Aspects Of Information Security Research Articles

User Acceptance of Blockchain Technology in Financial Applications: Information Security, Technology Awareness and Privacy Aspects

Blockchain technology is now an advanced and innovative database technology and the attributes of blockchains are apparent in a variety of industries, especially in the financial industry. One of the most famous blockchain use cases, cryptocurrencies, has provoked much interest in social network users and customers. According to CoinMarketCap’s information, the global crypto market capitalization has reached around USD 2.37 T and there are around 9975 different cryptocurrencies available in the market. Despite the fact that academia and industry have paid much attention towards the blockchain direction, there is not much research on the factors that influence customer acceptability. This paper studies blockchains from a different angle, probing the factors prompting customers to use financial applications that utilize blockchain technology. We established the model and sorted the individual factors of perceived information security, technology awareness and privacy and found that users’ acceptance is significantly affected by information security and technology awareness, while privacy does not significantly influence users. According to the findings, we provide useful insights for application developers, conclude by presenting the limitations of the research and provide guidelines for future research.

The Measuring the success of the implementation of an information and communication technology (ICT)-based management system using the Technology Acceptance Model (TAM) and the Information Security Index (KAMI) at SMK TELKOM Lampung.

The utilization of information and communication technology (ICT) in education, particularly through the implementation of ICT-based management systems in schools, has great potential to improve the quality of learning and school management. However, the success of this system's implementation is also influenced by factors such as ease of use, perceived benefits, and information security levels. This study aimed to measure the success level of the implementation of ICT-based management systems at SMK Telkom Lampung, specifically the My Learning System (MyLMS) learning platform and the Igracias school application. The study employs the Technology Acceptance Model (TAM) to measure user acceptance of the system and the Information Security Index (KAMI) to assess the maturity level of information security. The method was a survey with a quantitative approach, with a sample of 180 respondents, consisting of students, teachers, and administrative staff who actively use the system. The results show that ease of use (average score 10.74) and perceived benefits (average score 13.91) of the system positively affect user acceptance (average score 13.30), which ultimately enhances the perceived quality of the system (average score 143.67). However, the evaluation using the KAMI Index reveals that SMK Telkom Lampung needs to improve its information security management. The total score is 403 out of 645, indicating that SMK Telkom Lampung is at the "Needs Improvement" level. These results indicate that while the ICT-based management system has been well received by users, the aspect of information security still requires improvement to ensure optimal data and information protection

Design and Analysis of Cybersecurity Information Sharing Mechanism Between Computer Security Incident Response Teams (CSIRT) in Indonesia on Blockchain Technology Through Hyperledger Composer and Interplanetary File System (IPFS)

Sharing cybersecurity information among the Computer Security Incident Response Team (CSIRT) is a crucial step in enhancing organizational cybersecurity. However, a primary challenge faced is the lack of trust among users regarding the confidentiality, integrity, and availability of shared information. This study proposes a new approach by designing a mechanism for sharing cybersecurity information among CSIRTs in Indonesia on blockchain technology using Hyperledger Composer. This approach offers an innovative solution by leveraging the advantages of blockchain technology. Through this approach, cybersecurity information can be shared in a decentralized manner, overcoming the weaknesses of centralized systems, and enhancing overall information security. Another advantage of blockchain technology is its high performance and scalability, enabling increased speed, and user capacity in the process of sharing information. By implementing a blockchain-based mechanism for sharing cybersecurity information, this research aims to ensure crucial aspects of information security, namely confidentiality, integrity, and availability. The contribution of this study is not only in enhancing organizational cybersecurity but also in providing an innovative solution to practical challenges in sharing cybersecurity information among CSIRTs.

