Cybersecurity Research Articles

Addressing GenAI use through transparency in teaching and learning in a Master of Cyber Security program

This paper explores the use of Generative AI (GenAI) in university assessments, focusing on transparency and best practices. The study examines the implementation of GenAI guidelines in a Master of Cyber Security program from 2023 to 2024. Course conveners aimed to enhance learning by encouraging GenAI use for efficiency, while addressing academic integrity concerns. The evolving university policies and the challenges of detecting GenAI misuse are discussed. The paper highlights the importance of clear guidelines and transparent communication to foster shared understanding for AI use. Findings suggest that transparent AI policies can support both students and educators in navigating the complexities of AI in education.

Data and IT Systems Security in Contemporary Organizations

ABSTRACT Data and IT systems security is a critical aspect and plays a significant role in protecting an organization’s business. Organizations must safeguard their information and assets to sustain their value and reputation. Security is essential to information systems because it concerns personal and confidential data belonging to users or companies. The study aims to indicate how enterprises in Poland guarantee the security of data and IT systems, as well as to estimate the complexity of this phenomenon. We have confirmed that small and medium enterprises (SMEs) organizations with a lower level of computerization generally invest fewer resources and possess less expertise in establishing and maintaining IT security policies and strategies.

Overview of Anomaly Detection Techniques across Different Domains: A Systematic Review

An anomaly, defined as something that deviates from what is normal, expected, or usual. It signifies abnormality or an irregularity that stands out from typical behaviours or patterns. Detecting anomalies is significant among numerous sectors due to the reasons of signal potential difficulties or opportunities. For an instance, in retail, detecting anomalies in sales data might prompt for further analysis into operational issues or customer behaviour to reduce losses and capitalize on its trends. Hence, different techniques are used for Anomaly Detection. However, anomaly detection using manual method are measured for time consuming, prone to error and can be tedious process. Therefore, different approaches have been considered for anomaly detection as AI (Artificial Intelligence) methods are efficient, faster, provides high level accuracy by effectively detecting the abnormalities. Owing to these aspects, this paper focuses on compiling different techniques and emphasizes on reviewing all anomaly detection using numerous techniques like ML (Machine Learning) and DL (Deep Learning) classifiers, statistical methods, one-class classification, clustering and density-based models which helps with identifying and comprehending the diversity of detection techniques that are applied in various domains like finance, retail, healthcare and cyber security. Various existing researches on anomaly detection are reviewed in the study. In addition to an overview, certain studies also deals with applications of detection models and future trends are reviewed in precise. Finally, the challenges are identified through the analysis of existing researchers and future recommendations are provided for overcoming the gaps that are intended to create promising work in this area.

Cyber Security and Business Continuity Management: Ensuring Resilience in a Digital World

Cyber Security and Business Continuity Management: Ensuring Resilience in a Digital World

A Delayed Malware Propagation Model for Cloud Computing Security

A Delayed Malware Propagation Model for Cloud Computing Security

Navigating Modern Threats: The Imperative of Strengthening Cybersecurity

Cybersecurity has become crucial in today's changing world to protect data and promote technological advancements, according to a recent online study. In a world where networks and IoT devices are increasingly interconnected and vulnerable, to attacks cyber threats have become a concern as discussed in the research paper I came across. The study delves into issues related to cybersecurity risks. Emphasizes the importance of implementing strong security measures to prevent unauthorized access and cyber breaches. The research explores studies by areas that need more attention while stressing the value of modern approaches, like artificial intelligence (AI) and machine learning (ML) in boosting threat identification and reaction capabilities. This article discusses the importance of cybersecurity, in maintaining stability and security through analysis. It emphasizes the need for companies to adopt technologies in their security measures for managing risks. The results of this article have implications, for fostering cooperation to tackle cybersecurity issues and contribute to securing a digital future. Keywords Cyber Security, Cyber Attacks, Challenges, Threats, Vulnerabilities

Engaging in cyber hygiene: the role of thoughtful decision-making and informational interventions

