DANE Trusted Email for Supply Chain Management

Supply chain management is critically dependent on trusted email mechanisms that address forgery, confidentiality, and sender authenticity. The IETF protocol ‘Domain Authentication of Named Entities’ (DANE) described in this paper has been extended from its initial goal of providing TLS web site validation to also offer a foundation for globally scalable and interoperable email security. Widespread deployment of DANE will require more than raw technology standards, however. Workflow automation mechanisms will need to emerge in order to simplify the publishing and retrieval of cryptographic credentials that are applicable for general audiences. Security policy enforcement will also need to be addressed. This paper gives a descriptive tutorial of trusted email technologies, shows how DANE solves key distribution logistics, and then suggests desirable automation components that could accelerate deployment of DANE-based trusted email. Pilot deployments are briefly described

Introduction to Supply Chain Security and Mutual Trust Research Minitrack

N/

TLS/PKI Challenges and certificate pinning techniques for IoT and M2M secure communications

Transport Layer Security is becoming the de facto standard to provide end-to-end security in the current Internet. IoT and M2M scenarios are not an exception since TLS is also being adopted there. The ability of TLS for negotiating any security parameter, its flexibility and extensibility are responsible for its wide adoption but also for several attacks. Moreover, as it relies on Public Key Infrastructure (PKI) for authentication, it is also affected by PKI problems. Considering the advent of IoT/M2M scenarios and their particularities, it is necessary to have a closer look at TLS history to evaluate the potential challenges of using TLS and PKI in these scenarios. According to this, the article provides a deep revision of several security aspects of TLS and PKI, with a particular focus on current Certificate Pinning solutions in order to illustrate the potential problems that should be addressed

Shared Value in Chile: Increasing Private Sector Competitiveness by Solving Social Problems

Over the last few decades, Chile has experienced rapid and sustained economic, social, and institutional development. Crucial challenges remain, however, in the form of social inequity, lack of opportunity, mistrust, and social unrest. The Chilean private sector is at an inflection point in its relationship with society. The corporate sector has both contributed to and benefited from the growth and development of the last decades, but remaining social challenges pose significant constraints to the continued growth of the private sector. High levels of mistrust regarding the role of business in society reflect a widespread belief that profit making activities are merely a demonstration of corporate greed. The Chilean private sector faces a frequently antagonistic relationship with government and civil society that will likely worsen unless companies are able to find ways to authentically link their businesses to efforts to solve Chile's social problems. On the other hand, if government and civil society conclude that the private sector has no contribution to make to the country's social and economic development strategy, Chile will squander an important engine for creating shared prosperity. The good news is that there does not need to be a trade-off between private sector competitiveness and greater prosperity for all Chileans. Shared value, a concept explained in Harvard Professor Michael Porter and Mark Kramer's Harvard Business Review articles, suggests an approach for companies to increase their competitiveness and profitability by helping to solve social problems. The public sector and civil society can increase the social benefits from shared value by thoughtfully partnering with the private secto

Perception and Use of E-mail: A Case Study in Universiti Utara Malaysia

E-mail has grown out to become as one of the most successful and frequently used computer applications since it was invented. It can be used to communicate faster, easier, and at a lower cost with everyone all over the world. Besides providing flexibility and improving the quality of communication, researchers acknowledged that there are many problems faced by e-mail users, namely repeating emails, spam e-mails, huge size attachment files, and insufficient storage size. A case study was conducted to investigate on Universiti Utara Malaysia staff’s perception and use of e-mail in order to improve the e-mail service provided to them. This paper discusses the findings from the study, which involves 958 staff. There were five phases involved in this study, which are instrument design, sampling, pilot study, data collection for real survey, and analysis. Self-administered questionnaires were used to gather the data, while descriptive statistical analysis was used for data analysis. The findings of the study reveal that UUM staff appreciate the e-mail service. However, they faced problems such as limited storage size and overwhelming number of e-mails. They believed that the UUM e-mail system is being abused as observed from the repeating advertisements and news sent to them. The output of this study can be used as a guideline by the UUM management in revising its e-mail policy so as to improve the quality of its e-mail service

