Efficient diagnostic process for technical vulnerability

Abstract

With the development of IT came advances and expansions in major information and communications infrastructure, which have in turn resulted in studies being continuously conducted to analyze the administrative and physical vulnerabilities of the operating institutions. However, such institutions are exposed to the threat of cyber attacks because these studies often exclude technical aspects due to technological difficulty. Furthermore, web services limit their security checks to certain vendors and are therefore unable to identify the exact level of security in place. This paper demonstrates that these limitations, when performing a diagnostic test for technical vulnerability, can impact security levels. Therefore, this paper proposes a process that considers several environmental factors when checking for technical vulnerability in order to minimize the impact on security levels.