| Abstract: | Threats to information systems and cyber-based critical infrastructures are evolving and growing. These threats can be unintentional and intentional, targeted or no targeted, and can come from a variety of sources, such as information warfare, criminals, hackers, virus writers, and disgruntled employees and contractors working within an organization. Moreover, these groups and individuals have a variety of attack techniques at their disposal, and cyber exploitation activity has grown more sophisticated, more targeted, and more serious. As government, private sector, and personal activities continue to move to networked operations, as digital systems add ever more capabilities, as wireless systems become more ubiquitous, and as the design, manufacture, and service of information technology have moved overseas, the threat will continue to grow. In the absence of robust security programs, agencies have experienced a wide range of incidents involving data loss or theft, computer intrusions, and privacy breaches, underscoring the need for improved security practices. These developments have led government officials to become increasingly concerned about the potential for a cyber attack. This article proposed a new approach for identifying the source of threats so some action could be taken against them and therefore information will be protected against loss or theft.
|