IntroductionThe effectiveness of human-centric cybersecurity largely depends on end-users’ adherence to security and privacy behaviors. Understanding and predicting variations in the adoption of these safeguards is crucial for both theoretical advancement and practical application. While existing frameworks are often adapted from health science literature, there is potential to enhance these models by incorporating criminological constructs relevant to online victimization. This study introduce rational choice theory of thoughtfully reflective decision-making (TRDM) into the information security domain. TRDM suggests that variations in cognitive decision-making capabilities influence behavioral outcomes, particularly in the context of security and privacy practices.MethodsThe study employed a field experiment to test the applicability of TRDM in predicting end-users’ engagement in security and privacy behaviors. Participants were exposed to security-related warnings, with the hypothesis that thoughtfully reflective decision-makers would be more likely to adopt robust protective behaviors. Data was collected on participants’ responses to these security warnings, as well as their overall adherence to privacy and security practices.ResultsThe findings support the theoretical framework: individuals exhibiting thoughtfully reflective decision-making tendencies demonstrated a higher likelihood of engaging in privacy and security behaviors. Specifically, participants with higher TRDM scores were more likely to adopt protective behaviors when warned of the consequences of non-compliance. These results indicate that cognitive decision-making capabilities significantly influence the likelihood of engaging in cybersecurity practices.DiscussionThe study challenges the prevailing one-size-fits-all approach to cybersecurity by highlighting the importance of individual differences in cognitive decision-making. Thoughtfully reflective decision-makers are better equipped to adopt preventive security measures, suggesting the need for more tailored interventions in cybersecurity education and risk assessment. This research contributes to the development of sophisticated risk assessment tools aimed at mitigating vulnerabilities and reducing users’ susceptibility to digital threats. Incorporating TRDM into information security models provides a more nuanced understanding of user behavior, offering insights into how cognitive processes influence cybersecurity adherence.

Engaging in cyber hygiene: the role of thoughtful decision-making and informational interventions

Engaging in cyber hygiene: the role of thoughtful decision-making and informational interventions

Strengthening Cyber Security and FERC's Recent Directives for the Energy Sector

As the energy sector embarks upon the clean energy transition using new products, devices, and services, integrating cyber security into operations has become non‐negotiable for mitigating the risk of an attack. The shift toward upgraded and digital technologies, along with a more connected utility environment, has introduced new vulnerabilities that, if exploited, could disrupt critical infrastructure, and have significant negative impacts on national security, and the reliability of our energy infrastructure.

Информационная гигиена как фактор успешной профессиональной деятельности сотрудников уголовно-исполнительной системы

The article examines the issues of information hygiene as a factor of successful professional activity of employees of the penal correction system in the context of digital transformation. The insufficiency of research on information hygiene in the psychology of professional activity of specialists is emphasized. Information (digital) hygiene is a certain set of norms and rules that ensure optimal interaction with information of various kinds, which, in turn, ensures the preservation of professional health, personal resources, professional and personal identity and is one of the factors of success of professional activity in the context of digital transformation. Recommendations on the observance of information hygiene in the official activities of employees of the penitentiary system are given. The directions of the official activity of employees of the penal enforcement system in which the use of information hygiene is significant are highlighted: interaction with various information tools and software service products; organization of interdepartmental electronic interaction with law enforcement agencies and other federal executive authorities; information support for the activities of the Federal Penitentiary Service of Russia; information security and protection of information resources of the Federal Penitentiary Service of Russia; implementation of various projects of digital transformation of the Federal Penitentiary Service of Russia. Two approaches are proposed in training to improve the level of development of digital hygiene by employees of the penitentiary system: within the framework of higher and additional professional education. Considering information hygiene as a complex professionally important quality and a factor of successful performance of employees of the penal enforcement system, it is quite natural that these aspects can serve as the basis for taking into account and developing criteria for the success of professional activity in the future, an expanded description and characterization of generalized labor functions of professional standards by position, clarification of occupational and psychograms, optimization of procedures for professional selection and professional certification of employees of the penitentiary system in the dynamics of the professional path.

An approach for real-time implementation of cyber security in power system network

Abstract In this era of Web World-3, usage of the Internet of Things (IoT) in power system networks has attained scalable altitude. By using this technology, data can be transferred and monitored from the far end. Further, the suggested corrective actions are also executed. However, recently, many cyber-attacks have been observed on the power system in which activities such as injection of false data, unwanted switching operations, formation of sub-system layers, and false indication of failure of cyber-physical components (CpC) are experienced. In the worst case, it leads to invite cascade tripping of the power system. Utmost care is taken for the selection of CpC for the power system. However, it is observed that the cyber attackers mostly take entry into the network using the CpC of the power system. Cyber attackers perform false switching operations and false data injection. This article suggests a cyber security concept to minimize the false switching operations and false data injection in the power system network. A hardware model is prepared and the working scheme is implemented using IoT technology. The hardware result suggests that the un-authentic attempt/cyber-attack has been identified and the alarm is generated. It also does not permit the un-authentic person to access the real-time data. A wide range of applicability of the suggested scheme has been verified by hardware results. In addition to this, the power factor correction algorithm also works satisfactorily in the hardware along with the cyber security constraints. In order to prove wide range of applicability of the suggested scheme, additional features such as controlling of multiple switching devices and interlock between CB and earthing switch has been successfully implemented in developed hardware.

