Aspects Of Cybersecurity Research Articles

Application of zero trust model in preventing medical errors.

Medical errors can occur in many areas of healthcare, including hospitals, clinics, and surgery centers. They can result in negative consequences for patients and their loved ones. Over the years, different methods have been used to reduce medical errors. Zero Trust is an information security model that denies access to applications and data by default. Other industries have successfully used Zero Trust Model (ZTM), and it has been shown to improve outcomes. This editorial analyzes how the ZTM can be introduced to prevent medical errors in healthcare settings. ZTM application in healthcare could potentially revolutionize patient safety by tightly controlling and monitoring access to sensitive patient data and critical systems. By enhancing security measures, the ZTM could address the paramount concerns of patient data privacy and safety in healthcare. The zero-trust approach offers a potential solution by identifying consistent causes of errors and providing viable solutions to prevent their recurrence. In the era of worsening ransomware attacks on healthcare systems, the ZTM could also have enormous implications in other cybersecurity aspects. With this manuscript, the authors advocate for the broader application of ZTM across other facets of healthcare cybersecurity.

Digital Twin-assisted anomaly detection for industrial scenarios

Industry 5.0 is the current industrial paradigm that inherits the technological diversity of its predecessor, Industry 4.0, but includes three priority goals: (i) resilience, (ii) sustainability and (iii) human-centeredness. Through these three goals, Industry 5.0 pursues a more far-reaching digital transformation in industrial ecosystems with high protection guarantees. However, the deployment of innovative information technologies for this new digital transformation also requires considering their implicit vulnerabilities and threats in order to avoid any negative impacts on the three Industry 5.0 goals, and to prioritize cybersecurity aspects so as to ensure acceptable protection levels. This paper, therefore, proposes a detection framework composed of a Digital Twin (DT) and machine learning algorithms for online protection, supporting the resilience that Industry 5.0 seeks. To validate the approach, this work includes several practical studies on a real industrial control testbed to demonstrate the feasibility and accuracy of the framework, taking into account a set of malicious perturbations in several critical sections of the system. The results highlight the effectiveness of the DT in complementing the anomaly detection processes, especially for advanced and stealthy threats.

Editorial: Human aspects of cyber security

Editorial: Human aspects of cyber security

Development of the Country’s Sustainable Cyberspace Strategy to Ensure the Country’s National Security

This article is devoted to the assessment of the country’s sustainable cyberspace strategy by comparing the cyber security strategies of those countries that are economically developed and use advanced information and communication technologies. Based on the components of the National Cyber Security Index, a calculation was made for 10 countries, which made it possible to monitor the effectiveness of their cyber strategies and identify their shortcomings. The calculation is made for the years 2018 and 2021. During this period, no significant critical changes form abnormal indicators, but it is possible to reflect a particular trend. Application of the PROMETHEE method (I and II) and the formation of net flows, determination of importance and comparison of alternatives allowed to carry out an in-depth analysis of various aspects of cyber security, such as protection measures, response to cyber threats and general resistance to cyber-attacks. It is determined that Belgium and Lithuania are the most resistant to threats from cyber-attacks and in the fight against money laundering among the countries considered, as they are rapidly developing and implementing new measures. Their indicators increased by 0.1 values in 2021 compared to 2018. According to the calculations, Great Britain is the most conservative in implementing certain strategies, and its indicators remained at the level of 0-0.2 according to various criteria for the years studied. Most countries improve their indicators by a total of 0.2 values, which reflects their development. Ukraine tends to decrease some indicators by 0.1 value; some are at the same level. The regulatory framework’s introduction rate in the cyber security field increases. It shows that Ukraine has many rapidly changing risks, but is trying to achieve flexibility in responding to them. The research findings identify each country’s cybersecurity strengths and weaknesses, as well as potential risks and vulnerabilities. Thanks to this analysis, recommendations are made for developing and implementing effective cyber security strategies, both at the national and international levels. The study contributes to the understanding of the complexity of modern cyber threats. It emphasizes the need for continuous improvement and adaptation of protection measures to ensure the stability and security of financial and information systems in a global digital environment.

