PRESS-NEWS.org - Press Release Distribution
PRESS RELEASES DISTRIBUTION

UMD researchers formulate cyber protection for supply chains

2014-10-22
(Press-News.org) College Park, Md. - The supply chain is ground zero for several recent cyber breaches. Hackers, for example, prey on vendors that have remote access to a larger company's global IT systems, software and networks.

In the 2013 Target breach, the attacker infiltrated a vulnerable link: a refrigeration system supplier connected to the retailer's IT system.

A counter-measure, via a user-ready online portal, has been developed by researchers in the Supply Chain Management Center at the University of Maryland's Robert H. Smith School of Business.

The portal is based on a new management science called "cyber supply chain risk management." It combines conventionally-separate disciplines cybersecurity, enterprise risk management and supply chain management.

Funded by the National Institute of Standards and Technology, the UMD researchers developed the formula, in part, after surveying 200 different-sized companies in various industries.

"We found that, collectively, the cyber supply chain is fragmented and stovepiped, and companies are ill-prepared to sense and respond to risks in real time," said research professor and center co-director Sandor Boyson, who collaborated on the study and portal design with faculty-colleague/center co-director Thomas Corsi, research fellow Hart Rossman and UMD-Smith CIO Holly Mann. "Just half of our subjects used an executive advisory committee such as a risk board to govern their IT-system risks."

The findings are published as "Cyber supply chain risk management: Revolutionizing the strategic control of critical IT systems" in the peer-reviewed industrial engineering journal Technovation. http://ter.ps/73f

The researchers leveraged the study into the portal. Companies can log on, cost-free, at http://cyberchain.rhsmith.umd.edu and track developing threats, plus map their IT supply chains and anonymously measure themselves against industry peers and NIST standards.

The benchmarking covers operations and allocating for cyber insurance via separate functions:

A self-evaluation exercise shows a company's structure for cyber protecting the supply chain. For example, users reply to: "To what degree is your CIO and-or IT shop isolated from, or collaborative with, your supply chain specialists who actually procure the hardware and software for your IT system?"

A special formula measures the risk levels of each company asset. The Common Vulnerability Scoring System – standard for analyzing software systems – is adapted to analyze the entire range of assets connected to the cyber supply chain.

Firms can compare corporate disclosures, exposures and vulnerabilities to those of peer companies via an insurance-risk analysis framework provided by The Willis Group. The global insurance broker's database of aggregated SEC-reported cyber attacks -- mandated for public companies – supports this tool.

The portal is scalable. About 150 various-sized companies have completed at least one or more of the aforementioned functions. Fifteen of those firms completed all three assessments and represent industries including high-tech aerospace manufacturing, telecommunication, real estate, and medical and professional services.

"The portal not only helps individual organizations understand their risk and how they can better manage it. By doing so, this bolsters the resilience and security posture of the entire ecosystem of the U.S. economy," said Jon Boyens, senior advisor for information security in NIST's computer security division. "While this ecosystem has evolved to provide a set of highly refined, cost-effective, reusable products and services that support the U.S. economy, it has also increased opportunities for adversaries and made it increasingly difficult for organizations to understand their risks."

The study is entering a fifth phase focused on federal agency-private contractor supply chains. The UMD-Smith researchers subsequently will update the portal and train managers of participating agencies and contractors to efficiently and effectively use the separate functions.

INFORMATION:



ELSE PRESS RELEASES FROM THIS DATE:

NASA sees Himalayan snow from Cyclone Hudhud's remnants

NASA sees Himalayan snow from Cyclone Hudhuds remnants
2014-10-22
Question: When does a Tropical Cyclone drop snowfall? Answer: When it makes landfall in India and the moisture moves over the Himalayas as Cyclone Hudhud has done. When NASA's Aqua satellite passed over the Himalayan Mountains, the MODIS instrument captured this image of snow on the ground on Oct. 16 at 0705 UTC (3:50 a.m. EDT). Cyclone Hudhud made landfall in eastern India and moved over the Himalayas dropping snowfall in Nepal and southwestern China. INFORMATION: Rob Gutro NASA's Goddard Space Flight Center ...

Bogus recycling bins help identify drinking patterns among low-income seniors

2014-10-21
Substance abuse is the fastest growing health concern for older adults. New findings show that drinking levels are high enough to be concerning and tend to spike around the times older adults receive their social security checks. These results may have prevention implications for social workers working with low-income seniors. Substance abuse is the fastest growing health concern for older adults, a segment of the population that is likewise rapidly increasing. Heavy drinking among older persons is associated with an increased risk of health problems like diabetes, ...

Understanding drinking behaviors among women with unwanted pregnancies

2014-10-21
Most women reduce or stop drinking alcohol upon discovery of pregnancy. A new study looks at changes in alcohol use, and factors contributing to these changes, among women with unwanted pregnancies. Findings indicate that most women with unwanted pregnancies quit or reduce alcohol consumption once they discover their pregnancies, and that some may be substituting alcohol for drugs once they discover their pregnancies. Most women reduce or stop drinking alcohol upon discovery of pregnancy. However, little information exists about changes in alcohol use, and factors ...

