Information Security Management Metrics: A Definitive Guide to Effective Security Monitoring and Measurement

Abstract

With any complex project deployment, a clearly understood and reliable infrastructure can only be substantiated through a rational and explicit planning process. This planning process is often described as information technology (IT) governance. Governance-based control infrastructures are valuable and can provide the basis for control over every form of organizational resource. Given the level of sophistication of malicious agents, an information and communication technology management control system with even one hole in it is a business catastrophe waiting to happen. Strong executive sponsorship is the prerequisite for effective IT governance and the proper way to establish information security is to engineer an array of interlocking best practices, from a commonly accepted model of best practice. Organizations must define substantive policies, assign roles and responsibilities, educate employees and describe and enforce accountability. This paper presents an understanding and mastery of five strategic principles of cybersecurity best practices based on the Framework for Improving Critical Infrastructure Cybersecurity (CSF).     

Book Review of Auditing Cloud Computing: A Security and Privacy Guide edited by Ben Halpert

Abstract

Crime by Computer, by Donn B. Parker. Charles Scribner's Sons (597 Fifth Avenue, New York, NY, 10017). 1976, 308 pages, $10.95.

The Cost of Crimes Against Business. U. S. Department of Commerce. (Order from Superintendent of Documents, U. S. Government Printing Office, Washington, DC, 20402.) 1976, 52 pages, $1.60.     

The Role of HCI in the Age of AI

This article examines some of the mystique surrounding AI, including the interrelated notions of explainability and complexity, and argues that these notions suggest that designing human-centered AI is difficult. It explains how, once these are put aside, an HCI perspective can help define interaction between AI and users that can enhance rather than substitute one important aspect of human life: creativity. Key to developing such creative interactions are abstractions and grammars of action and other notions; the article explores the history of these in HCI and how they are to be used in the contemporary interaction and design space, in relation to AI. The article is programmatic rather than empirical though its argument uses real-world examples.     

A history of AI and Law in 50 papers: 25?years of the international conference on AI and Law

We provide a retrospective of 25?years of the International Conference on AI and Law, which was first held in 1987. Fifty papers have been selected from the thirteen conferences and each of them is described in a short subsection individually written by one of the 24 authors. These subsections attempt to place the paper discussed in the context of the development of AI and Law, while often offering some personal reactions and reflections. As a whole, the subsections build into a history of the last quarter century of the field, and provide some insights into where it has come from, where it is now, and where it might go.     

A Guide to the Internet Revolution in Banking

Banking is an industry that is expected to undergo drastic change because of the E-commerce revolution. This article maps out the direction of the Internet revolution in banking by surveying the phenomenon's history, its technological development, and associated managerial and technological issues.     

Expert systems in the UK: From AI to KBS

The British have made substantial practical contributions in the development of expert systems. The trend has been one of building from what others, particularly Americans, have done. But the emphasis has been on small-scale and applied solutions to relatively straightforward problems. In this way the theoretical questions of artificial intelligence have been replaced by the more constrained issues of knowledge-based systems and often the most appropriate label for the concerns would be those of rule-based systems. The best known and most successful British rule-based systems solve government administrative problems.     

Regulation as a barrier to electronic commerce in Europe: the case of the European fund management industry

This paper presents results of exploratory research into the question of whether the distribution of investment funds via the Internet in Europe is being deterred by regulatory barriers. The paper examines the theoretical underpinnings behind financial services regulation and then asks if current regulation in place within the European Union and its Member States is consistent with this theory or indeed if regulation is acting as a barrier. Using both primary data and secondary sources, this exploratory study argues that European fund management firms face different regulatory obstacles, often the result of protectionism and the inconsistent application of financial regulations, in different EU countries. As a result, they are unable to reap the benefits that electronic commerce should bring in an industry that appears highly suited for it.     

AI and robotics in the European restaurant sector: Assessing potentials for process innovation in a high-contact service industry

Electronic Markets - The restaurant technology market is rapidly evolving and is transforming the restaurant business as a significant sector of tourism and hospitality. Enabled by artificial...     

Introduction to the Special Issue: AI, Agents, and the Web

Together, the articles in this issue indicate a breakthrough in AI--as our field explores new ways to utilize intelligent systems' powerful tools on the ever-expanding, continually changing information space that's the World Wide Web. This article is part of a special issue on AI, Agents, and the Web.     

The academic quality of AI journals and the role of AI in the MIS curriculum: Perspectives of business faculty

In this paper, we report the results of the first phase of a three-part study of the emerging role of Artificial Intelligence (AI) as an academic discipline. The stratification among journals that are formal communication vehicles for AI research is described and analyzed. Based on a survey of business faculty from AACSB-accredited schools around the country, 30 leading AI journals are ranked and evaluated, in terms of their academic quality and reputation. The paper also reports on the progress toward the development of a cumulative tradition for AI and its foundation. The second phase of this research focuses on the knowledge utilization of AI researchers and practitioners. In the third phase, the findings from the above two studies will be analyzed and used as a basis to develop a taxonomy of research for Artificial Intelligence.     

Challenges and opportunities: from big data to knowledge in AI 2.0

In this paper, we review recent emerging theoretical and technological advances of artificial intelligence (AI) in the big data settings. We conclude that integrating data-driven machine learning with human knowledge (common priors or implicit intuitions) can effectively lead to explainable, robust, and general AI, as follows: from shallow computation to deep neural reasoning; from merely data-driven model to data-driven with structured logic rules models; from task-oriented (domain-specific) intelligence (adherence to explicit instructions) to artificial general intelligence in a general context (the capability to learn from experience). Motivated by such endeavors, the next generation of AI, namely AI 2.0, is positioned to reinvent computing itself, to transform big data into structured knowledge, and to enable better decision-making for our society.     

人工智能中的A*算法应用及编程

搜索是人工智能中的一个基本问题.文中比较了几种典型的搜索方法,包括盲目搜索和启发式搜索,重点对A*算法进行了阐述和分析,并以求地图两点的最短路径搜索为例,给出了用A*算法编程的实现方法.结果表明,应用A*算法提高了目标搜索的效率.     

Attractor Spaces as Modules: A Semi-Eliminative Reduction of Symbolic AI to Dynamic Systems Theory

I propose a semi-eliminative reduction of Fodors concept of module to the concept of attractor basin which is used in Cognitive Dynamic Systems Theory (DST). I show how attractor basins perform the same explanatory function as modules in several DST based research program. Attractor basins in some organic dynamic systems have even been able to perform cognitive functions which are equivalent to the If/Then/Else loop in the computer language LISP. I suggest directions for future research programs which could find similar equivalencies between organic dynamic systems and other cognitive functions. This type of research could help us discover how (and/or if) it is possible to use Dynamic Systems Theory to more accurately model the cognitive functions that are now being modeled by subroutines in Symbolic AI computer models. If such a reduction of subroutines to basins of attraction is possible, it could free AI from the limitations that prompted Fodor to say that it was impossible to model certain higher level cognitive functions.     

Quantitative Analysis of Development Defects to Guide Testing: A Case Study

Many quality improvement activities can be guided by defect analysis. Development defect analysis of software components can be used to guide testing with the goal of focusing on parts of the software that were fault-prone during development. We perform a case study using defect data from a large software product (medical record system). In this study, development defect data help to identify which parts of the software might profit from being tested more and earlier because they were fault-prone during development. Several testing guidelines are proposed to make system test more effective and more efficient.