当前位置: X-MOL 学术Educ. Inf. Technol. › 论文详情
Our official English website, www.x-mol.net, welcomes your feedback! (Note: you will need to create a separate account there.)
Adaptive security awareness training using linked open data datasets
Education and Information Technologies ( IF 3.666 ) Pub Date : 2020-05-22 , DOI: 10.1007/s10639-020-10155-x
Zheyu Tan , Razvan Beuran , Shinobu Hasegawa , Weiwei Jiang , Min Zhao , Yasuo Tan

Cybersecurity is no longer an issue discussed only between the professionals or technologists, but it is also closely related to ordinary people whose daily life is exposed to kinds of cyberattacks. And Womabat Security Technologies conducted a survey revealed that ransomware is an unknown concept to nearly two-thirds of employees. In practical, almost 95% of cybersecurity attacks are due to human error. At fact, expensive and sophisticated systems cannot work effectively without considering the human factor, while human factor is the major vulnerability in cybersecurity. Thus, it has great significance to give people cybersecurity awareness training. In this paper, we present a system, named ASURA, providing adaptive training aimed at improving cybersecurity awareness of people. Three issues can’t be neglected in adaptive cybersecurity awareness training, as follows. Firstly, we need to decide the proper training contents from the huge training materials. Secondly, the training contents should be timely updated, as cyber attacks constantly changing. At last, we should conduct training through effective and acceptable approach. We solved above three issues in this paper, and the innovative idea of this paper is constructing hierarchical concept map from the LOD database DBpedia. Then, we employ a series of processing on hierarchical concept map, including PageRank algorithm used to calculate the importance of each concept node, and filtering used to filtered out undefined and unrelated concepts. In particular, we get training contents from DBpedia dynamically and timely updated, so that training contents is keeping up to date. ASURA delivered training contents completely online, thus significant trimmed budget and allowed learners accessing training outside of a traditional classroom. Moreover, ASURA provide adaptive training targeted to individual learner, as it generate training contents based on the keyword from the learner.



中文翻译:

使用链接的开放数据数据集进行自适应安全意识培训

网络安全不再只是专业人员或技术人员之间讨论的问题,而是与日常生活中遭受各种网络攻击的普通百姓密切相关。Womabat Security Technologies进行的一项调查显示,对于近三分之二的员工来说,勒索软件是一个未知的概念。实际上,几乎95%的网络安全攻击都是人为错误造成的。实际上,昂贵且复杂的系统如果不考虑人为因素就无法有效运行,而人为因素是网络安全中的主要漏洞。因此,对人们进行网络安全意识培训具有重要意义。在本文中,我们提出了一个名为ASURA的系统,该系统提供旨在提高人们对网络安全意识的适应性培训。适应性网络安全意识培训不能忽略以下三个问题。首先,我们需要从大量的培训材料中确定适当的培训内容。其次,随着网络攻击的不断变化,培训内容应及时更新。最后,我们应该通过有效和可接受的方法进行培训。我们解决了本文中的上述三个问题,并且本文的创新思想是从LOD数据库DBpedia构建层次概念图。然后,我们对层次概念图进行了一系列处理,包括用于计算每个概念节点重要性的PageRank算法,以及用于过滤出未定义和不相关概念的过滤。特别是,我们从DBpedia动态获取培训内容并及时更新,使培训内容保持最新。ASURA完全在线提供培训内容,从而大大削减了预算,并使学习者可以在传统教室之外进行培训。而且,ASURA提供针对个人学习者的适应性培训,因为它会基于来自学习者的关键字生成培训内容。

更新日期:2020-05-22
down
wechat
bug