Educating Cybersecurity Experts: Analysis of Cybersecurity Education in Finnish Universities

Cybersecurity is no longer just a technical discipline but a strategic concept. Nowadays, cybersecurity has become an essential part of national security strategies. The European Union and European countries have established cybersecurity strategies to strengthen European and national resilience against cyber threats and ensure that citizens and businesses can take full advantage of reliable services and digital tools. A wide range of actors in society, from both government and non-government sectors, are already involved in cybersecurity work. However, there is a constant need to increase the workforce of cybersecurity specialists to manage cybersecurity risks. Finland's cybersecurity strategy emphasizes the importance of developing cybersecurity education to address the cybersecurity risks the country faces. For the nation to achieve cyber self-sufficiency, the pool of cybersecurity specialists should include experts in every knowledge area relevant to various aspects of cybersecurity. Universities have a role in training cybersecurity specialists through their education programs. Consequently, universities should offer comprehensive education encompassing all cybersecurity knowledge areas. This paper aims to overview the state of cybersecurity education in Finland's universities by focusing on cybersecurity education content. By analysing the content of the universities' cybersecurity education, the aim was to understand how current education in Finland meets the cybersecurity knowledge areas of the European Cybersecurity Taxonomy. In spring 2023, data on cybersecurity degree programs and courses were collected through surveys from nine Finnish universities providing cybersecurity education. As a result, we gained an understanding of the capability of Finnish university-level cybersecurity education to offer specialists in different domain areas of cybersecurity.

Brain-Computer Interface Integration With Extended Reality (XR): Future, Privacy And Security Outlook

The Brain-Computer Interface (BCI) is a rapidly evolving technology set to revolutionize our perception of the Internet of Things (IoT). BCI facilitates direct communication between the brain and external devices, enabling the control or interaction of devices without physical intervention. BCI technology is becoming more sophisticated, allowing third-party software embedded in emerging technologies such as Virtual Reality (VR), Augmented Reality (AR), and Mixed Reality (MR) to access sensors that read brain activity. These can be grouped under the umbrella term Extended Reality (XR). While BCI technology is disrupting the way data is collected, interpreted, and utilized within IoT networks, it is important to consider the potential privacy and security threats that it poses. Previous and not-so-recent cybersecurity research only scratched the surface in terms of security and privacy aspects of the then-emerging neural and brain-connecting technologies. However, recent advances in reconstructing language, music tracks, and imagery solely based on decoding neural signals pose a significant risk of mental privacy invasion and cybersecurity abuse. In this paper, we present an analysis of the potential threats posed by the integration of BCI with VR, AR, and MR. We analyze the involvement of major technological players in shaping BCI and XR advancements, examining the potential for these technologies to create detailed user profiles and reshape the monetization of user data in the ever-more-aggressive data-driven economy. We also outline a position view on the cybersecurity aspects that are not related to privacy and profiling per se, for example, cybersecurity attacks on the brain (e.g., ``brain rewriting'' attacks) facilitated by potentially vulnerable XR-BCI devices and software. The paper concludes by emphasizing the need for further research on the privacy and security implications of XR-BCI integration and inviting deeper exploration of the topic beyond theoretical papers and toward a more applied experimental setup.

Analisis Eksplorasi Strategi Perusahaan Dalam Menghadapi Disrupsi Digital Di Era Industri 6.0: Studi Kasus Pada PT. Aneka Tambang Tbk

This qualitative research explores the strategies implemented by PT Aneka Tambang Tbk (ANTAM) in facing digital disruption in the industrial era 6.0. By using a case study approach and involving 10-15 key participants from ANTAM management, this research reveals the company's comprehensive digital transformation efforts. Data collection methods include in-depth interviews, participant observation, document analysis, and literature review. The main strategies implemented include the implementation of digital technology such as the Internet of Things (IoT), big data analytics, automation and robotics in mining operations; digital human resource development; transformation of organizational culture that supports innovation; as well as strategic partnerships and collaborations with technology companies, start-ups and research institutions. ANTAM also pays great attention to aspects of cyber security and data protection. The research results show that digital transformation has a positive impact on increasing operational efficiency, productivity, cost savings, work safety, new product development, as well as the competitiveness and sustainability of ANTAM's business. This research provides valuable insights for companies in the mining sector and related industries in formulating effective digital transformation strategies.

Digital Competences in Cybersecurity of Teachers in Training

The authors have developed a psychometric instrument with the purpose of assessing the digital competencies of teachers in aspects of cybersecurity. From the collection of data, different secondary objectives were carried out: (1) identify if there were significant differences regarding gender; (2) understand if there are significant differences based on various actions (use of different operating systems, two-step authentication, use of different passwords for applications and profiles), for each gender; (3) identify if the frequency of updating of passwords in LMS, emails, RRSS and apps correlate with the digital competencies of teachers in training, for each gender. For this purpose, an ex post facto ad hoc design was used based on a sample of 220 students enrolled in a Primary Education and Early Childhood Education course at the University of Malaga (Spain). The results show that the digital skills of these teachers of the future are at a low level, and that they find it hard to navigate their way in this new world. It is also concluded that there are significant differences with respect to gender in terms of various cybersecurity actions (use of the Mac operating system; two-step authentication). In addition, it was found that the frequency of updating passwords in LMS, emails, RRSS and apps affects the competences of the teachers in training in security and prevention, in both genders.

