Dual-use open source security software in organizations-Dilemma: Help or hinder?
Journal
Computers & Security
ISSN
0167-4048
ISSN-Digital
1872-6208
Type
journal article
Date Issued
2013-11-20
Author(s)
Abstract
Dual-use technology can be used for both peaceful and harmful purposes. While the new type of anonymous, invisible and devastating security threats (malware, worms and viruses) shape contemporary warfare, organizations are challenged by the undefined risks of open source dual-use security tools. The dual-use dilemma is very important. It has not received adequate academic focus: questions such as increased or decreased risk, facilitation of security breaches, and the impact on security awareness have not been clarified or studied. This research closes existing gaps by studying the open source dual-use security software challenges that organizations should consider when using this technology. We utilize a triangulation approach with three independent data sources to conduct a detailed analysis of this phenomenon. Our study has found that the dual-use technology has both positive and negative effects on information system security. The ease of use of the dual-use security software facilitates security breaches and enterprises are using vulnerable open source security libraries and frameworks to develop their own in-house applications. On a positive note, open source dual-use security software is used as a powerful defense tool against attackers. Our study also found that security awareness is the key to maintaining the right level of information security risk in the dual-use context. Dual-use can also be of a great help to organizations in leveraging their information system security.
Language
English
Keywords
Dual-use technology
Open source security tools
Information security
Organizational security
OSS
Trust
HSG Classification
contribution to scientific community
Refereed
Yes
Publisher
Elsevier
Publisher place
Kidlington, Oxford
Volume
39
Number
B
Start page
386
End page
395
Pages
10
Subject(s)
Division(s)
Eprints ID
244725