 |
Moving on, let's evaluate the implementation of the security headers X-Content-Type-Options, X-Frame-Options, and X-XSS-Protection. Out of 2528 institutional websites, a concerning 80.02% don't use any security headers, leaving only 19.98% of websites with security headers. When it comes to the implementation of security headers, private institutions are ahead with 16.81% of use, whereas public institutions lag behind with only 3.16% of use.
When looking at the state-level implementation, we see that the states leading in the use of security headers by public institutions are Roraima (20%), Sergipe (10.53%), and Acre (9.09%). On the other hand, the states with the lowest use of security headers are Mato Grosso (1.67%), Paraná (1.70%), and Bahia (2.18%). Unfortunately, the states of Alagoas, Amapá, Maranhão, Tocantins, and Piauí don't have any public institution that uses security headers.
Private institutions, on the other hand, lead in the use of security headers in states such as Rio Grande do Norte (32.14%), Rio Grande do Sul (24.59%), and Sergipe (21.05%). The states with the lowest use of security headers by private institutions are Mato Grosso do Sul (6.25%), Amapá (8.33%), and Mato Grosso (10%).
From these results, it's clear that the implementation of security headers is still in its early stages, especially in public institutions.
|
IEEE/ICACT20230059 Slide.17
[Big Slide]
[YouTube]