A comparative study of the evolution of vulnerabilities in IT systems and its relation to the new concept of cloud computing

Abstract

Purpose – The purpose of this paper is to classify and categorize the vulnerability types emerged with time as information technology (IT) systems evolved. This comparative study aims to compare the seriousness of the old well-known vulnerabilities that may still exist with lower possibility of happening with that of new technologies like cloud computing with Mobility access. Cloud computing is a new structure of IT that is becoming the main part of the new model of business environment. However, issues regarding such new hype of technology do not come without obstacles. These issues have to be addressed before full acceptability of cloud services in a globalized business environment. Businesses need to be aware of issues of concerns before joining the cloud services. This paper also highlights these issues and shows the comparison table to help businesses with appropriate decision-making when joining the cloud. Design/methodology/approach – A historical review of emerged vulnerabilities as IT systems evolved was conducted, then these vulnerabilities were categorized into eight different categories, each of which composed of multiple vulnerability types. Simple scoring techniques were used to build a “risk” analysis table where each vulnerability type was given a score based on availability of matured solution and the likeliness of happening, then in case of vulnerability type, another score was used to derive the impact of such vulnerability. The resulted weighted score can be derived from the multiplication of likeliness to happen score with that of its impact in case it did happen. Percentage of seriousness represented by the percentage of the derived weighted score of each of the vulnerabilities can then be concluded. Similar table was developed for issues related to cloud computing environment in specific. Findings – After surveying the historical background of IT systems and emerged vulnerabilities as well as reviewing the common malicious types of system vulnerabilities, this paper identifies 22 different types of vulnerability categorized in eight different categories. This comparative study explores amount of possible vulnerabilities in new technology like cloud computing services. Specific issues for cloud computing were also explored and a similar comparative study was developed on these issues. The result of the comparative study between all types of vulnerabilities since the start of IT system development till today’s technology of cloud computing, shows that the highest percentage vulnerability category was the one related to mobility access as mobile applications/systems are relatively newly emerged and do not have a matured security solution(s). Practical implications – Learning from history, one can conclude the current risk factor in dealing with new technology like cloud computing. Businesses can realize that decision to join the cloud requires thinking about the issues mentioned in this paper and identifying the most vulnerability types to try to avoid them. Originality/value – A new comparative study and new classification of vulnerabilities demonstrated with risk analysis using simple scoring technique.

The evolution of data analytics through the lens of business cases

“…Today, a demand to integrate enterprise software in an inexpensive and highly secured fashion is growing. Large IT business players are developing various complex IT solutions and global data centres to accommodate their business needs for efficient data analytics (Kouatli, 2014). Another of the most successful information technologies that made distributed data processing possible is called Cloud Computing.…”

“…MIS supported businesses with medium term planning and strategic decision-making. The network environment, at that time, was based on large and powerful computers, called mainframe computers that provided computational services and processing power (Kouatli, 2014). However, as personal computers became cheaper and more suitable for a typical office environment, organisations started to replace their mainframe terminals with personal computers linked together in a network (Padhy and Patra, 2012).…”

Users’ attitude on perceived security of mobile cloud computing: empirical evidence from SME users in China

“…Unlike desktop computers, mobile devices are exposed to intentional security attacks and have introduced new types of security risks. Proliferation of mobile devices and increased usage encouraged the hackers to target these devices and whole new types of vulnerabilities and security compromises started emerging (Kouatli, 2014). The mobile devices may be attacked by mobile malware and viruses via email, MMS attachments, internet browsing or even by Bluetooth (Gallaugher, 2021) and are vulnerable to a novel set of script-less injection attacks which can extract sensitive information through these devices (Heiderich et al, 2012).…”

Users’ attitude on perceived security of enterprise systems mobility: an empirical study

“…Ladan (2016) defines a mobile device as “any portable device that belongs to a specific user and has computing and storage capabilities”. The proliferation of mobile devices and increased usage encouraged hackers to target these devices and whole new types of vulnerabilities started emerging (Kouatli, 2014b). For example, Android malware attacks install fake apps which installs malicious code, contaminating data and causing data leakage.…”

“…However, BYOD has a risk of phone loss leading to untrusted access, data breaches, data loss or leak accompanied by new types of security threats (Yun et al , 2012; He, 2013; Miller et al , 2012). Besides, when employees leave the organization, the organization’s sensitive data may still be present on their own mobile device (Kouatli, 2014b). This may increase the chances of information misuse and malicious threats (McAfee, 2014).…”