Department of Software and Information Systems Engineering, Ben-Gurion University of the Negev, Be'er Sheva 8410501, Israel.
Sensors (Basel). 2023 Apr 15;23(8):4018. doi: 10.3390/s23084018.
During the COVID-19 pandemic, most organizations were forced to implement a work-from-home policy, and in many cases, employees have not been expected to return to the office on a full-time basis. This sudden shift in the work culture was accompanied by an increase in the number of information security-related threats which organizations were unprepared for. The ability to effectively address these threats relies on a comprehensive threat analysis and risk assessment and the creation of relevant asset and threat taxonomies for the new culture. In response to this need, we built the required taxonomies and performed a thorough analysis of the threats associated with this new work culture. In this paper, we present our taxonomies and the results of our analysis. We also examine the impact of each threat, indicate when it is expected to occur, describe the various prevention methods available commercially or proposed in academic research, and present specific use cases.
在 COVID-19 大流行期间，大多数组织被迫实施在家办公政策，在许多情况下，不期望员工全职返回办公室。这种工作文化的突然转变伴随着信息安全相关威胁数量的增加，而组织对此毫无准备。有效应对这些威胁的能力依赖于全面的威胁分析和风险评估，以及为新文化创建相关的资产和威胁分类法。为了应对这一需求，我们构建了所需的分类法，并对与这种新工作文化相关的威胁进行了彻底分析。在本文中，我们展示了我们的分类法和分析结果。我们还研究了每种威胁的影响，指出了预计何时会发生威胁，描述了商业上可用的或学术研究中提出的各种预防方法，并提供了具体的用例。