Data Immunity in Near Field Radio Frequency Communication Systems—NFC as an Aspect of Electromagnetic Information Security

Data Immunity in Near Field Radio Frequency Communication Systems—NFC as an Aspect of Electromagnetic Information Security

COMPARISON OF MESSAGE PASSING SYSTEMS IN CONTEXT OF ADAPTIVE LOGGING METHOD

Computer software is an important part of technological progress. As it becomes more and more complex and sophisticated, so does the need to protect it. Apart from typical information security aspects of integrity, availability and confidentiality, the scale and complexity of modern computer systems require a high level of control and observability. The main goal of this research is to build upon the foundations laid by the general idea of an adaptive logging method and introduce the next iteration of its design in the form of an appropriate message passing system to be used to propagate required changes to corresponding implementation in an effective and performant manner. Four different message passing system models are introduced, based on different technologies such as RabbitMQ message broker, communication channels in PostgreSQL database management system, general web server architecture and Linux-based process signaling interface. For each of those an overview description and graphical model is presented. Finally, the resulting comparison is conducted, comparing aspects such as reliance on third-party software, communication medium, error surface increase and authentication related considerations. As a result, the design based on process signaling approach is determined to be the most suitable for adaptive logging method, as it does not introduce any third-party software (and as such affects error surface in a somewhat negligible manner), binds directly to an observed application, is built using low level concepts that should be present in multiple different platforms and programming languages and should be able to reuse authentication logic that is already used when accessing computational machine where observed program is executed.

Problems of information security in the management of electronic waste

Subject. The study is devoted to data security issues in the disposal of electronic waste. Objectives. The focus is on the analysis of problems and world experience in ensuring user information security in the organization of electronic waste management system, according to the circular economy principles. Methods. The study rests on the content analysis of regulatory and legal documentation on electronic waste management. The information base includes standards of the Institute of Scrap Recycling Industries (ISRI), the Basel Action Network, Sustainable Electronics Recycling International (SERI), European legislation on Waste Electrical and Electronic Equipment (WEEE), and Russian standards for waste management. Results. So far, Russia has no regulations on data security issues when handling out-of-service electronic equipment, according to the circular economy principles. We propose to supplement Russian regulatory documents with aspects of information security, which will have positive effects on the confidentiality of data available on electronic media when recycling electronic waste. Conclusions. It is required to introduce strict State regulation of processes of handling information contained on electronic media. This will enhance the credibility of e-waste recycling companies with regard to information security.

Outlier detection for keystroke biometric user authentication.

User authentication is a fundamental aspect of information security, requiring robust measures against identity fraud and data breaches. In the domain of keystroke dynamics research, a significant challenge lies in the reliance on imposter datasets, particularly evident in real-world scenarios where obtaining authentic imposter data is exceedingly difficult. This article presents a novel approach to keystroke dynamics-based authentication, utilizing unsupervised outlier detection techniques, notably exemplified by the histogram-based outlier score (HBOS), eliminating the necessity for imposter samples. A comprehensive evaluation, comparing HBOS with 15 alternative outlier detection methods, highlights its superior performance. This departure from traditional dependence on imposter datasets signifies a substantial advancement in keystroke dynamics research. Key innovations include the introduction of an alternative outlier detection paradigm with HBOS, increased practical applicability by reducing reliance on extensive imposter data, resolution of real-world challenges in simulating fraudulent keystrokes, and addressing critical gaps in existing authentication methodologies. Rigorous testing on Carnegie Mellon University's (CMU) keystroke biometrics dataset validates the effectiveness of the proposed approach, yielding an impressive equal error rate (EER) of 5.97%, a notable area under the ROC curve of 97.79%, and a robust accuracy (ACC) of 89.23%. This article represents a significant advancement in keystroke dynamics-based authentication, offering a reliable and efficient solution characterized by substantial improvements in accuracy and practical applicability.

The concept of developing security components based on the development of the company's logistics business processes

In the context of the ongoing digital revolution, the development of generative design, machine learning, the active use of 3D marketing in advertising, 3D printing technologies, new principles of logistics and computer-aided design systems, the business processes of the enterprise are radically changing. There is a need to deepen the orientation of business processes to the customer, and enterprises need to solve the problem of ensuring low cost of both the business processes themselves and the security components supporting them. Due to the complexity of the integration of information systems, it is necessary to create in advance a concept for the development of security components based on the development of the company's logistics business processes. Obviously, it is necessary not only to take into account the aspects of information security (IS) when improving business processes, but to consider the problem comprehensively, that is, to develop both a concept and a methodology for developing, implementing business processes, their development, and estimating the cost of IS components. It is necessary to ensure the flexibility and adaptation of the implemented business processes of the enterprise.

