A worldwide overview on the information security posture of online public services
Jo\~ao Marco Silva, Diogo Ribeiro, Luis Felipe Ramos, V\'itor Fonte

TL;DR
This paper evaluates the security of online public services worldwide, revealing significant gaps in security practices that pose risks to citizens and government infrastructure across all regions.
Contribution
It provides a comprehensive assessment of the security posture of government online platforms across 3068 domains globally, highlighting areas needing improvement.
Findings
Many government services lack support for secure communication protocols.
Widespread issues with digital certificate trustworthiness.
Services are exposed to known vulnerabilities.
Abstract
The availability of public services through online platforms has improved the coverage and efficiency of essential services provided to citizens worldwide. These services also promote transparency and foster citizen participation in government processes. However, the increased online presence also exposes sensitive data exchanged between citizens and service providers to a wider range of security threats. Therefore, ensuring the security and trustworthiness of online services is crucial to Electronic Government (EGOV) initiatives' success. Hence, this work assesses the security posture of online platforms hosted in 3068 governmental domain names, across all UN Member States, in three dimensions: support for secure communication protocols; the trustworthiness of their digital certificate chains; and services' exposure to known vulnerabilities. The results indicate that despite its rapid…
Peer Reviews
No public reviews on file for this paper yet. If you reviewed it on a platform where reviews are public (OpenReview, ICLR, NeurIPS, ICML), you can paste yours below so the community can read it here.
Videos
No videos yet. Explain this paper in a talk, walkthrough, or lecture? Add one.
Taxonomy
TopicsE-Government and Public Services · Internet Traffic Analysis and Secure E-voting · Privacy, Security, and Data Protection
