Publication:
Iran’s Cyber Capabilities and Assessing Security Standards for Popular Iranian Websites

Простая страница элемента
creativeworkseries.issn 2074-7128 (Print)
dc.contributor.authorAghbolagh, M. A.
dc.contributor.authorTrufanov, A. I.
dc.date.accessioned2023-09-06T13:36:40Z
dc.date.available2023-09-06T13:36:40Z
dc.date.issued2023
dc.description.abstractThe security of online users depends on various factors. One of the most important factors are to follow security standards and use of reliable and updated technology as well as the standards and technologies that have been created in recent years specifically to increase data and communication security on websites and various internet services. However numerous studies show that the current state of global web security is not desirable yet, and these standards and technologies are not being applied as fast as they are developed. Our research in CERTFA Lab on popular Iranian websites (414 websites) show that the security of Iranian websites is not different from the global level, and very few websites are fully utilizing the security standards and modern technologies. According to our investigation, only 7 websites from our assessed sites have been used CSP2 configuration, which the implementation of Cafebazaar.ir and Virgool.io have more detail and other 5 websites just use the upgrade-insecure-requests option as a default setting for CSP. In other cases, popular websites, not only did not use the CSP header, they have also forgotten to use the basic security header. Also, the results of modern standards analysis in this study (such as DNSSEC, CAA, DMARC, SPF, and Expect-CT), which is mandatory for most Internet businesses, indicate that just Eligasht.com, one of the Iranian popular websites, has properly used these standard configurations. Since these security standards and modern technologies are easy to use and cheap to implement, we could say that the reason for this undesirable situation might be the negligence of admins and service providers.
dc.identifier.citationAghbolagh, M., & Trufanov, A. (2023). Iran’s Cyber Capabilities and Assessing Security Standards for Popular Iranian Websites. Безопасность информационных технологий, 30(1), 58-69. doi:http://dx.doi.org/10.26583/bit.2023.1.04
dc.identifier.doi10.26583/bit.2023.1.04
dc.identifier.issn2074-7136
dc.identifier.issn2074-7128
dc.identifier.urihttps://openrepository.mephi.ru/handle/123456789/178
dc.identifier.urihttp://dx.doi.org/10.26583/bit.2023.1.04
dc.language.isoen
dc.publisherMEPhI
dc.relation.ispartofBezopasnost informacionnyh tehnology
dc.rightsЭто произведение доступно по лицензии Creative Commons «Attribution» («Атрибуция») 4.0 Всемирная.
dc.subjectonline security
dc.subjectsecurity standards requirements
dc.subjectwebsite security
dc.titleIran’s Cyber Capabilities and Assessing Security Standards for Popular Iranian Websites
dc.typejournal-article
dspace.entity.typePublication
oaire.citation.issue1
oaire.citation.volume30
relation.isJournalIssueOfPublication4ed64962-8cc4-4f15-9539-556eeb678159
relation.isJournalIssueOfPublication.latestForDiscovery4ed64962-8cc4-4f15-9539-556eeb678159
relation.isJournalOfPublication3b9ae913-eaeb-4d29-a767-7f6ca8a0e066
Файлы
Original bundle
Теперь показываю 1 - 1 из 1
Уменьшенное изображение
Name:
30,_№_1_(2023)_58-69[1].pdf
Size:
865.81 KB
Format:
Adobe Portable Document Format
Description:
Download
License bundle
Теперь показываю 1 - 1 из 1
Уменьшенное изображение
Name:
license.txt
Size:
3.45 KB
Format:
Item-specific license agreed to upon submission
Description:
Download
Коллекции