Mindful technology adoption: Exploring the role of technology features in blockchain adoption

Blockchain has become a hyped emerging technology that is predicted to be heavily influential in all our lives, not just triggered by the success of Bitcoin. Yet, until now, it has failed to deliver most of its advertised benefits. To tackle this problem and provide an explanation for the missing wider success, this study focuses on the role of technology features in the adoption of blockchain. Thus, this research integrates the view on technological characteristics, represented by aspects of the mindfulness concept, with the sociological aspects influencing technology adoption decisions based on the widely used unified theory of acceptance and use of technology (UTAUT). The resulting research model is evaluated qualitatively, based on 11 international cases. This research advances previous research by focusing on the role of technology features for the potential adoption of blockchain technology in a cross-industry context. It expands the literature on technology adoption models by highlighting the role of technical characteristics and combining social, psychological and technological factors into one model. Further, it helps practitioners to understand the causes for the limited success of this technology and advances the general knowledge on the adoption of technology. The findings indicate that the unique technology features of blockchain technology are one crucial factor for adoption decisions which is often neglected due to the hype state of this technology. However, the overall missing success of blockchain technology is found having also different causes like for example missing regulation and standardization

Eagle Executive Magazine

Spring 2015 Commencement A Diary: Eagles on Wall Street Today\u27s Business Studenthttps://digitalcommons.georgiasouthern.edu/eagle-executive/1014/thumbnail.jp

My Email Communications Security Assessment (MECSA): 2018 Results

This JRC technical report presents the results obtained by the My Email Communications Security Assessment (MECSA) tool. MECSA is an online1 tool developed by the Joint Research Centre to assess the security of email communications between email providers. Email communications continue to be one of the most widespread forms of digital communications with thousands of millions of emails exchanged on a daily basis. It is estimated that 72% of the European population use email either in mobile phones, tablets or computers. It is the means of digital communication used by most Europeans on a daily basis (Special Eurobarometer 462, 2017. Published July 2018.) MECSA is the outcome of our research on the security of email communications. It servers a triple purpose. Firstly, it allows us to monitor the adoption of modern email security standards in the current ecosystem of email providers, assessing their capability to protect the confidentiality, integrity and authenticity of the email exchange amongst them. Secondly, MECSA aims to become a one-stop shop for email users to receive an indication of the capability of their email providers to protect their email exchange in the communication with other providers of the ecosystem. Finally, MECSA aims to become a reference tool for professionals and a mean to promote the adoption of modern email security standards in Europe.JRC.E.3-Cyber and Digital Citizens' Securit

Blockchain and the Future of the Audit

“In the future, virtually every function in the world of financial services will be displaced, disintermediated and decentralized. The Internet gave us a powerful way to share and access information. Blockchain now gives us a powerful way to share and access value.” During a February 2017 AICPA roundtable, Chairman of the Wall Street Blockchain Alliance and previous Global Head of Trading Analytics at Thomson Reuters, Ron Quarantana spoke to the revolutionary scale of blockchain. Quaranta, viewed by many as an expert in financial technology, predicts that the adoption of blockchain, both by the Big Four accounting firms and their clients, will disrupt the accounting industry by greatly reducing the time and skill needed to perform a quality audit. Some, such as Thomson Reuters’ Jon Baron, even claim that blockchain may eliminate the need for financial statement audits altogether. To many, blockchain is synonymous with Bitcoin, the cryptocurrency that, over the past three years, has returned 3,310%, compared to 35% and 36% returns of the S&P 500 and Dow Jones Industrial Average (DJIA), respectively. Blockchain, however, is much more than Bitcoin, with applications stretching further than cryptocurrency. Rather, it is a peer-to-peer hosted public ledger that does not require a central authority to support or verify transactions, and is unalterable in future periods. In this study, I propose to examine what blockchain technology means for the 887,000 people currently employed by the Big Four. More specifically, I seek to expand upon whether the potential adoption of blockchain in the coming years will reduce audit fees, impact audit quality, or perhaps do away with the audit completely