Bar attendance supports heavy drinking by young adults in the US-Mexico border region

2014-10-21
Mexico is a nearby destination where younger U.S. residents can legally drink heavily. However, high levels of drinking on the U.S. side are not always linked to recent travel to Mexico. New findings show that higher levels of drinking among U.S.-Mexico border youth are closely linked to their patterns of bar attendance, but not to how they think about drinking. Due to a legal drinking age of 18 years, cheaper alcohol, and marketing tactics of local bars that specifically target youth, Mexico is an attractive and geographically nearby destination where younger U.S. ...

Smoking interferes with neurocognitive recovery during abstinence from alcohol

2014-10-21
Researchers know that alcohol-dependent individuals (ALC) sustain neurocognitive impairment even after detoxification. A new study examines specific domains of cognitive recovery in conjunction with smoking status. Findings show that smoking status influenced the rate and level of neurocognitive recovery during eight months of abstinence in the ALC group. Numerous studies have shown that individuals with an alcohol use disorder perform worse than those without one on multiple neurocognitive domains of function following detoxification from alcohol, although the level ...

Hospitals converting to for-profit status show better financial health, no loss in quality

2014-10-21
Boston, MA — Switching from nonprofit to for-profit status appears to boost hospitals' financial health but does not appear to lower the quality of care they provide or reduce the proportion of poor or minority patients receiving care, according to a new study from Harvard School of Public Health (HSPH) and Brigham and Women's Hospital. "Critics of for-profit hospitals have argued that they are worse at providing good care to patients and that therefore we should limit them," said Ashish Jha, professor of health policy and management at HSPH and senior author of ...

Competition keeps health-care costs low, Stanford researchers find

2014-10-21
Medical practices in less competitive health-care markets charge more for services, according to a study conducted by researchers at the Stanford University School of Medicine and the National Bureau of Economic Research. The study, based on U.S. health-care data from 2010, provides important new information about the effects of competition on prices for office visits paid by preferred provider organizations, known more commonly as PPOs. PPOs are the most common type of health insurance plan held by privately insured people in the United States. The study will be ...

Making health services prices available linked to lower total claims payments

2014-10-21
Searching a health service pricing website before using the service was associated with lower payments for clinical services such as advanced imaging and laboratory tests, according to a study in the October 22/29 issue of JAMA. Recent changes in the health care insurance market have resulted in commercially insured patients bearing a greater proportion of their health care costs. As patients have an increasing responsibility to pay for their care, they will likely demand access to prices charged for that care. Several state-administered initiatives have increased price ...

Study examines effect of hospital switch to for-profit status

2014-10-21
Hospital conversion from nonprofit to for-profit status in the 2000s was associated with better subsequent financial health but had no relationship to the quality of care delivered, mortality rates, or the proportion of poor or minority patients receiving care, according to a study in the October 22/29 issue of JAMA. During the past decade, there has been increasing attention to the growing number of nonprofit or public hospitals that have become for-profit. These conversions are controversial. Advocates argue that for-profit organizations bring needed resources and experienced ...

More competition among physicians related to lower prices paid by private PPOs

2014-10-21
An examination of the relationship between physician competition and prices paid by private preferred provider organizations (PPOs) for common office visits finds that more competition is associated with lower prices paid to physicians in 10 large specialties, according to a study in the October 22/29 issue of JAMA. Physicians are increasingly moving away from solo and smaller practices toward larger organizations. These changes may be beneficial if larger practices with more resources are better able to coordinate care, adopt process improvements, increase use of information ...

LAST 30 PRESS RELEASES:

Being consistently physically active in adulthood linked to 30–40% lower risk of death

Nerve pain drug gabapentin linked to increased dementia, cognitive impairment risks

Children’s social care involvement common to nearly third of UK mums who died during perinatal period

‘Support, not judgement’: Study explores links between children’s social care involvement and maternal deaths

Ethnic minority and poorer children more likely to die in intensive care

Major progress in fertility preservation after treatment for cancer of the lymphatic system

Fewer complications after additional ultrasound in pregnant women who feel less fetal movement

Environmental impact of common pesticides seriously underestimated

The Milky Way could be teeming with more satellite galaxies than previously thought

New study reveals surprising reproductive secrets of a cricket-hunting parasitoid fly

Media Tip Sheet: Symposia at ESA2025

NSF CAREER Award will power UVA engineer’s research to improve drug purification

Tiny parasitoid flies show how early-life competition shapes adult success

New coating for glass promises energy-saving windows

Green spaces boost children’s cognitive skills and strengthen family well-being

Ancient trees dying faster than expected in Eastern Oregon

Study findings help hone precision of proven CVD risk tool

Most patients with advanced melanoma who received pre-surgical immunotherapy remain alive and disease free four years later

Introducing BioEmu: A generative AI Model that enables high-speed and accurate prediction of protein structural ensembles

Replacing mutated microglia with healthy microglia halts progression of genetic neurological disease in mice and humans

New research shows how tropical plants manage rival insect tenants by giving them separate ‘flats’

Condo-style living helps keep the peace inside these ant plants

Climate change action could dramatically limit rising UK heatwave deaths

Annual heat-related deaths projected to increase significantly due to climate and population change

Researchers discover new way cells protect themselves from damage

Rivers choose their path based on erosion — a discovery that could transform flood planning and restoration

New discovery reveals dopamine operates with surgical precision, not as a broad signal

New AI tool gives a helping hand to x ray diagnosis

New Leicester study reveals hidden heart risks in women with Type 2 Diabetes

Over 400 different types of nerve cell have been grown – far more than ever before

[Press-News.org] UMD researchers formulate cyber protection for supply chains