Towards a collection of cost-effective technologies in support of the NIST cybersecurity framework
- Shackleton, Bruce Michael Stuart
- Authors: Shackleton, Bruce Michael Stuart
- Date: 2018
- Subjects: National Institute of Standards and Technology (U.S.) , Computer security , Computer networks Security measures , Small business Information technology Cost effectiveness , Open source software
- Language: English
- Type: text , Thesis , Masters , MSc
- Identifier: http://hdl.handle.net/10962/62494 , vital:28199
- Description: The NIST Cybersecurity Framework (CSF) is a specific risk and cybersecurity framework. It provides guidance on controls that can be implemented to help improve an organisation’s cybersecurity risk posture. The CSF Functions consist of Identify, Protect, Detect, Respond, and Recover. Like most Information Technology (IT) frameworks, there are elements of people, processes, and technology. The same elements are required to successfully implement the NIST CSF. This research specifically focuses on the technology element. While there are many commercial technologies available for a small to medium sized business, the costs can be prohibitively expensive. Therefore, this research investigates cost-effective technologies and assesses their alignment to the NIST CSF. The assessment was made against the NIST CSF subcategories. Each subcategory was analysed to identify where a technology would likely be required. The framework provides a list of Informative References. These Informative References were used to create high- level technology categories, as well as identify the technical controls against which the technologies were measured. The technologies tested were either open source or proprietary. All open source technologies tested were free to use, or have a free community edition. Proprietary technologies would be free to use, or considered generally available to most organisations, such as components contained within Microsoft platforms. The results from the experimentation demonstrated that there are multiple cost-effective technologies that can support the NIST CSF. Once all technologies were tested, the NIST CSF was extended. Two new columns were added, namely high-level technology category, and tested technology. The columns were populated with output from the research. This extended framework begins an initial collection of cost-effective technologies in support of the NIST CSF.
- Full Text:
- Date Issued: 2018
- Authors: Shackleton, Bruce Michael Stuart
- Date: 2018
- Subjects: National Institute of Standards and Technology (U.S.) , Computer security , Computer networks Security measures , Small business Information technology Cost effectiveness , Open source software
- Language: English
- Type: text , Thesis , Masters , MSc
- Identifier: http://hdl.handle.net/10962/62494 , vital:28199
- Description: The NIST Cybersecurity Framework (CSF) is a specific risk and cybersecurity framework. It provides guidance on controls that can be implemented to help improve an organisation’s cybersecurity risk posture. The CSF Functions consist of Identify, Protect, Detect, Respond, and Recover. Like most Information Technology (IT) frameworks, there are elements of people, processes, and technology. The same elements are required to successfully implement the NIST CSF. This research specifically focuses on the technology element. While there are many commercial technologies available for a small to medium sized business, the costs can be prohibitively expensive. Therefore, this research investigates cost-effective technologies and assesses their alignment to the NIST CSF. The assessment was made against the NIST CSF subcategories. Each subcategory was analysed to identify where a technology would likely be required. The framework provides a list of Informative References. These Informative References were used to create high- level technology categories, as well as identify the technical controls against which the technologies were measured. The technologies tested were either open source or proprietary. All open source technologies tested were free to use, or have a free community edition. Proprietary technologies would be free to use, or considered generally available to most organisations, such as components contained within Microsoft platforms. The results from the experimentation demonstrated that there are multiple cost-effective technologies that can support the NIST CSF. Once all technologies were tested, the NIST CSF was extended. Two new columns were added, namely high-level technology category, and tested technology. The columns were populated with output from the research. This extended framework begins an initial collection of cost-effective technologies in support of the NIST CSF.
