Abstract
| Original language | English |
|---|---|
| Title of host publication | Proceedings of the Twelfth International Symposium on Human Aspects of Information Security & Assurance (HAISA 2018) |
| Editors | Nathan Clarke, Steven Furnell |
| Place of Publication | Plymouth |
| Publisher | Centre for Security, Communications & Network Research, University of Plymouth |
| Pages | 147-157 |
| Number of pages | 11 |
| ISBN (Print) | 9780244402549 |
| Publication status | Published - 9 Sep 2018 |
| Event | 12th International Symposium on Human Aspects of Information Security & Assurance - Dundee Business School, Abertay University, Dundee, United Kingdom Duration: 29 Aug 2018 → 31 Aug 2018 Conference number: 12 http://www.haisa.org/?page=home |
Conference
| Conference | 12th International Symposium on Human Aspects of Information Security & Assurance |
|---|---|
| Abbreviated title | HAISA 2018 |
| Country | United Kingdom |
| City | Dundee |
| Period | 29/08/18 → 31/08/18 |
| Internet address |
Fingerprint
Cite this
}
POINTER : a GDPR-compliant framework for human pentesting (for SMEs). / Archibald, Jacqueline; Renaud, Karen.
Proceedings of the Twelfth International Symposium on Human Aspects of Information Security & Assurance (HAISA 2018). ed. / Nathan Clarke; Steven Furnell. Plymouth : Centre for Security, Communications & Network Research, University of Plymouth, 2018. p. 147-157.Research output: Chapter in Book/Report/Conference proceeding › Conference contribution
TY - GEN
T1 - POINTER
T2 - a GDPR-compliant framework for human pentesting (for SMEs)
AU - Archibald, Jacqueline
AU - Renaud, Karen
PY - 2018/9/9
Y1 - 2018/9/9
N2 - Penetration tests have become a valuable tool in any organisation’s arsenal, in terms of detecting vulnerabilities in their technical defences. Many organisations now also “penetration test” their employees, assessing their resilience and ability to repel human-targeted attacks. There are two problems with current frameworks: (1) few of these have been developed with SMEs in mind, and (2) many deploy spear phishing, thereby invading employee privacy, which could be illegal under the new European General Data Protection Regulation (GDPR) legislation. We therefore propose the PoinTER (Prepare TEst Remediate) Human Pentesting Framework. We subjected this framework to expert review and present it to open a discourse on the issue of formulating a GDPR- compliant Privacy-Respecting Employee Pentest for SMEs.
AB - Penetration tests have become a valuable tool in any organisation’s arsenal, in terms of detecting vulnerabilities in their technical defences. Many organisations now also “penetration test” their employees, assessing their resilience and ability to repel human-targeted attacks. There are two problems with current frameworks: (1) few of these have been developed with SMEs in mind, and (2) many deploy spear phishing, thereby invading employee privacy, which could be illegal under the new European General Data Protection Regulation (GDPR) legislation. We therefore propose the PoinTER (Prepare TEst Remediate) Human Pentesting Framework. We subjected this framework to expert review and present it to open a discourse on the issue of formulating a GDPR- compliant Privacy-Respecting Employee Pentest for SMEs.
M3 - Conference contribution
SN - 9780244402549
SP - 147
EP - 157
BT - Proceedings of the Twelfth International Symposium on Human Aspects of Information Security & Assurance (HAISA 2018)
A2 - Clarke, Nathan
A2 - Furnell, Steven
PB - Centre for Security, Communications & Network Research, University of Plymouth
CY - Plymouth
ER -