Data-Driven Remaining Useful Life Estimation

This paper explores the development and application of data-driven prognostic models for estimating the Remaining Useful Life (RUL) of Nuclear Power Plant (NPP) condensers experiencing tube fouling. Due to the unavailability of run-to-failure industry sensor data, we utilized simulated data generated by the Asherah Nuclear Power Plant Simulator (ANS), initially designed by the International Atomic Energy Agency (IAEA) and programmed in Simulink for cyber security simulations. ANS's adaptability allows it to simulate Pressurized Water Reactor (PWR) behaviors given a time series of operating conditions and to introduce degradation modules to mimic fouling effects. Our study compares two primary approaches applied to data generated by ANS: inference-based and direct prediction methods. The selected inference-based approach estimates the health state of the condenser using a pipeline formed by an Auto Associative Kernel Regressor and a Hidden Markov Model (HMM), which subsequently combines the state estimates with its parameters to predict the RUL. The direct prediction method employs a Gradient Boosting Regressor Decision Tree (GBRDT) to map input variables directly to RUL. Our findings demonstrate the efficacy and limitations of each method through the case study, providing valuable insights for the adoption of data-driven RUL estimation techniques in industrial and energy applications.

A feminist cybersecurity: addressing the crisis of cyber(in)security

Abstract This article draws on feminist security studies (FSS) to construct a more inclusive cybersecurity. We ask: What can a gendered lens do for cybersecurity? Methodologically, this exploratory piece brings FSS insights to bear on studies in cybersecurity (both traditional and critical) to better conceptualize the risks and benefits embedded in the cybersphere, as well as the role of gender in cyberspace. We propose incorporating a gendered lens (an intersectional approach) to shed light on violence and insecurity online. Without recognizing gendering in the cyber realm, including how gender intersects with other systems of oppression, cybersecurity scholars and policy-makers cannot fully understand what we term the crisis of cyber(in)security. Additionally, we challenge simplistic solutions that rely solely on human rights protections in cyberspace. Such approaches often reinforce existing gender and power hierarchies through protectionist discourse. Our FSS-based understanding of cybersecurity has important policy implications. It calls for increased access and diverse participation in cybersecurity policy-making and diplomacy, and promotes a more thoughtful approach to human rights protection to address a broader range of cyber-based insecurities and forms of violence.

Data Breach Notification Laws and the Cost of Private Debt

We examine the effect of state-level data breach disclosure mandates (DBN laws) on the cost of private debt. Using the staggered passage of DBN laws across the U.S., we document an increase in the cost of private debt for firms affected by these laws. These findings suggest that DBN laws increase lenders’ anticipation of cash flow risk from potential future costs related to data breach disclosures. We further document that the increase in the cost of private debt is more pronounced for firms that (i) belong to industries that are susceptible to data breaches, (ii) report internal control weaknesses, or (iii) disclose cyber security risks in their risk factor disclosures. Additionally, we find that the increase in the cost of private debt is less pronounced in firms that focus on cyber security measures, such as investing in cyber security or appointing a technology officer on their board. We contribute to the debt contracting and disclosure literature by focusing on the proactive response of private lenders after the passage of DBN laws to mitigate ex-ante the risk resulting from potential future data breach disclosures while also shedding light on the cost (financing cost) associated with mandatory disclosure practices.

What we mean

In the twenty-first century, cyberspace and the ‘real world’ have become inseparable. The stability and security of cyberspace therefore affect, in increasingly profound ways, the economies, international reputations, national security, military capabilities and global influence of states. In their short history, operations in cyberspace have already been used extensively by states and their non-state supporters for many purposes. They are an inevitable aspect of contemporary international affairs while carrying significant risk. In this Adelphi book, Marcus Willett, a former deputy head of GCHQ, argues that there is no coherent or widely shared understanding of what cyber operations really are, how they are used and what they can do; or of their implications for strategic affairs and international law; or what their ‘responsible’ use really entails. The myths and misunderstandings that abound tend to dull the conceptual clarity needed by strategic policymakers and overseers, and they complicate the essential task in a liberal democracy of maintaining public consent for, and legitimisation of, the development and use of such capabilities. The book sheds light on these issues, exposing myths and clarifying misunderstandings.

