Securing e-learning systems: A case of insider cyber attacks and novice IT management in a small university

Journal of Cases on Information Technology

Volumn 8, Issue 4, 2006, Pages 24-34

  Ramim, Michelle ^a   Levy, Yair ^a  

^a NOVA SOUTHEASTERN UNIVERSITY   (United States)

Author keywords

Cyber crime; e learning systems; e learning systems security; Insider cyber attack; Insider cyber threats; Insider IS misuse; IT policies; IT procedures

Indexed keywords

CYBERNETICS; INFORMATION MANAGEMENT; INFORMATION RETRIEVAL SYSTEMS; INFORMATION TECHNOLOGY; INTERNET;

CYBER CRIME; E-LEARNING SYSTEMS; E-LEARNING SYSTEMS SECURITY; INSIDER CYBER ATTACK; INSIDER CYBER THREATS; INSIDER IS MISUSE; IT POLICIES; IT PROCEDURES;

LEARNING SYSTEMS;

EID: 33846206084     PISSN: 15487717     EISSN: 15487725     Source Type: Journal    
DOI: 10.4018/jcit.2006100103     Document Type: Article

References (23)

1. CERT® Coordination Center (CERT/CC). (n.d.). Retrieved April 28, 2006, from http://www.CERT.org
2. Chae, B., & Poole, M. S. (2005). Enterprise system development in higher education. Journal of Cases on Information Technology, 7(2), 82-101.
3. Freeh, J. L. (2000). Congressional testimony of FBI director on "cybercrime." Testimony before the U.S. Senate Committee on Judiciary, Subcommittee for the Technology, Terrorism, and Government Information. Retrieved April 28, 2006, from http://www.fbi.gov/con-gress/congress00/ cyber032800.htm
4. Garfinkel, R., Gopal, R., & Goes, P. (2002). Privacy protection of binary confidential data against deterministic, stochastic, and insider threat. Management Science 48(6), 749-764.
5. Goan, T. (1999). A cop on the beat: Collecting and appraising intrusive evidence. Communications of the ACM, 42(7), 46-53.
6. Gordon, L. A., Martin, P. L., William, L., & Richardson, R. (2004). CSI/FBI computer crime and security survey. Computer Security Institute 2004. Retrieved April 28, 2006, from http://i.cmpnet.com/gocsi/db_area/pdfs/fbi/ FBI2004.pdf
7. Hale, J., & Brusil, P. J. (2004). Guest editorial: Security management: Two sides of the same coin. Journal of Network and Systems Management, 12(1), 1-8.
8. Hamin, Z. (2000). Insider cyber-threats: Problems and perspectives. International Review of Law, Computers & Technology, 14(1), 105-113.
9. Keller, S., Powell, A., Horstmann, B., Predmore, C., & Crawford, M. (2005). Information security threats and practices in small businesses. Information Systems Management, 22(2), 7-20.
10. Levy, Y. (2005). A case study of management skills comparison in online and on-campus MBA programs. International Journal of Information and Communications Technology Education, 1(3), 1-20.
11. Levy, Y. (2006). Assessing the value of e-learning systems. Hershey, PA: Information Science Publishing.
12. Levy, Y., & Ramim, M. (2004). Financing expensive technologies in an era of decreased funding: Think Big... Start Small... Build Fast... In C. Howard, K. Schuenk, & R. Discenza (Eds.), Distance learning and university effectiveness: Changing educational paradigms for online learning (pp. 278-301). Hershey, PA: Idea Group Publishing.
13. Magklaras, G. B., & Furnell, S. M. (2002). Insider threat prediction tool: Evaluating the probability of IT misuse. Computers & Security, 21(1), 62-73.
14. Ramim, M. (2005, April 7-9). Towards an understanding and definition of academic misconduct in online learning environments. In Proceedings of IEEE SoutheastCon 2005 (pp. 641-650), Fort Lauderdale, Florida.
15. Ross, S. C., Tyran, C. K., Auer, D. J., Junell, J. M., & Williams, T. G. (2005). Up in smoke: Rebuilding after an IT disaster. Journal of Cases on Information Technology, 7(2), 31-49.
16. Sandhu, R., & Samarati, P. (1996). Authentication, access control, and audit. ACM Computing Surveys, 28(1), 241-243.
17. Schneier, B., & Kelsey, J. (1999). Secure audit logs to support computer forensics. ACM Transactions on Information and System Security, 2(2), 159-176.
18. Schultz, E. (2003). IDS products lead sales surge. Computers & Security, 22(8), 660.
19. Sridhar, V., & Bhasker, B. (2003). Managing information security on a shoestring budget. Annals of Cases on Information Technology, 5(1), 151-167.
20. United States Computer Emergency Readiness Team (US-CERT), (n.d.). Retrieved April 28, 2006, from http://www.us-cert.gov/
21. U.S. Department of Justice. (2002). Fraud and related activity in connection with computers. Retrieved April 28, 2006, from http://www.usdoj.gov/ criminal/cybercrime/1030_new.html
22. Wang, B., & Paper, D. (2005). A case of an IT-enabled organizational change intervention: The missing pieces. Journal of Cases on Information Technology, 7(1), 34-52.
23. Zhang, D. J., Zhao, L., Zhou, L., & Nunamaker, J. F. (2004). Can e-learning replace classroom learning? Communications of the ACM, 47(5), 75-79.