- Full Text:
- Date Issued: 2018
A comparison of open source and proprietary digital forensic software
- Authors: Sonnekus, Michael Hendrik
- Date: 2015
- Subjects: Computer crimes , Computer crimes -- Investigation , Electronic evidence , Open source software
- Language: English
- Type: Thesis , Masters , MSc
- Identifier: vital:4717 , http://hdl.handle.net/10962/d1017939
- Description: Scrutiny of the capabilities and accuracy of computer forensic tools is increasing as the number of incidents relying on digital evidence and the weight of that evidence increase. This thesis describes the capabilities of the leading proprietary and open source digital forensic tools. The capabilities of the tools were tested separately on digital media that had been formatted using Windows and Linux. Experiments were carried out with the intention of establishing whether the capabilities of open source computer forensics are similar to those of proprietary computer forensic tools, and whether these tools could complement one another. The tools were tested with regards to their capabilities to make and analyse digital forensic images in a forensically sound manner. The tests were carried out on each media type after deleting data from the media, and then repeated after formatting the media. The results of the experiments performed demonstrate that both proprietary and open source computer forensic tools have superior capabilities in different scenarios, and that the toolsets can be used to validate and complement one another. The implication of these findings is that investigators have an affordable means of validating their findings and are able to more effectively investigate digital media.
- Full Text:
- Date Issued: 2015
- Authors: Sonnekus, Michael Hendrik
- Date: 2015
- Subjects: Computer crimes , Computer crimes -- Investigation , Electronic evidence , Open source software
- Language: English
- Type: Thesis , Masters , MSc
- Identifier: vital:4717 , http://hdl.handle.net/10962/d1017939
- Description: Scrutiny of the capabilities and accuracy of computer forensic tools is increasing as the number of incidents relying on digital evidence and the weight of that evidence increase. This thesis describes the capabilities of the leading proprietary and open source digital forensic tools. The capabilities of the tools were tested separately on digital media that had been formatted using Windows and Linux. Experiments were carried out with the intention of establishing whether the capabilities of open source computer forensics are similar to those of proprietary computer forensic tools, and whether these tools could complement one another. The tools were tested with regards to their capabilities to make and analyse digital forensic images in a forensically sound manner. The tests were carried out on each media type after deleting data from the media, and then repeated after formatting the media. The results of the experiments performed demonstrate that both proprietary and open source computer forensic tools have superior capabilities in different scenarios, and that the toolsets can be used to validate and complement one another. The implication of these findings is that investigators have an affordable means of validating their findings and are able to more effectively investigate digital media.
- Full Text:
- Date Issued: 2015
Web-based M-learning system for ad-hoc learning of mathematical concepts amongst first year students at the University of Namibia
- Authors: Ntinda, Maria Ndapewa
- Date: 2014
- Subjects: Mathematics -- Study and teaching (Higher) -- Namibia , Mathematics -- Technological innovations , Mobile communication systems in education , Teaching -- Aids and devices , Educational innovations , Open source software
- Language: English
- Type: Thesis , Masters , MSc
- Identifier: vital:4701 , http://hdl.handle.net/10962/d1013174
- Description: In the last decade, there has been an increase in the number of web-enabled mobile devices, offering a new platform that can be targeted for the development of learning applications. Worldwide, developers have taken initiatives in developing mobile learning (M-learning) systems to provide students with access to learning materials regardless of time and location. The purpose of this study was to investigate whether it is viable for first year students enrolled at the University of Namibia (UNAM) to use mobile phones for ad-hoc learning of mathematical concepts. A system, EnjoyMath, aiming to assist students in preparing for tests, examinations, review contents and reinforce knowledge acquired during traditional classroom interactions was designed and implemented. The EnjoyMath system was designed and implemented through the use of the Human Centred Design (HCD) methodology. Two revolutions of the four-step process of the HCD cycle were completed in this study. Due to the distance between UNAM and Rhodes University (where the researcher was based), the researcher could not always work in close relation with the UNAM students. Students from the Extended Study Unit (ESU) at Rhodes University were therefore selected in the first iteration of the project due to their proximity to the researcher and their similar demographics to the first year UNAM students, while the UNAM students were targeted in the second iteration of the study. This thesis presents the outcome of the two pre-intervention studies of the first-year students' perceptions about M-learning conducted at Rhodes University and UNAM. The results of the pre-intervention studies showed that the students are enthusiastic about using an M-learning system, because it would allow them to put in more time to practice their skills whenever and wherever they are. Moreover, the thesis presents the different stages undertaken to develop the EnjoyMath system using Open Source Software (PHP and MySQL). The results of a user study (post-intervention) conducted with participants at UNAM, ascertained the participants' perception of the usability of the EnjoyMath system and are also presented in this thesis. The EnjoyMath system was perceived by the participants to be "passable"; hence an M-learning system could be used to compliment an E-learning system at UNAM.