Digital transformation in SMEs: Identifying cybersecurity risks and developing effective mitigation strategies

This study delves into the cybersecurity landscape for small and medium-sized enterprises (SMEs), focusing on identifying prevalent cybersecurity risks, evaluating existing mitigation strategies, and exploring the role of innovation and technology in bolstering cyber resilience. Employing a systematic literature review and content analysis, the research scrutinizes academic journals, industry reports, and government publications from 2015 to 2024, to gather insights into the cybersecurity challenges and strategies pertinent to SMEs. Key findings reveal that SMEs are particularly vulnerable to a range of cyber threats, including phishing, malware, data breaches, and ransomware, primarily due to resource constraints, lack of awareness, and inadequate cybersecurity measures. Effective mitigation strategies highlighted include the adoption of comprehensive cybersecurity policies, regular employee training, and the implementation of advanced technological solutions. The study predicts an increasing reliance on artificial intelligence and machine learning for threat detection, alongside a growing trend of collaboration between SMEs and cybersecurity firms. The research underscores the necessity for supportive policies and frameworks that encourage SMEs to strengthen their cybersecurity posture, recommending financial incentives and the development of SME-specific cybersecurity standards. Building a cyber-secure culture within SMEs, characterized by organizational commitment and regular awareness programs, is identified as crucial for enhancing cyber resilience. Finally, the study emphasizes the importance of cybersecurity for SMEs, offering strategic recommendations for navigating digital threats and suggesting avenues for future research, including the exploration of behavioral aspects of cybersecurity and the impact of emerging technologies.

A Review on Detection of Cybersecurity Threats in Banking Sectors Using Ai Based Risk Assessment

The continued rise of cybercrime in the current era has frightened not only off-users but also violating financial institutions. The recent studies have shown that most financial institutions lose the credibility of their clients and their investments as a result of these attacks. The cyber-hackers involved in these types of cybercrime are now using more advanced technology. Its vigour surpasses the firewall system currently in use our network. Hence, the security needs for financial institutions are increased. So, the server management and cyber security systems getting higher end security. The cyber security aspects are is always shifting based on the attacks, but the cyber security threats are increased and create the serious discussion about the financial institutions. In General, the cyberspace describes the combination of all types of communication networks, databases, embedded processors, Internet and controllers for exchanging electronic documents. The global network environment is created by telephone wires, coaxial cables, electromagnetic waves and fiber-optic lines. Although the terms cyberspace and the Internet can be used interchangeably, it is still part of cyberspace. In simple terms, cyberspace is a connected web environment. Now, cyber-security is the process of protecting cyberspace from attack, misuse, damage and economic espionage. Cyberspace can sometimes be blocked by intrinsic vulnerabilities that cannot be eliminated. In this study, different types of cyber cards are explained in detail. And the escape processes from certain subtle attack methods are clearly stated.

Ethical and legal aspects of cybersecurity in health

Background: With the emergence of eHealth and mHealth, the use of mental health apps has increased significantly as an accessible and convenient approach as an adjunct to promoting well-being and mental health. There are several apps available that can assist with mental health monitoring and management, each with specific features to meet different needs. The intersection of mental health and cyber technology presents a number of critical legal and ethical issues. As mental health monitoring apps and devices become more integrated into clinical practice, cybersecurity takes on paramount importance. Objective: To address the ethical and legal aspects of health cybersecurity related to applications in mental health monitoring and management. Methods: We carried out a thematic synthesis of the best scientific evidence. Results: These tools have the potential to significantly improve access to and quality of care for users with mental health conditions, but they also raise substantial concerns about privacy and informed consent. Cybersecurity in mental health is not only a matter of technology, but also of human rights. The protection of sensitive mental health information is critical, and legal and ethical measures to safeguard this information must be implemented in a robust and transparent manner. Conclusion: the use of information technologies and mobile devices is now part of the clinical reality and its future perspectives. It is important to mention that while these apps can be helpful for self-care and mental well-being management, they are not a substitute for the advice and support of a qualified mental health professional (psychologist or psychiatrist). As we move into the digital age, it is imperative that mental health monitoring and management apps are developed and used responsibly, ensuring the safety, dignity, and well-being of users.