Information Security for An Information Society for Accessing Secured Information: A PRISMA Based Systematic Review

This study employs the PRISMA methodology to conduct a comprehensive review, aiming to examine the current state of information security in an information society. The study specifically focuses on the methods used to access protected information. The review consolidates findings from multiple scholarly sources, emphasizing common dangers, measures for mitigation, and optimal approaches to protecting digital information. The evaluation procedure involved conducting an extensive search across various academic databases such as Science Direct, Scopus, Web of Sciences, PubMed, and DOAJ, where a total of 105 documents were found, comprising 85 papers and 20 reports. The findings highlight the complex and diverse aspects of information security, emphasizing the need for a comprehensive approach that incorporates technological, organizational, and human components. The analysis demonstrates that although there have been notable advancements in the creation of advanced security measures, there are still obstacles to overcome, such as the emergence of new threats and the necessity for ongoing adjustment. The paper also highlights deficiencies in existing research, proposing areas for future exploration to strengthen the security position of information systems in a progressively networked world. This systematic review enhances existing knowledge by presenting a comprehensive overview of the current state of information security. It provides valuable insights for researchers, practitioners, and policymakers who are committed to safeguarding sensitive information in a society driven by information.

Perspektif Mahasiswa Terhadap Peningkatan Ketahanan Nasional Melalui Pembelian Alusista Bekas

State resilience has become a topic that is widely discussed and the state continues to try to maintain it through many strategic steps, regulations that strengthen its position and the procurement of new and used military equipment that further strengthens the state's defense position. Purchasing used defense equipment has become an increasingly attractive strategy for the Ministry of Defense to strengthen its military strength by taking advantage of its limited budget. This research aims to analyze the process of purchasing used defense equipment by the Ministry of Defense, as well as the factors that influence purchasing decisions. A case study approach is used by exploring data from various sources. The research results show that factors such as the condition of used defense equipment, reliability, military operational needs, as well as financial and information security aspects play an important role in the procurement process. Apart from that, transparency, accountability and compliance with regulations are also a focus in this process. The implication of this research is the importance of targeted policies to increase effectiveness and efficiency.

Target localization image encryption of wind turbines based on DNA strand replacement rule

The continuous development of the industrial internet of things has raised increasingly high requirements for the secure storage and transmission of information. Ensuring that image information avoids malicious attacks and tampering during transmission has become an important aspect of information security. In response to the security requirements for drone-captured image transmission during wind turbine inspection, this paper proposes a new target localization encryption scheme based on DNA strand replacement rules. In traditional methods using DNA encryption, the DNA computing rules used include DNA addition, DNA subtraction, and DNA XOR operations. These operations are relatively simple and have weak biological relevance, making them vulnerable to attack and decryption. To address this issue, this article introduces the principle of DNA strand replacement reaction and proposes a DNA strand displacement reaction rule. The rule has stronger biological relevance and more complex operational rule than traditional DNA algorithms, thus providing stronger security for encrypted images. Experimental results indicate that this encryption algorithm effectively enhances the information security of ciphertext images and can withstand brute-force attacks and various statistical attacks.

Security and protection of information in electronic document management systems: improving the level of cyber defense

The article describes the main threats to electronic document management systems. The importance of the electronic document management system for organizational processes of enterprises and information security is considered. Particular importance is the use of electronic document management systems for the efficiency and speed of performing organizational functions. The article analyzes the aspects of information security when using electronic document management systems in practice and the effectiveness of implementation to ensure information security in comparison with traditional paper document management. The importance of the Information Security Strategy until 2025, approved by the Cabinet of Ministers of Ukraine, is emphasized. Attention is focused on the advantages of using the stages of implementing the cybersecurity model in electronic document management systems to protect information and data. It also discusses best practices for secure document storage and sharing that promote an integrated approach to various aspects of document management security to protect confidential information from potential cyber threats. The criteria for choosing a high-quality electronic document management system, for ensuring information security and countering cyber attacks are quite important. In particular, attention is focused on modern antivirus technologies that allow detecting almost all known viruses by comparing the code of a suspicious file with samples stored in the antivirus database. Therefore, for organizations seeking to use the latest technologies, information security is essential in electronic document management systems to increase the level of cybersecurity.