- Full Text:
- Date Issued: 2014
- Authors: Ntinda, Maria Ndapewa
- Date: 2014
- Subjects: Mathematics -- Study and teaching (Higher) -- Namibia , Mathematics -- Technological innovations , Mobile communication systems in education , Teaching -- Aids and devices , Educational innovations , Open source software
- Language: English
- Type: Thesis , Masters , MSc
- Identifier: vital:4701 , http://hdl.handle.net/10962/d1013174
- Description: In the last decade, there has been an increase in the number of web-enabled mobile devices, offering a new platform that can be targeted for the development of learning applications. Worldwide, developers have taken initiatives in developing mobile learning (M-learning) systems to provide students with access to learning materials regardless of time and location. The purpose of this study was to investigate whether it is viable for first year students enrolled at the University of Namibia (UNAM) to use mobile phones for ad-hoc learning of mathematical concepts. A system, EnjoyMath, aiming to assist students in preparing for tests, examinations, review contents and reinforce knowledge acquired during traditional classroom interactions was designed and implemented. The EnjoyMath system was designed and implemented through the use of the Human Centred Design (HCD) methodology. Two revolutions of the four-step process of the HCD cycle were completed in this study. Due to the distance between UNAM and Rhodes University (where the researcher was based), the researcher could not always work in close relation with the UNAM students. Students from the Extended Study Unit (ESU) at Rhodes University were therefore selected in the first iteration of the project due to their proximity to the researcher and their similar demographics to the first year UNAM students, while the UNAM students were targeted in the second iteration of the study. This thesis presents the outcome of the two pre-intervention studies of the first-year students' perceptions about M-learning conducted at Rhodes University and UNAM. The results of the pre-intervention studies showed that the students are enthusiastic about using an M-learning system, because it would allow them to put in more time to practice their skills whenever and wherever they are. Moreover, the thesis presents the different stages undertaken to develop the EnjoyMath system using Open Source Software (PHP and MySQL). The results of a user study (post-intervention) conducted with participants at UNAM, ascertained the participants' perception of the usability of the EnjoyMath system and are also presented in this thesis. The EnjoyMath system was perceived by the participants to be "passable"; hence an M-learning system could be used to compliment an E-learning system at UNAM.
- Full Text:
- Date Issued: 2014
COIN : a customisable, incentive driven video on demand framework for low-cost IPTV services
- Authors: Musvibe, Ray
- Date: 2012 , 2012-03-02
- Subjects: Internet television , Digital television , Television broadcasting -- Technological innovations , Multicasting (Computer networks) , Video dial tone , Open source software , Telecommunication , Capital investments
- Language: English
- Type: Thesis , Masters , MSc
- Identifier: vital:4654 , http://hdl.handle.net/10962/d1006650 , Internet television , Digital television , Television broadcasting -- Technological innovations , Multicasting (Computer networks) , Video dial tone , Open source software , Telecommunication , Capital investments
- Description: There has been a significant rise in the provision of television and video services over IP (IPTV) in recent years. Increasing network capacity and falling bandwidth costs have made it both technically and economically feasible for service providers to deliver IPTV services. Several telecommunications (telco) operators worldwide are rolling out IPTV solutions and view IPTV as a major service differentiator and alternative revenue source. The main challenge that IPTV providers currently face, however, is the increasingly congested television service provider market, which also includes Internet Television. IPTV solutions therefore need strong service differentiators to succeed. IPTV solutions can doubtlessly sell much faster if they are more affordable or low-cost. Advertising has already been used in many service sectors to help lower service costs, including traditional broadcast television. This thesis therefore explores the role that advertising can play in helping to lower the cost of IPTV services and to incentivise IPTV billing. Another approach that IPTV providers can use to help sell their product is by addressing the growing need for control by today's multimedia users. This thesis will therefore explore the varied approaches that can be used to achieve