Cybersecurity Measures in East African EGovernment Systems

This paper provides a comprehensive examination of cybersecurity measures within e-government systems in East Africa. It begins with an overview of the importance of cybersecurity in e-government, emphasizing the need to protect sensitive data and ensure the integrity of digital services. The paper then explores key aspects of cybersecurity, including risk assessment and management, data encryption, firewalls, intrusion detection/prevention systems, access control, and security awareness training. Each section highlights the significance of these measures in enhancing the security and resilience of e-government systems. The conclusion underscores the importance of continuous vigilance and investment in cybersecurity technologies to address evolving threats effectively. Overall, this paper serves as a valuable resource for understanding and implementing cybersecurity best practices in East African e-government initiatives. Keywords: Cybersecurity, E-government systems, East Africa, Risk assessment, Data encryption

ДОСЛІДЖЕННЯ ВПЛИВУ ЦИФРОВОЇ ТРАНСФОРМАЦІЇ НА ЕКОНОМІЧНІ АСПЕКТИ КІБЕРБЕЗПЕКИ В БІЗНЕС СЕРЕДОВИЩІ

The impact of digital transformation on the economic aspects of cybersecurity in the business environment has been investigated. The main challenges and opportunities arising from the implementation of new technologies have been considered. The economic consequences of cyber threats have been analyzed, and strategies for improving business' cybersecurity have been proposed. Keywords: digital transformation, cybersecurity, business environment, cyber threats, cybersecurity strategies.

Pengukuran Kematangan Keamanan Siber pada Perusahaan Teknologi Informasi dengan Framework Center for Internet Security Controls

This research evaluates the cybersecurity maturity of a technology information company in Jakarta, using the CIS Controls framework that encompasses all controls within Implementation Group 1 (IG1). The company has not conducted formal measurements regarding cybersecurity maturity, leading to uncertainty about the effectiveness of security efforts. The aim of this study is to measure, assess, and provide recommendations to enhance cybersecurity within the company. The research methodology involves an assessment of CIS Controls implementation and maturity level measurements. The measurement results indicate a low level of maturity, with an overall score of 0.41. The company needs to make significant improvement efforts in the cybersecurity aspect. Recommendations derived from this analysis emphasize the need for policy enhancements, control improvements, and increased employee training, serving as a guide for the company to strengthen weak cybersecurity aspects. The company should adopt a sustainable approach with management commitment and active engagement of all stakeholders.

An overview of cybersecurity in Zimbabwe's financial services sector.

As nations, businesses, and individuals rely on the Internet for everyday use, so are cybercriminals manipulating systems to access information illegally and disrupting services for financial gain. The global cost of cybercrime eclipsed one trillion US Dollars in 2020, with Africa losing US $3.5 billion. A quantitative research methodology was adopted to investigate factors affecting cybercrime in Zimbabwean financial institutions. The study focused on the technical aspects of cybersecurity. Data were collected from July 2022 to October 2022, targeting technology experts in the financial services sector. Participants were recruited from 13 institutions to rank cybersecurity constructs, frameworks, and challenges associated with cybersecurity. Data was collected using a questionnaire distributed to participants. Descriptive statistics were used to extract meanings from the responses that measure mean and standard deviation. Network and data security were the most highly ranked cybersecurity constructs, while physical security was the least. The top three barriers are increasing sophistication of threats, limited skills and emerging technologies, while lack of executive support was the least. The top frameworks used are the Information Technology Infrastructure Library (ITIL) and Control Objectives for Information and Related Technologies (COBIT), while a fifth is yet to adopt cybercrime frameworks. The study proposes that financial institutions establish a cybersecurity culture to fight cybercrime, addressing cybersecurity barriers and following best practices. Financial institutions should invest in cybersecurity technologies, train security specialists, and employ a Chief Information Security Officer (CISO). The study's small sample may affect the generalisability of the results. Financial institutions should implement strategies to raise awareness and collaborate with institutions to train cybersecurity security specialists to close the skills gap.