Гуманитарные аспекты информационной безопасности в контексте жизни современного общества

в эпоху глобальной цифровизации информационные технологии оказывают значительное влияние на все аспекты жизни современного общества. Проникновение современных технологий в повседневную жизнь открывает множество новых возможностей, однако в то же время порождает ряд вызовов, в частности, в области информационной безопасности. Актуальность обеспечения информационной безопасности на гуманитарном уровне обусловлена растущим вниманием к защите личных данных, свободе информации и этическим вопросам в информационной сфере. В современных условиях информатизации общества, сохранение конфиденциальности и защита от информационных угроз становятся важными социальными и гуманитарными задачами. Целью исследования является характеристика гуманитарных аспектов информационной безопасности, выявление и оценка их влияния на социальные процессы и повседневную жизнь человека. Методы исследования: обобщение, дедукция, изучение и систематизация научных работ, публикаций и исследований, посвященных информационной безопасности и ее гуманитарным аспектам. Результаты: Научная новизна исследования заключается в комплексном подходе к раскрытию гуманитарных аспектов информационной безопасности и определению направлений интеграции гуманитарных принципов в стратегии обеспечения информационной безопасности. В рамках исследования рассматривается роль информационной безопасности в обеспечении защиты личной жизни, ее объективные и субъективные характеристики и взаимосвязь уровней. in the era of global digitalization, information technologies have a significant impact on all aspects of life in modern society. The penetration of modern technologies into everyday life opens up many new opportunities, but at the same time gives rise to a number of challenges, in particular in the field of information security. The relevance of ensuring information security at the humanitarian level is due to the growing attention to the protection of personal data, freedom of information and ethical issues in the information sphere. In modern conditions of informatization of society, maintaining confidentiality and protecting against information threats are becoming important social and humanitarian tasks. The purpose of the study is to characterize the humanitarian aspects of information security, identify and assess their impact on social processes and everyday human life. Research methods: generalization, deduction, study and systematization of scientific works, publications and research on information security and its humanitarian aspects. Results: The scientific novelty of the study lies in an integrated approach to revealing the humanitarian aspects of information security and identifying directions for integrating humanitarian principles into information security strategies. The study examines the role of information security in ensuring the protection of personal life, its objective and subjective characteristics and the relationship of levels.

Peranan Sistem Informasi Komputer Dalam Evolusi Bisnis Ke Era Digital 5.0

The development of information technology has significantly impacted the evolution of business into the digital era 5.0. In this context, the role of Computer Information Systems (CIS) becomes crucial in facing the challenges and opportunities that arise. This study aims to explore the role of CIS in Business 5.0, focusing on technology integration and business processes, analytical capabilities and data-driven decision-making, automation and operational efficiency, information security and compliance, as well as accountability and transparency. The research methodology involved literature search from academic databases and scientific journals using relevant keywords such as "digital transformation," "Business 5.0," "Computer Information Systems," and "technology integration." Selected information sources were then filtered based on inclusion and exclusion criteria, such as relevance, source credibility, and publication year. The results of literature analysis indicate that technology integration and business process serve as the foundation for the role of CIS in Business 5.0. Analytical capabilities and data-driven decision-making, along with automation and operational efficiency, also significantly contribute to increased productivity and organizational innovation. Additionally, aspects of information security and compliance, together with accountability and transparency, are key to building trust among stakeholders. The discussion of the results highlights the importance of understanding and implementing these concepts in the context of Business 5.0. By considering technology integration and business processes, analytical capabilities and data-driven decision-making, automation and operational efficiency, information security and compliance, as well as accountability and transparency, companies can optimize the role of CIS in transforming their businesses into the digital era 5.0, enhancing competitiveness, and achieving long-term success.

