A Case Study: Risk Rating Methodology for E-Governance Application Security Risks

Volume 13 Issue 3 January - March 2019

Case Study

A Case Study: Risk Rating Methodology for E-Governance Application Security Risks

B. S. Kumar*, V. Sridhar**, K. R. Sudhindra***

* Scientist `F', Electronics Test and Development Centre (ETDC), Bangalore, India.

** Department of Electronics and Communication Engineering, Nitte Meenakshi Institute of Technology, Bangalore, India.

*** Department of Electronics and Communication Engineering, B M S College of Engineering, Bangalore, Karnadaka, India.

Kumar, B. S., Sridhar, Sudhindra, K. R. (2019). A Case Study: Risk Rating Methodology for E-Governance Application Security Risks, i-manager's Journal on Software Engineering, 13(3), 39-44. https://doi.org/10.26634/jse.13.3.15546

Abstract

Over the last few years, e governance in India has made rapid progress and adopted global best practices in terms of citizen-centricity, reach, connectivity, efficiency, transparency, accountability and availability. Multiple modes and ease of access, seamless connectivity and availability, user friendliness and efficiency of e-governance services have opened up avenues making e-governance services most prone to serious security risks. International trends and domestic experiences show that the e-governance services are constant targets of organized crime by hackers and prominent government sites are being probed daily. The security threat landscape for e-governance applications constantly changes and new type of vulnerabilities keeps manifesting. In today's race to build cutting-edge e-governance business solutions, web applications are being developed and deployed with lesser attention to critical and widespread security threats. The government can no longer afford to tolerate security issues with high risk values, which could hinder delivery of services and impact the confidentiality, integrity and availability of information. To mitigate with appropriate countermeasures and security controls, it is required to evaluate and estimate risks associated with e-governance applications security issues that can be exploited. In this context, this paper outlines the risk rating methodology from e-governance perspective to estimate risk associated with security issues at application layer that are critical and widespread.