Insider threats: the major challenge to security risk management

Security risk management is by definition, a subjective and complex exercise and it takes time to perform properly. Human resources are fundamental assets for any organization, and as any other asset, they have inherent vulnerabilities that need to be handled, i.e. managed and assessed. However, the nature that characterize the human behavior and the organizational environment where they develop their work turn these task extremely difficult, hard to accomplish and prone to errors. Assuming security as a cost, organizations are usually focused on the efficiency of the security mechanisms implemented that enable them to protect against external attacks, disregarding the insider risks, which are much more difficult to assess. All these demands an interdisciplinary approach in order to combine technical solutions with psychology approaches in order to understand the organizational staff and detect any changes in their behaviors and characteristics. This paper intends to discuss some methodological challenges to evaluate the insider threats and its impacts, and integrate them in a security risk framework, that was defined according to the security standard ISO/IEC_JTC1, to support the security risk management process.

Design of a case-based reasoner for information security in military organizations

Information security is concerned with the protection of information, which can be stored, processed or transmitted within critical information systems of the organizations, against loss of confidentiality, integrity or availability. Protection measures to prevent these problems result through the implementation of controls at several dimensions: technical, administrative or physical. A vital objective for military organizations is to ensure superiority in contexts of information warfare and competitive intelligence. Therefore, the problem of information security in military organizations has been a topic of intensive work at both national and transnational levels, and extensive conceptual and standardization work is being produced. A current effort is therefore to develop automated decision support systems to assist military decision makers, at different levels in the command chain, to provide suitable control measures that can effectively deal with potential attacks and, at the same time, prevent, detect and contain vulnerabilities targeted at their information systems. The concept and processes of the Case-Based Reasoning (CBR) methodology outstandingly resembles classical military processes and doctrine, in particular the analysis of “lessons learned” and definition of “modes of action”. Therefore, the present paper addresses the modeling and design of a CBR system with two key objectives: to support an effective response in context of information security for military organizations; to allow for scenario planning and analysis for training and auditing processes.

Technical requirements for the use of C&DW recycled aggregates in municipal and rural roads and trenches

The use of construction and demolition waste (C&DW) in the construction industry is an important contribution to attain sustainability in the sector. The roads are among the civil engineering works which can use larger quantities of C&DW recycled aggregates. In Portugal, the limit values for the properties of C&DW recycled aggregates that can be used in the roads of Portuguese Road Network are defined by two Laboratório Nacional de Engenharia Civil (LNEC) technical specifications (TS), in accordance to Portuguese Decree-law no. 46/2008 of May 12th. Municipal and rural roads and trenches have specific characteristics that can enable the use of C&DW of lower quality than those required by existing LNEC TS, and even then ensuring an adequate performance. However, given the absence of specific regulation for those applications, the Portuguese Environment Agency requires compliance with the existing LNEC TS, which represents an obstacle to recycling a significant part of the C&DW, in particular at a local government level. This paper presents guidelines for the recycling of C&DW in municipal and rural roads and in trenches, which could be considered in a new forthcoming LNEC TS. In the preparation of the guidelines, the bibliography collected and analysed, the information gathered from the application of C&DW in a municipal and rural roads of a Portuguese municipality and in the roadways of a Portuguese resort, and the results of laboratory tests carried out on samples collected in the Portuguese municipality were taken into consideration.

A Reorganização Administrativa do Território das Freguesias 2013 enquanto determinante de voto: estudo caso do Concelho de Braga e Guimarães

Dissertação de mestrado em Administração Pública

Business intelligence no suporte às autarquias locais e à sua gestão orçamental

Dissertação de mestrado integrado em Engenharia e Gestão de Sistemas de Informação

Contributo para a compreensão das causas de exclusão de ilicitude e da culpa no crime de acesso ilegítimo

Dissertação de mestrado em Direito e Informática

A destruição da muralha e do castelo de Braga no inicio do século XX: elementos para a compreensão do castelo medieval

Relatório de estágio de mestrado em História

O papel dos fisioterapeutas na equipe multidisciplinar atuantes no complexo municipal André Vidal de Araújo em Manaus

Dissertação de mestrado em Educação Especial (área de especialização em Dificuldades de Aprendizagem Específicas)