A COMPARATIVE REVIEW OF DATA ENCRYPTION METHODS IN THE USA AND EUROPE

Data encryption is a critical aspect of modern information security, and understanding the approaches taken by different regions is vital for a comprehensive analysis. In the United States and Europe, data encryption methods vary in implementation, legal frameworks, and overall priorities. In the United States, encryption methods are primarily governed by a combination of federal laws and industry standards. The National Institute of Standards and Technology (NIST) plays a central role in recommending cryptographic standards, while the Department of Commerce oversees export controls on encryption technology. The focus in the U.S. is on balancing national security needs with individual privacy rights. The tension between law enforcement's desire for access to encrypted data for criminal investigations and the right to privacy has sparked debates and legal battles. On the other hand, Europe has taken a more privacy-centric approach to data protection. The General Data Protection Regulation (GDPR) is a cornerstone in the European Union's efforts to safeguard individual privacy rights. GDPR mandates the use of encryption to protect personal data, and failure to implement adequate measures can result in hefty fines. European countries also emphasize the importance of end-to-end encryption in communication services to ensure confidentiality. Both regions prioritize encryption, but their approaches reflect different values and legal philosophies. The U.S. tends to navigate a delicate balance between national security and individual rights, while Europe places a stronger emphasis on the protection of personal data as a fundamental right. In terms of technological implementation, the encryption algorithms adopted in both regions are often aligned with global standards. Advanced Encryption Standard (AES) is widely accepted and implemented in various sectors. However, the choice of key management and the level of regulatory oversight differ, contributing to the nuanced landscape of data protection. In conclusion, a comparative review of data encryption methods in the USA and Europe reveals the complex interplay between security, privacy, and legal frameworks. Understanding these differences is crucial for multinational organizations and individuals navigating the intricate landscape of global data protection.
 Keywords: Data, Encryption, USA, Europe, Review.

Employees’ information security awareness (ISA) in public organisations: insights from cross-cultural studies in Sweden, France, and Tunisia

ABSTRACT The dominance of national culture in organisational environments has been widely acknowledged. This study aims to explore the impact of national culture on information security awareness by examining cultural characteristics in the public sector. Drawing on Hofstede's model, a literature review was conducted to analyze existing knowledge and identify cultural traits in selected countries. Empirical data were collected through semi-structured interviews conducted in Sweden, France, and Tunisia. The data were analyzed using the Human Aspects of Information Security (HAIS) model, revealing distinct patterns and emphasising the role of culture in shaping behaviours. The findings underscore the importance of involving Swedish employees in the policy design process to effectively enhance information security awareness. For French employees, it was found that learning from past experiences and respecting hierarchical structures are crucial factors in raising awareness. Conversely, in Tunisia, information security initiatives should take into account the social and relational aspects to promote awareness effectively. These insights provide valuable guidance to managers in multinational organisations, enabling them to comprehend the underlying forces and dynamics in countries with similar characteristics.

Opportunities for developing the information security capability at hazardous plants given current challenges

Aim: One of the biggest challenges people face today is the development of an effective and efficient defence capability against cyber attacks. Nowadays, this is not only an expectation at the public level, but also a real need at the corporate and private user level. In this study, the author primarily wishes to draw attention to the global trends of new types of threats in the 21st century, the most vulnerable sectors, as well as to the development possibilities of the cyber security capabilities of domestic hazardous plants.Methodology: The author has conducted a qualitative research method using primary and secondary data to identify current trends and attack vectors of threats in cyberspace at global and regional levels. In addition, the author has also conducted empirical research using primary data to determine the development possibilities of the management/safety management systems of plants dealing with hazardous substances, as well as to build the resilience of the electronic information systems of these plants against cyber threats.Findings: The number of cyber-attacks have continued to grow over the last few decades, and industrial companies have become the main targets of these new types of attacks. In order for Hungary to develop an effective defence capability, especially in the case of industrial actors, it is important to create the cyber defence capability of plants dealing with hazardous materials under the supervision of the disaster management, industrial safety authority.Value: Taking stock of the possibilities of developing the security management system of domestic hazardous materials plants to protect against 21st century threats. This scientific work intends to provide more detailed information on the addition and feasibility of the management system with information security aspects.

