Cybersecurity Breaches Research Articles

A Framework for Producing Effective and Efficient Secure Code through Malware Analysis

Malware attacks are creating huge inconveniences for organizations and security experts. Due to insecure web applications, small businesses and personal systems are the most vulnerable targets of malware attacks. In the wake of this burgeoning cyber security breach, this article propositions a framework for a complete malware analysis process including dynamic analysis, static analysis, and reverse engineering process. Further, the article provides an approach of malicious code identification, mitigation, and management through a hybrid process of malware analysis, priority-based vulnerability mitigation process and various source code management approaches. The framework delivers a combined package of identification, mitigation and management that simplifies the process of malicious code handling. The proposed framework also gives a solution for reused codes in software industry. Successful implementation of the framework will make the code more robust in the face of unexpected behavior and deliver a revolutionary stage wise process for malicious code handling in software industry.

Factors Related to Cyber Security Behavior

Theoretical and empirical insight notes that cyber security awareness is a topic of particular interest in cyber security. Humans are the central figures in cyber security and the way to reduce risk in cyberspace is to make people more security aware. While there have been numerous studies about various aspects of cyber security awareness, they are both inconsistent and environment-dependent. The main aim of our research is to analyze cyber security awareness in depth, and to try to discover how various factors such as socio-demographics, cyber security perceptions, previous cyber security breaches, IT usage, and knowledge may individually or together impact on cyber security behavior. To prove that we conducted our research on students, as they are the most technologically active part of the society. We discovered that knowledge proved to be the dominant factor for cyber security awareness, and although students are digital natives, they do not feel safe in the cyber environment; they do not behave securely and do not have adequate knowledge to protect themselves in cyberspace.

Privacy versus Convenience: Customer Response to Data Breaches of Their Information

Cybersecurity breaches pose a substantial privacy concern in the digital era. We investigate how customers respond to privacy leakage in multiple unexpected data breaches. Difference-in-differences estimates show that digital payments declined by 4.6% ~ 7.5% relative to cash payments immediately after an unexpected data breach in a food delivery platform, but the gap disappeared three months later. Customer entry and exit also exhibit weak, short-lived changes. Additional analyses on bank and online grocery data breaches uncover even weaker direct and spillover effects of data breaches. Our findings imply that the perceived benefit of convenience overweighs the cost of privacy leakages.

Recent Cyber Security Breaches and Preventive Measures

Recent Cyber Security Breaches and Preventive Measures

Insider trading ahead of cyber breach announcements

Stock market reactions to cybersecurity breach announcements are generally negative. We find significant evidence of opportunistic insider trading, with insiders saving an average of $35,009 due to timely selling in the three months before the announcement of a cybersecurity breach. Late filing violations by insiders are more likely to occur near the announcement of a cyber breach. The bulk of opportunistic trading tends to occur 55–72 days before the public announcement. The results lend support to the U.S. Security and Exchange Commission’s recently announced goal of tightening restrictions on insider trading ahead of cyber breach announcements.

Cybersecurity: Protecting Networks, Systems, and Data from Cyberattacks

The prevalence of cyber risks presents an ever-increasing threat to the security of networks, systems, and sensitive data in an era where digital connectivity rules. This study explores the complex field of cybersecurity with the goal of offering a thorough grasp of the tactics used to defend against cyberattacks.The first section of the study examines the historical background of cybersecurity, showing how it developed from simple computer security measures to the complex array of modern threats. The focus is on describing the wide range of cyberthreats, such as ransomware, phishing, and malware, and illustrating how they appear and what happens in the real world. A large amount of research is devoted to analyzing the vulnerabilities present in operating systems, networks, and data storage, providing insight into the complex interactions between technological flaws and human variables. The paper explores the role of human error as a crucial trigger for cybersecurity breaches in addition to clarifying the various attack surfaces.

Public Perception of the Influence of Digital Media on Cyber Security in Nigeria

The objective of this study was to examine public perception of the influence of digital media on cyber security. The survey research design was used for the study. A total of 384 respondents were selected from Enugu State to provide data for the study. In the sample, only people with background on issues related to cyber security were included. The questionnaire served as the instrument for data collection. Data were analyzed using both descriptive and inferential statistics. It was found that the sample studied reported that digital media are significantly and negatively affecting cyber security breaches, and promoting cyber crimes. The result of the hypotheses tested revealed a significant association between digital media and cyber security breaches and digital media and cybercrime. The practical, theoretical and scholarly implications of the results have been explored.