viewer focused IPTV implementations. To further lower the cost of IPTV services, telcos can also turn to low-cost, open source platforms for service delivery. The adoption of low-cost infrastructure by telcos can lead to reduced Capital Expenditure (CAPEX), which in turn can lead to lower service fees, and ultimately to higher subscriptions and revenue. Therefore, in this thesis, the author proposes a CustOmisable, INcentive (COIN) driven Video on Demand (VoD) framework to be developed and deployed using the Mobicents Communication Platform, an open source service creation and execution platform. The COIN framework aims to provide a viewer focused, economically competitive service that combines the potential cost savings of using free and open source software (FOSS), with an innovative, incentive-driven billing approach. This project will also aim to evaluate whether the Mobicents Platform is a suitable service creation and execution platform for the proposed framework. Additionally, the proposed implementation aims to be interoperable with other IPTV implementations, hence shall follow current IPTV standardisation architectures and trends. The service testbed and its implementation are described in detail and only free and open source software is used; this is to enable its easy duplication and extension for future research. , TeX output 2012.03.02:1241 , Adobe Acrobat 9.2 Paper Capture Plug-in
- Full Text:
- Date Issued: 2012
- Authors: Musvibe, Ray
- Date: 2012 , 2012-03-02
- Subjects: Internet television , Digital television , Television broadcasting -- Technological innovations , Multicasting (Computer networks) , Video dial tone , Open source software , Telecommunication , Capital investments
- Language: English
- Type: Thesis , Masters , MSc
- Identifier: vital:4654 , http://hdl.handle.net/10962/d1006650 , Internet television , Digital television , Television broadcasting -- Technological innovations , Multicasting (Computer networks) , Video dial tone , Open source software , Telecommunication , Capital investments
- Description: There has been a significant rise in the provision of television and video services over IP (IPTV) in recent years. Increasing network capacity and falling bandwidth costs have made it both technically and economically feasible for service providers to deliver IPTV services. Several telecommunications (telco) operators worldwide are rolling out IPTV solutions and view IPTV as a major service differentiator and alternative revenue source. The main challenge that IPTV providers currently face, however, is the increasingly congested television service provider market, which also includes Internet Television. IPTV solutions therefore need strong service differentiators to succeed. IPTV solutions can doubtlessly sell much faster if they are more affordable or low-cost. Advertising has already been used in many service sectors to help lower service costs, including traditional broadcast television. This thesis therefore explores the role that advertising can play in helping to lower the cost of IPTV services and to incentivise IPTV billing. Another approach that IPTV providers can use to help sell their product is by addressing the growing need for control by today's multimedia users. This thesis will therefore explore the varied approaches that can be used to achieve viewer focused IPTV implementations. To further lower the cost of IPTV services, telcos can also turn to low-cost, open source platforms for service delivery. The adoption of low-cost infrastructure by telcos can lead to reduced Capital Expenditure (CAPEX), which in turn can lead to lower service fees, and ultimately to higher subscriptions and revenue. Therefore, in this thesis, the author proposes a CustOmisable, INcentive (COIN) driven Video on Demand (VoD) framework to be developed and deployed using the Mobicents Communication Platform, an open source service creation and execution platform. The COIN framework aims to provide a viewer focused, economically competitive service that combines the potential cost savings of using free and open source software (FOSS), with an innovative, incentive-driven billing approach. This project will also aim to evaluate whether the Mobicents Platform is a suitable service creation and execution platform for the proposed framework. Additionally, the proposed implementation aims to be interoperable with other IPTV implementations, hence shall follow current IPTV standardisation architectures and trends. The service testbed and its implementation are described in detail and only free and open source software is used; this is to enable its easy duplication and extension for future research. , TeX output 2012.03.02:1241 , Adobe Acrobat 9.2 Paper Capture Plug-in
- Full Text:
- Date Issued: 2012