АНАЛІЗ СВІТОВОГО ДОСВІДУ ФОРМУВАННЯ СИСТЕМИ ІНФОРМАЦІЙНОЇ БЕЗПЕКИ В КОНТЕКСТІ ПУБЛІЧНОГО УПРАВЛІННЯ

The article is devoted to the issues of ensuring the functions of public information security management in the context of modern challenges. Informatization processes have covered all spheres of human life, which has led to the emergence of new threats. In today’s world, where electronic technologies are becoming a necessity to ensure the effectiveness of public administration functions, the issue of information security is a key and urgent one. The problems of information security are currently being actualized by a significant increase in the role of accumulation, processing and dissemination of information, in particular, in making strategic, military, political and economic decisions. In this regard, the question of how well the modern public administration system is able to respond to the challenges posed by global digitalization is becoming relevant. The purpose of the paper is to study the peculiarities of ensuring information security in public administration, to analyze current threats and the experience of other countries in overcoming them. In analyzing certain aspects of information security, the paper uses methods of description and classification, as well as methods of studying causal relationships, in particular, the combination of similarities and differences. The article examines the trends in the development of public information security management as a key mechanism for ensuring the security of the State. The author identifies the issue of information security as an element of the State defense policy, which is of particular relevance in the context of full-scale military aggression. The concept of public management of information security can be defined as the process of managing measures aimed at protecting confidential information from unauthorized access, use, disclosure and destruction at the level of the State, organizations or citizens. This process may include the creation of appropriate legislation, the establishment of appropriate control and supervisory bodies, the conduct of information security education and training, and the installation of appropriate security technologies and systems to protect confidential information. The place and role of the system of regulation of information support of management processes at the state level are clarified. Sufficient attention is paid to the peculiarities of ensuring information security in public administration through the analysis of modern information threats. Considering the world experience, the author identifies the key success factors and the problems faced by public administration in overcoming them. We consider it expedient to create national analysis and response centers that will monitor, analyze and respond promptly to cyber threats and improve cybersecurity measures for critical facilities.

Analiza socioloških aspekata informacione bezbednosti primenom HAIS-Q modela

The aim of the paper is to research the sociological aspects of information security through the HAIS-Q model, at the Faculty of Engineering Management. The research was conducted anonymously, within a time frame of four months, on a sample of 179 respondents. The HAIS-Q model is built from seven focus groups, which pervade the variables of knowledge, attitudes and behaviours, while the subject research is focused on the focus area "use of the Internet". By analyzing the variables with the lowest scores in one of the seven focus areas of this model, gaps in information security awareness among employees are explored. The paper highlights the implications of these deficiencies for organizational security and information protection, with an emphasis on the importance of improving the variables with the lowest scores. Through a comprehensive consideration of the sociological dimensions of information security, this paper contributes to a better understanding and management of this important field, emphasizing its importance in today's digital age.

Costs and benefits of business information security

The article considers the process of information security from the position of cost-benefit assessment that allows to understand economic aspects of feasibility study of measures in the field of business information protection. In the practice of Russian business, the issues of information security are focused on compliance with regulatory requirements of the legislation. This leads to the fact that business entities neglect the procedure of comprehensive assessment of measures effectiveness that should consider the costs and benefits of legal, organizational, and technical information protection implementation. At the same time, in order to meet the new conditions of technological development of society, it is necessary to revise the concept of information protection of business entities and to fix in the policy of information security of activities the approaches to risk assessment based on assets value. The study contains a description of the cost/ benefit approach to the constituent components of ensuring information security of business process. To understand the economic aspects of information security, the research focuses on business entities of the market type of economic activity (the enterprise makes profit in its activity). The composition of components of the ensuring information security process has been defined. On the example of risk management costs and benefits of information security have been considered in detail.