Outstanding Paper - Emerald

info
Outstanding Paper
Why there have been so few spectrum trades in
the UK: lessons for Europe
Rajen Akalu
Economics of infrastructures,
Delft University of Technology, Delft, The Netherlands
Abstract
Purpose – This paper seeks to define a coherent management
preference function for determining the conditions when the market
can be effectively used in the management of spectrum based on
abduction and volitional pragmatism.
Design/methodology/approach – Volitional pragmatism based on
the logic of abduction is used to provide an explanation for real
world empirical observation of few spectrum trades in the UK. This
is generalized for application with wider context of European
frequency management.
Findings – There has been a considerable regulatory effort directed
toward spectrum trading in the EU. The UK experience with trading
is clearly not what was expected. It was suggested that this is a
result of an analytical approach based on deductive validationism
subject to ceteris paribus assumptions. This approach does have
merit but its application is over extended. This is due in large part to
institutional under specification of what constitutes the market and
the nature of the transaction taking place.
Research limitations/implications – The emphasis in this paper is
on the explanation of real world facts rather than normative
prescription based on deductive validationism. Such an approach
though fallible (all facts cannot be taken into account) is no less
valuable in the process of regulatory decision making than
deductive validationism.
Practical implications – This paper provides a more coherent
explanation of spectrum development and the spectrum
management reform process.
Originality/value – A set of conditions are provided for determining
when the market can be used in the management of spectrum. This
makes explicit the intended operation of the market as well as its
limitations.
Keywords Wireless, Economics, Trade, United Kingdom, Europe
www.emeraldinsight.com/10.1108/14636691011015349
info
Volume 12 Number 1, 2010, pp. 10-17
Editor: Colin Blackman
25
Information
Management
& Computer
Security
The Donn B. Parker Award
This award is named after Donn B. Parker, who, in the
early 1970s, through his research and many publications
introduced business management to the concept of
computer security. His coining of the term ‘‘computer
abuse’’ helped to draw attention to this important
business function. Donn Parker is now heavily involved in
the International Information Integrity Institute, the
so-called I4 Research group at SRI International.
Outstanding Paper
Expanding topological vulnerability analysis to
intrusion detection through the incident
response intelligence system
Dimitrios Patsos
Sarandis Mitropoulos
Christos Douligeris
Department of Informatics, University of Piraeus,
Piraeus, Greece
Abstract
Purpose – The paper proposes looking at the automation of the
incident response (IR) process, through formal, systematic and
standardized methods for collection, normalization and correlation
of security data (i.e. vulnerability, exploit and intrusion detection
information).
Design/methodology/approach – The paper proposes the
incident response intelligence system (IRIS) that models the context
of discovered vulnerabilities, calculates their significance, finds and
analyzes potential exploit code and defines the necessary intrusion
detection signatures that combat possible attacks, using
standardized techniques. It presents the IRIS architecture and
operations, as well as the implementation issues.
Findings – The paper presents detailed evaluation results obtained
from real-world application scenarios, including a survey of the
users’ experience, to highlight IRIS contribution in the area of IR.
Originality/value – The paper introduces the IRIS, a system that
provides detailed security information during the entire lifecycle of a
security incident, facilitates decision support through the provision
of possible attack and response paths, while deciding on the
significance and magnitude of an attack with a standardized
method.
Keywords Computer crime, Data security, Risk management
www.emeraldinsight.com/10.1108/09685221011079207
IMCS
Volume 18 Number 4, 2010, pp. 291-309
Editor: Steven M. Furnell