Constructing a low-cost, open-source, VoiceXML
- Authors: King, Adam
- Date: 2007 , 2013-07-01
- Subjects: VoiceXML (Document markup language) , Asterisk (Computer file) , Internet telephony , Open source software
- Language: English
- Type: Thesis , Masters , MSc
- Identifier: vital:4585 , http://hdl.handle.net/10962/d1004735 , VoiceXML (Document markup language) , Asterisk (Computer file) , Internet telephony , Open source software
- Description: Voice-enabled applications, applications that interact with a user via an audio channel, are used extensively today. Their use is growing as speech related technologies improve, as speech is one of the most natural methods of interaction. They can provide customer support as IVRs, can be used as an assistive technology, or can become an aural interface to the Internet. Given that the telephone is used extensively throughout the globe, the number of potential users of voice-enabled applications is very high. VoiceXML is a popular, open, high-level, standard means of creating voice-enabled applications which was designed to bring the benefits of web based development to services. While VoiceXML is an ideal language for creating these applications, VoiceXML gateways, the hardware and software responsible for interpreting VoiceXML applications and interfacing with the PSTN, are still expensive and so there is a need for a low-cost gateway. Asterisk, and open-source, TDM/VoIP telephony platform, can be used as a low-cost PSTN interface. This thesis investigates adding a VoiceXML service to Asterisk, creating a low-cost VoiceXML prototype gateway which is able to render voice-enabled applications. Following the Component-Based Software Engineering (CBSE) paradigm, the VoiceXML gateway is divided into a set of components which are sourced from the open-source community, and integrated to create the gateway. The browser requires a VoiceXML interpreter (OpenVXI), a Text-To-Speech engine (Festival) and a speech recognition engine (Sphinx 4). The integration of the components results in a low-cost, open-source VoiceXML gateway. System tests show that the integration of the components was successful, and that the system can handle concurrent calls. A fully compliant version of the gateway can be used in the real world to render voice-enabled applications at a low cost. , KMBT_363 , Adobe Acrobat 9.55 Paper Capture Plug-in
- Full Text:
- Date Issued: 2007
- Authors: King, Adam
- Date: 2007 , 2013-07-01
- Subjects: VoiceXML (Document markup language) , Asterisk (Computer file) , Internet telephony , Open source software
- Language: English
- Type: Thesis , Masters , MSc
- Identifier: vital:4585 , http://hdl.handle.net/10962/d1004735 , VoiceXML (Document markup language) , Asterisk (Computer file) , Internet telephony , Open source software
- Description: Voice-enabled applications, applications that interact with a user via an audio channel, are used extensively today. Their use is growing as speech related technologies improve, as speech is one of the most natural methods of interaction. They can provide customer support as IVRs, can be used as an assistive technology, or can become an aural interface to the Internet. Given that the telephone is used extensively throughout the globe, the number of potential users of voice-enabled applications is very high. VoiceXML is a popular, open, high-level, standard means of creating voice-enabled applications which was designed to bring the benefits of web based development to services. While VoiceXML is an ideal language for creating these applications, VoiceXML gateways, the hardware and software responsible for interpreting VoiceXML applications and interfacing with the PSTN, are still expensive and so there is a need for a low-cost gateway. Asterisk, and open-source, TDM/VoIP telephony platform, can be used as a low-cost PSTN interface. This thesis investigates adding a VoiceXML service to Asterisk, creating a low-cost VoiceXML prototype gateway which is able to render voice-enabled applications. Following the Component-Based Software Engineering (CBSE) paradigm, the VoiceXML gateway is divided into a set of components which are sourced from the open-source community, and integrated to create the gateway. The browser requires a VoiceXML interpreter (OpenVXI), a Text-To-Speech engine (Festival) and a speech recognition engine (Sphinx 4). The integration of the components results in a low-cost, open-source VoiceXML gateway. System tests show that the integration of the components was successful, and that the system can handle concurrent calls. A fully compliant version of the gateway can be used in the real world to render voice-enabled applications at a low cost. , KMBT_363 , Adobe Acrobat 9.55 Paper Capture Plug-in
- Full Text:
- Date Issued: 2007
- «
- ‹
- 1
- ›
- »