The future

In the twenty-first century, cyberspace and the ‘real world’ have become inseparable. The stability and security of cyberspace therefore affect, in increasingly profound ways, the economies, international reputations, national security, military capabilities and global influence of states. In their short history, operations in cyberspace have already been used extensively by states and their non-state supporters for many purposes. They are an inevitable aspect of contemporary international affairs while carrying significant risk. In this Adelphi book, Marcus Willett, a former deputy head of GCHQ, argues that there is no coherent or widely shared understanding of what cyber operations really are, how they are used and what they can do; or of their implications for strategic affairs and international law; or what their ‘responsible’ use really entails. The myths and misunderstandings that abound tend to dull the conceptual clarity needed by strategic policymakers and overseers, and they complicate the essential task in a liberal democracy of maintaining public consent for, and legitimisation of, the development and use of such capabilities. The book sheds light on these issues, exposing myths and clarifying misunderstandings.

The strategic utility of cyber operations

In the twenty-first century, cyberspace and the ‘real world’ have become inseparable. The stability and security of cyberspace therefore affect, in increasingly profound ways, the economies, international reputations, national security, military capabilities and global influence of states. In their short history, operations in cyberspace have already been used extensively by states and their non-state supporters for many purposes. They are an inevitable aspect of contemporary international affairs while carrying significant risk. In this Adelphi book, Marcus Willett, a former deputy head of GCHQ, argues that there is no coherent or widely shared understanding of what cyber operations really are, how they are used and what they can do; or of their implications for strategic affairs and international law; or what their ‘responsible’ use really entails. The myths and misunderstandings that abound tend to dull the conceptual clarity needed by strategic policymakers and overseers, and they complicate the essential task in a liberal democracy of maintaining public consent for, and legitimisation of, the development and use of such capabilities. The book sheds light on these issues, exposing myths and clarifying misunderstandings.

The cyber dimension of the Russia–Ukraine war

In the twenty-first century, cyberspace and the ‘real world’ have become inseparable. The stability and security of cyberspace therefore affect, in increasingly profound ways, the economies, international reputations, national security, military capabilities and global influence of states. In their short history, operations in cyberspace have already been used extensively by states and their non-state supporters for many purposes. They are an inevitable aspect of contemporary international affairs while carrying significant risk. In this Adelphi book, Marcus Willett, a former deputy head of GCHQ, argues that there is no coherent or widely shared understanding of what cyber operations really are, how they are used and what they can do; or of their implications for strategic affairs and international law; or what their ‘responsible’ use really entails. The myths and misunderstandings that abound tend to dull the conceptual clarity needed by strategic policymakers and overseers, and they complicate the essential task in a liberal democracy of maintaining public consent for, and legitimisation of, the development and use of such capabilities. The book sheds light on these issues, exposing myths and clarifying misunderstandings.

Responsible cyber power

In the twenty-first century, cyberspace and the ‘real world’ have become inseparable. The stability and security of cyberspace therefore affect, in increasingly profound ways, the economies, international reputations, national security, military capabilities and global influence of states. In their short history, operations in cyberspace have already been used extensively by states and their non-state supporters for many purposes. They are an inevitable aspect of contemporary international affairs while carrying significant risk. In this Adelphi book, Marcus Willett, a former deputy head of GCHQ, argues that there is no coherent or widely shared understanding of what cyber operations really are, how they are used and what they can do; or of their implications for strategic affairs and international law; or what their ‘responsible’ use really entails. The myths and misunderstandings that abound tend to dull the conceptual clarity needed by strategic policymakers and overseers, and they complicate the essential task in a liberal democracy of maintaining public consent for, and legitimisation of, the development and use of such capabilities. The book sheds light on these issues, exposing myths and clarifying misunderstandings.

A short history of cyber operations

In the twenty-first century, cyberspace and the ‘real world’ have become inseparable. The stability and security of cyberspace therefore affect, in increasingly profound ways, the economies, international reputations, national security, military capabilities and global influence of states. In their short history, operations in cyberspace have already been used extensively by states and their non-state supporters for many purposes. They are an inevitable aspect of contemporary international affairs while carrying significant risk. In this Adelphi book, Marcus Willett, a former deputy head of GCHQ, argues that there is no coherent or widely shared understanding of what cyber operations really are, how they are used and what they can do; or of their implications for strategic affairs and international law; or what their ‘responsible’ use really entails. The myths and misunderstandings that abound tend to dull the conceptual clarity needed by strategic policymakers and overseers, and they complicate the essential task in a liberal democracy of maintaining public consent for, and legitimisation of, the development and use of such capabilities. The book sheds light on these issues, exposing myths and clarifying misunderstandings.