin American conference on Networking, October 10-11, 2007, San José, Costa Rica
	Allen C. Johnston , Ron Hale, Improved security through information security governance, Communications of the ACM, v.52 n.1, January 2009
	Quey-Jen Yeh , Arthur Jung-Ting Chang, Threats and countermeasures for information system security: A cross-industry study, Information and Management, v.44 n.5, p.480-491, July, 2007
	Timo Wiander, Implementing the ISO/IEC 17799 standard in practice: experiences on audit phases, Proceedings of the sixth Australasian conference on Information security, January 01-01, 2008, Wollongong, NSW, Australia
	Randall C. Reid , Arthur H. Gilbert, Managing security from the perspective of the business executive, Proceedings of the 4th annual conference on Information security curriculum development, September 28-28, 2007, Kennesaw, Georgia
	Charles Pak, The near real time statistical asset priority driven (nrtsapd) risk assessment methodology, Proceedings of the 9th ACM SIGITE conference on Information technology education, October 16-18, 2008, Cincinnati, OH, USA
	Mary Sumner, Information Security Threats: A Comparative Analysis of Impact, Probability, and Preparedness, Information Systems Management, v.26 n.1, p.2-12, December 2009
	Stefan Fenz , Andreas Ekelhart, Formalizing information security knowledge, Proceedings of the 4th International Symposium on Information, Computer, and Communications Security, March 10-12, 2009, Sydney, Australia
	John D'Arcy , Anat Hovav , Dennis Galletta, User Awareness of Security Countermeasures and Its Impact on Information Systems Misuse: A Deterrence Approach, Information Systems Research, v.20 n.1, p.79-98, March 2009
	Cyril Onwubiko , Andrew P. Lenaghan, Challenges and complexities of managing information security, International Journal of Electronic Security and Digital Forensics, v.2 n.3, p.306-321, July 2009
	Chen Ye , DongBack Seo , Kevin C. Desouza , Sridhar Papagari Sangareddy , Sanjeev Jha, Influences of IT substitutes and user experience on post-adoption user switching: An empirical investigation, Journal of the American Society for Information Science and Technology, v.59 n.13, p.2115-2132, November 2008