English (United Kingdom)

https://curated-unify.zendy.io/wp-json/zendy-region/v1/featured_content/oa?rat=en

https://curated-unify.zendy.io/wp-json/zendy-region/v1/highlighted_journal/

Global: Zendy Plus annual

Presents the access of premium content as premium feature

Premium Content

Presents the keyphrase highlighting as premium feature

Keyphrase Highlighting

Presents the summarisation as premium feature

Summarisation

Insights

Presents the pdf analysis as premium feature

PDF Analysis

Presents the zaia usage as premium feature

ZAIA

Global: Zendy Plus monthly

Global: Zendy Tools annual

Global: Zendy Tools monthly

Global: Zendy Free Plan

Security mandates today are often in the form of checklists and are generallyinflexible and slow to adapt to changing threats. This paper introduces analternate approach called open mandates, which mandate that vendors mustdedicate some amount of resources (e.g. system speed, energy, design cost,etc.) towards security but unlike checklist security does not prescribespecific controls that must be implemented. The goal of open mandates is toprovide flexibility to vendors in implementing security controls that they seefit while requiring all vendors to commit to a certain level of security. Inthis paper, we first demonstrate the usefulness of open security mandates: forinstance, we show that mandating 10% of resources towards security reducesdefenders losses by 8% and forestalls attackers by 10%. We then show how openmandates can be implemented in practice. Specifically, we solve the problem ofidentifying a system's overhead due to security, a key problem towards makingsuch an open mandate enforceable in practice. As examples we demonstrate ouropen mandate system -- COMMAND -- for two contemporary software hardeningtechniques and show that our methodology can predict security overheads to avery high degree of accuracy (<1% mean and median error) with low resourcerequirements. We also present experiments that quantify, in terms of dollars,how much end users value the performance lost to security, which help determinethe costs of such a program. Taken together -- the usefulness of mandates,their enforceability, and their quantifiable costs -- make the case for analternate resource-based mandate.

COMMAND: Certifiable Open Measurable Mandates