Cybersecurity Capacity: Does It Matter?

Abstract National cybersecurity capacity building involves the development of managerial, technical, social, legal, policy, and regulatory initiatives by a growing ecology of actors to enhance the resilience of nations to cybersecurity breaches, cybercrime, and terrorism. Capacity building is therefore resource intensive, requiring attention across sectors of society, ranging from governments to Internet users. However, it is difficult to justify commitments to capacity building when the benefits of building national cybersecurity capacity are largely based on logical reasoning, limited case studies, anecdotal evidence, and expert opinion rather than systematic empirical evidence. To explore the value of capacity building, this article reports on the early phase of a systematic effort to bring together cross-national data from multiple sources to examine whether indicators related to the cybersecurity capacity of a nation help explain the experiences of Internet users—one of the final payoffs of cybersecurity capacity building.

The Impact of Age, Gender, and Educational level on the Cybersecurity Behaviors of Tertiary Institution Students: An Empirical investigation on Malaysian Universities

A lot of cybersecurity breaches occur due to human errors. Tertiary institutions need to enhance students’ cybersecurity awareness and capabilities, hence promoting safe cybersecurity behaviors. Socio-psychological factors affects students’ cybersecurity behaviors. We explore to what extent age, gender and educational level, plays a role in mediating the factors affecting tertiary institution students’ cybersecurity behaviors. A cross-sectional survey was conducted among 340 students and Structural Equation Modelling was employed for evaluating impacts. Data analysis was conducted via SPSS (V.25). Results show that students cybersecurity behaviors varies based on Age for factors such as: Perceived Severity, Peer Behavior, Familiarity with Cyber Threats, Response Efficacy and Perceived Vulnerability. Gender effects existed in Security Self Efficacy, Computer Skills, Cybersecurity Behaviors, Perceived Severity, and little effects in Prior Experiences with Computer Security Practices. Educational level differences existed in Cues to Action and Familiarity with Cyber-Threats. Age, gender and educational level are important factors in mediating students’ cybersecurity behaviors. Practically, our findings can instigate the need for specific/focused cybersecurity training and interventions for students in the tertiary institutions. It can also help cybersecurity training units in the tertiary institutions to target very vital components of cybersecurity behavior model, hence improving the cybersecurity behaviors of the students.

Cybersecurity Capacity: Does It Matter?

Abstract National cybersecurity capacity building involves the development of managerial, technical, social, legal, policy, and regulatory initiatives by a growing ecology of actors to enhance the resilience of nations to cybersecurity breaches, cybercrime, and terrorism. Capacity building is therefore resource intensive, requiring attention across sectors of society, ranging from governments to Internet users. However, it is difficult to justify commitments to capacity building when the benefits of building national cybersecurity capacity are largely based on logical reasoning, limited case studies, anecdotal evidence, and expert opinion rather than systematic empirical evidence. To explore the value of capacity building, this article reports on the early phase of a systematic effort to bring together cross-national data from multiple sources to examine whether indicators related to the cybersecurity capacity of a nation help explain the experiences of Internet users—one of the final payoffs of cybersecurity capacity building.

Internal Motivators for the Protection of Organizational Data

ABSTRACTThe purpose of this paper is to investigate the effect of internal motivators (psychological ownership, perceived control, and self-efficacy) on employees' intention to protect organizational data. The threat of cybersecurity breaches is increasing, as are the realization of cybersecurity breaches and the subsequent loss of data. While information security policies increase employees' intentions to protect organizational data, they do not guarantee employee compliance. Results indicate that self-efficacy is associated with perceived control, which, in turn, is associated with perceived psychological ownership of organizational data. Furthermore, self-efficacy and psychological ownership are both associated with an increase in intention to protect organizational data.

The Impact of Reported Cybersecurity Breaches on Firm Innovation

ABSTRACTMany firms cite cyber risk as a primary risk factor due to the increase in cybersecurity breach (CSB) incidents. Existing research focuses on the negative, short-term impacts from CSBs, but the longer-term impact is still unknown. Our study investigates firms' levels of innovation following a CSB as an important determinant of firm growth and profitability. Examining reported breaches from 2005–2014, we find a 10 percent decline in research and development spending in the year following a CSB. Further investigation indicates that firms for which R&D is not the primary business model drive the results. We also provide evidence of a decrease in patents two years after a breach, an increase in cash holdings in the year after the breach, and a decrease in investment efficiency four years following the breach. Our aggregate results suggest that CSBs are associated with future strategic decisions involving firm-level innovation and investment decisions.Data Availability: Data are available from the public sources cited in the text.

