Well, after some researches I got that understanding:
we can measure the Effectiveness of the security system through analyzing its works without facing the system to any threats or attacks. And after the analysis we gonna be able to know whether the system effective or not.
Whereas,
In order to meassure the functionality of the security system, it should apply under an attack scenarios and analysis its work. And after the analysis we can know how much the functionality of the security system.
Any better illustration, and thanks in advance (:
Hi Hamada,
Though I am not well-familiar to your research interest, I can conclude something based on your own answer, but in an another way around. Your system is effective "ONLY" when it is capable to detect and stop any attacks (And the effectiveness level might be vary). Hence, your system should be functioning properly with or without any attacks (it's working right) and once it is working like a charm you can measure its Effectiveness UNDER an attack.
Read the Answer and Ponder !
Hello, Ahmed. Effectiveness and Efficiency are universal concepts. When something is effective, it means it works as it is supposed to.
Efficiency is a comparison between two or more machines, people, software or appliances. When something works "better" than another thing, we say the first is more efficient than the second. Usually a more efficient thing costs less than another or takes less time to perform the same task.
However, in different domains, different restrictions apply.
In network security (IDS/IPS) one software can be more effective than another if the first one has less false negatives (it fails to detect a real attack). We assume that it is very difficult to detect 100% of the attacks. Please note there are no logs for false negatives. The network administrator or security expert will detect the attack by other means.
Nevertheless, it can clearly be more efficient than the second if it reports less false positives (it detects a legitimate traffic as an attack).
For anti-malware software the reasoning is the same. Some software detect only what is in their knowledge base, while others use machine learning to detect malware mutations automatically. In this case, the second anti-malware is more effective than the first. In terms of efficiency, the second software may take to much CPU time and memory to run, while the first takes much less. In this context, the first software is more efficient than the second one.
If you want to test an IDS/IPS you may try the LOIC (Low Orbit Ion Cannon) software. https://sourceforge.net/projects/loic/
Do not test it against your production network. You should build a test environment instead.
To handle the these risks in the network is termed as effectiveness of network
Viruses spreading from one computer to another, Hackers trying to gain access to sensitive company data, Files stolen internally by an unauthorized person, Weak access points like mobile devices or USB drives, Spyware meant to record keystrokes and other activity, Unauthorized access by employees to sensitive files and Inadvertent corruption of data
While
The functionality of Computer networks means to share common devices, functions, and features including servers, clients, transmission media, shared data, shared printers and other hardware and software resources, network interface card, local operating system, and the network operating system
Effectiveness of Security can be metricsized, and can also be done based on categories while functionality can be termed as descriptive roles and features of the network security.
- Badges
- Science topic
- Similar topics
- Computer Science