ISSRC Information Systems Security Research Center. University of Oulu, Department of Information Processing Science T.Wiander, M.

Transkriptio

1 ISSRC Information Systems Security Research Center University of Oulu, Department of Information Processing Science T.Wiander, M.Siponen

2 TIMO WIANDER M.Sc (IS), B.Sc (Marketing) Project Manager ISSRC ISO/IEC 9001 Lead Auditor Practical experience 18+ years ISO/IEC Lead Auditor Practical experience 14+ years Contract Auditor (Department of Defence) CISA Country representative in IAEA TM-group (Security) on behalf of STUK

3 Agenda Introduction/participants ISSRC Research Joint R&D activities Discussion Wrap-up Future actions

4 ISSRC Key Resources Professor Mikko Siponen; PhD, DSc Project Manager Timo Wiander, MSc Senior Researcher Petri Puhakainen, PhD Senior Researcher Seppo Pahnila, PhD Project Manager Heli Tervo, MSc Project Manager Mari Karjalainen, MA Doctoral students from Finland, USA, China, India GSU, KTH, CBS, UT etc world class research partners on ISS

5 Sponsors Our sponsors include: STUK (Radiation and Nuclear Safety Authority) Fortum Corp. TVO (Teollisuuden Voima Oyj) Outokumpu Oyj Nokia Corp. Elisa Corp. Elektrobit Corp. F-Secure Corp Itella SOK (Suomen Osuuskauppojen keskuskunta) City of Oulu

6 National nominations Tekes has listed examples of top research groups in Finland (Computer and Information Sciences & Engineering). These Finnish research groups can host NSF Graduate Research Fellows. The groups are: Information Systems Security Research Center, University of Oulu Centre for Wireless Communications, University of Oulu Helsinki Institute for Information Technology HIIT More information on Tekes website.

7 Research agenda 1/2 Development of methods for organization specific information security policies Integrating security to existing IS or SE development processes IS education and training (compliance view)

8 Research agenda 2/2 ISMT-TOOL: Factors explaining employees compliance with information security policies Factors explaining employees behavior regarding social engineering attacks ROSI Return on Security Investments

9 Past Research projects FUSION 1 (Effective Information Security in Organisations 1): euro for from the Finnish Funding Agency for Technology and Innovation (TEKES), Itella Corp., City of Oulu, Suomen Osuuskauppojen Keskuskunta (SOK), Samlink Ltd, Avain Technologies Oy, and DNA Ltd. FUSION 2 (Effective Information Security in Organisations 2): euro for from the Finnish Funding Agency for Technology and Innovation (TEKES), Itella Corp., City of Oulu, Suomen Osuuskauppojen Keskuskunta (SOK), Samlink Ltd, Cargotec Corp., and DNA Ltd.

10 Research projects RIESCA (Rescuing of Intelligence and Electronic Security Core Applications): euro for , from the Finnish Funding Agency for Technology and Innovation (TEKES), Crisis Management Centre (CMC) Finland, European Aeronautic Defence and Space Company (EADS), Finavia, Insta Group Oy, Ministry of Defence, Navicre Oy, Portalify Ltd, and Softera Oy. SEPEDA (Social Engineering and Information Security Pedagogy): euro for , from the European Regional Development Fund (ERDF), Wärtsilä Corp., Nordic Protection Oy, and Etelä-Savon Tietohallinto Oy.

11 Research projects Improving Employees Compliance with IS security Policies: New Model euro for years , from the Academy of Finland. RoleID (Role-centric identity, ITEA2) euro for years from Tekes ( the Finnish Funding Agency for Technology and Innovation) SECMES euro for years from Tekes ( the Finnish Funding Agency for Technology and Innovation), participating organisations and University of Oulu

12 Research projects in preparation ADAM (Artemis) Predykot (ITEA2) IN PLANNING PHASE: Tekes/Turva, Shok, ITEA2, EU-FP7

13 JOINT RESEARCH ACTIVITIES Future research and development ideas: Current research tracks continued and deepened ISMS development using agile methods Cloud SW and security CIP and CIIP information security management viewpoint Social Media and Security

14 More information Professor Mikko Siponen, Project Manager Timo Wiander,