Awareness of cyber security aspects in distance education

Awareness of cyber security aspects in distance education

Blockchain for data protection and cyber fraud reduction: systematic literature review and technology adoption dynamics among gen Y and Z

PurposeThe purpose of this study is to investigate the role of blockchain technology in reducing online fraud among Gen Y and Gen Z.Design/methodology/approachThis study uses a two-phase approach. Firstly, a systematic literature review is conducted to examine various aspects of blockchain technology and cyber security. Secondly, the Technology Adoption Model is used to study the adoption dynamics of blockchain-based platforms for online data exchange among 415 Gen Y and Z users.FindingsThe results indicate that efficiency and security, perceived ease of use, perceived usefulness, and trust have a positive effect on behavioral intention and attitude towards use. This is the first study to examine the role of blockchain technology to reduce fraud among Gen Y and Gen Z.Originality/valueThis study provides new insights into the adoption of blockchain-based platforms for online data exchange among Gen Y and Gen Z. The study highlights the critical areas of concern for the adoption of blockchain technology and provides managerial implications for fintech firms, banks, and e-commerce platforms. It is unique in its focus on the potential for blockchain technology to reduce fraud among Gen Y and Gen Z, which has not been previously explored in the literature.

Cybersecurity in Political Studies: A Scoping Review

In recent years the increasing prevalence of technology has elevated cybersecurity from being a niche focus of interest for a small group of specialised computer scientists to a macro-level concern, attracting the attention of scholars and practitioners in political science and international relations. Today governments and military bodies view aspects of cybersecurity—ranging from preparations for cyberwar (a facet of digital geopolitics) to managing responses to cyber events (a facet of strategic communications)—as critical to their national security. However, while this mounting interest among academics has led to a rise in publications in political science and international relations journals, such rapid growth also results in literature fragmentation, where many studies do not sufficiently communicate with each other, and theoretical development remains relatively limited. In this paper, by reviewing the 113 cybersecurity papers published in 53 prominent journals in political science and international relations, I aim to provide an overview of the current state of research in this domain. Overall, this study has implications for the political science and international relations fields, especially the literature on strategic communications and digital geopolitics.

Managing Multimillion-Dollar Security Budgets for Maximum ROI: Insights into Optimizing Resource Allocation to Ensure Cost-Effective Security Solutions

Allocating and disbursing large sums of money into cybersecurity is another difficult task, especially in providing the best ROI in the face of constantly emerging cyber threats. This article examines levers that can be pulled to improve the methods for determining resource allocation in strategic human resource management to increase the ROI. This stresses the need to integrate security budgets with strategic plans. Needs and risk analyses should be answered appropriately and meet the requirements of regulations. Moreover, it focuses on optimizing budgetary resources, as evidenced through quantitative data and sophisticated analytical techniques. The article further expands on the idea that technologies ranging from AI to machine learning improve the capacity for threats to be detected and managed, thus increasing the overall return on investment. It also covers some of the societal aspects of cybersecurity by noting the need to spend on cybersecurity talent acquisition and management. Contest, consolidation, and performance procurement mechanisms are considered ways of lowering the costs of cybersecurity solutions even as the quality increases due to the implementation of competitive bidding, vendor consolidation, and performance-based procuring methods. It also reveals the need to review the budget, considering the constant changes in threat, to present a bullet-proof defense mechanism. By taking anticipatory actions, keeping abreast of the threats and their actual impact through real-time threat intelligence, and analyzing and reassessing the spending plans, firms can be assured that they are equally equipped to address new risks and innovative technologies that emerge on the market. It all combines to go a long way in optimizing the Returns on Investment and, at the same time, enhances the outer security status of an organization.

BUILDING A CYBER SECURITY CULTURE FOR RESILIENT ORGANIZATIONS AGAINST CYBER ATTACKS

Cybersecurity has emerged as a critical area requiring 24/7 surveillance, in response to the rapidly increasing frequency of cyber threats. Concurrently, there is a notable amplification in both the allocated budget and the academic interest within this domain. In this cyber risk environment, the success of organizations depends on the weakest link, the human factor. Human errors can be reduced by focusing on the beliefs, values and attitudes guiding employee behavior to protect organizations. In this context, the concept of cybersecurity culture emerges as the key to strengthening cyber resilience in organizations. In this study, the findings obtained from the literature review are presented to determine the definition of cybersecurity culture, its importance and the factors considered important for creating and maintaining this culture. In the study, cybersecurity culture is defined as the set of behaviors formed by beliefs, values and attitudes that shape an organization's approach to cybersecurity. Creating a resilient and sustainable cybersecurity culture is possible by focusing on the human aspects of cybersecurity as much as the technical aspects. Leadership knowledge, skills and abilities, developing cybersecurity awareness throughout the organization, effective communication and acceptance of this transformation as a continuous learning experience are listed among the main factors affecting the cybersecurity culture.