Do Voluntary Disclosures Mitigate the Cybersecurity Breach Contagion Effect?

ABSTRACTIn this study, we investigate the negative impact of a cybersecurity breach on a bystander (i.e., non-breached) firm in the same industry, referred to as investment contagion effects, and whether voluntary cybersecurity disclosures mitigate these effects. Using an experiment with nonprofessional investors, we provide strong evidence of investment contagion effects. However, we also find a portion of investor participants perceive the breach as positive news for the bystander firm, a phenomenon known as competition effects. Our evidence suggests contagion effects are dominant over competition effects, and cybersecurity disclosures provided prior to the breach announcement attenuate contagion effects. Additionally, we find cybersecurity disclosures provided subsequent to the breach announcement can reduce the magnitude of investment contagion effects. Our study informs standard setters and firms as we find some evidence that voluntary disclosures are effective in lessening investment contagion effects.

What the hack: Systematic risk contagion from cyber events

This paper examines the impact of cybercrime and hacking events on equity market volatility across publicly traded corporations. The volatility influence of these cybercrime events is shown to be dependent on the number of clients exposed across all sectors and the type of the cyber security breach event, with significantly large volatility effects presented for companies who find themselves exposed to cybercrime in the form of hacking. Evidence is presented to suggest that corporations with large data breaches are punished substantially in the form of stock market volatility and significantly reduced abnormal stock returns. Companies with lower levels of market capitalisation are found to be most susceptible. In an environment where corporate data protection should be paramount, minor breaches appear to be relatively unpunished by the stock market. We also show that there is a growing importance in the contagion channel from cybersecurity breaches to markets volatility. Systematic weakness in the existent mechanisms for cybersecurity oversight and enforcement could be improved through the ring-fenced incentivisation of both current and ex-hackers. Their expertise is central to the identification of weak corporate cybersecurity practices.

Examining the relationship between formal RMF training and perceptions of RMF effectiveness, sustainability and commitment in RMF practitioners

The US Federal Information Systems Modernization Act (FISMA) included a mandate for the National Institute of Standards and Technology (NIST) to modernise and create new methods of strengthening the US Government’s cyber security posture. NIST answered this call with the creation of the risk management framework (RMF). RMF has received criticism and has been viewed as ineffective and a potential failure. This quantitative research investigated the relationship between receiving formal RMF training and perceptions of RMF effectiveness, RMF commitment and RMF sustainability. The research proposed that the receipt of formalised RMF training would increase the perceptions of RMF effectiveness, RMF commitment and RMF sustainability in RMF practitioners. A convenience sample of 81 RMF practitioners responded to an online survey assessing perceived competence of RMF effectiveness, RMF commitment and RMF sustainability as well as the amount of formal RMF training hours they had received. The data was analysed utilising statistical methods of descriptive statistics, analysis of variance (ANOVA) and Pearson’s correlations. Based on the results of this study, a significant, positive relationship exists between the receipt of formalised RMF training and perceptions of RMF effectiveness. Statistical significance can be seen in ANOVA tests where there was a significant difference in the mean effective perceived competency scales (PCS) scores among those with varied levels of formal RMF training (MS = 5.388), (F [2,78] = 3.645, p < .05). Pearson’s correlation also indicated that there was a significant positive association with the effective PCS score and the amount of training received category (r = .253, n = 81, p = .023). Understanding the relationship between perceptions of RMF effectiveness and the receipt of formalised RMF training may be helpful in driving effective RMF implementation throughout the US Government and contractor community, minimising the likelihood that US Government systems are compromised via cyber security breaches.

The Relevance and Applicability of Cybersecurity Laws with Regard to Data Storage on Board Satellites and on the Ground

Cybersecurity is a growing concern in the space sector, with satellite transmission interference and unauthorized access to data being the most common threats against space systems. This article will focus on the latter and on the cybersecurity laws that, albeit in their infancy, aim at protecting against such risks. In particular, this article will assess whether the existing cybersecurity regulations are pertinent to the protection of data stored onboard satellites in outer space and on ground facilities. It will specifically refer to the context of the EU Directive on Security of Network and Information Systems (EU NIS Directive), the US Internet of Things Cybersecurity Improvement Act (IoT Cybersecurity Act), and the Tallinn Manual on the International Law Applicable to Cyber Operations (Tallinn Manual 2.0), so as to assess their connection to the current methods of data storage. Towards this end, the relevance of the said laws and their competence in ensuring adequate standards of protection against cyber threats and security breaches will be argued. On the one hand, cybersecurity regulations are designed to safeguard the integrity of data systems from external tampering. On the other hand, it has not yet been established whether the scope of these laws extend outside the territorial sovereignty of States or in outer space, all while cyber operations in the framework of space activities may appear in various forms. The purpose of this article is to determine whether the regulatory regime in force is able to address the challenges arising from the increasing connectivity of satellites and satellite systems, which make them vulnerable to cybersecurity risks. In doing so, it will mainly focus on the notions of an information system, service provider, and cyber threat within the structure of space data systems.

Cybersecurity Investment Allocation for a Multi-Branch Firm: Modeling and Optimization

Network interconnection and information sharing among firms and their departments expose them to cybersecurity breaches. Traditional cybersecurity studies have paid little attention to the reallocation of security investment within firms. This paper proposes a mathematical model for optimal allocation of cybersecurity investment among headquarters and branches with budget constraints. The differences in size of information sets and system interconnection have been taken into account. The responses of optimal allocation to internal and external factors, such as the portion of branch information set, the propagation probability, the budget constraints, and the intrinsic vulnerability, have been studied in deep both theoretically and numerically. Analysis results indicate that the group will give priority to protecting headquarters when the total budget is small and intrinsic vulnerability is high. The security investment allocated to each branch increases with budget, propagation probability and portion of information set, but never exceeds 1 / ( n + 1 ) of total budget. Numerical simulations also verify that security information sharing among headquarters and branches can help improve the efficiency of security investment in the whole system. Furthermore, the findings of this paper will draw attention to the reallocation of cybersecurity investment within a business group and help cybersecurity managers to develop investment allocation strategies and policies.

Building a culture of supply chain transparency and real-time data : Adapting to the living supply chain

Many organisations feel uncomfortable with the idea of visibility as a transformative element that will drive supply chain improvements. While the concept of velocity seems to be widely adopted, there are a great number of excuses around why visibility is not possible within their industry, organisation or business function. Part of this hesitancy may have to do with the massive hype cycle that exists today around ‘big data’, ‘digitisation’, the Internet of Things (IoT) and artificial intelligence (AI). These terms have proliferated to the point where executives are effectively paralysed, not knowing how to proceed and unsure of how to justify investments due to the lack of any return on investment (ROI). Further, the challenges of data governance and integration are causing many executives to halt in their tracks, as the idea of ‘pumping our bad data through the Internet’ is cause for consternation. For instance, a group of pharma executives had a major discussion and were unsure if good manufacturing practices (GMP) data could be shared, if it had not yet been validated. The challenge for many of these organisations is that there is no clear roadmap for adoption of real-time data transformation. The technology is not the challenge — the real issue has to do with the shift in mindset, change management and governance that exists as data becomes more transparent across multiple tiers of suppliers and customers. The legal implications are also causing uncertainty, as are the ramifications of exposing one’s data in the face of recent cyber security breaches. The issue of exposing one’s data to potential legal issues is also a consideration. Most importantly, executives do not have a clear picture of the shift in skill sets, talent, capabilities and new job roles that will be affected by a broader set of technological shifts towards digitisation and real-time living supply chains. This paper proposes that several key cultural components of an organisation are required to adopt to a digital ecosystem.

Cybersecurity breaches and cash holdings: Spillover effect

AbstractThis paper shows that firms significantly increase cash holdings after they have experienced a cybersecurity attack, and this behavior persists for years. A cyberattack increases cash holdings from a base level of 23% of assets to 26.87%. Similar firms, defined by industry and geographical proximity also increase their cash holdings. Suppliers of attacked firms are also affected. Overall, the results of this study indicate that the detrimental effects of a cybersecurity breach are not isolated to the attacked firms, and peer firms are quick to follow in taking precaution.

Assessing the Value of Executive Leadership Coaches for Cybersecurity Project Managers

With the complex nature of impacts of cybersecurity breaches, it is critical that organizational have cybersecurity project managers that can make sound managerial and leadership decisions. Often cybersecurity project managers act quickly with managerial decisions at work. When time is of the essence, strategic thinking, strategic communication, and strategic decision making are critical to organizational effectiveness and productivity. Decision making and strategic communications are just a few skills that executive leadership coaches can teach. This article explores the values and potential benefits of executive coaching as a leadership development tool for information technology and cybersecurity project managers.