Cybersecurity Systems Research Articles

A Novel Approach for Block Chain Technology based Cyber Security in Cloud Storage Using Hash Function

Block chain is generic name to describe the technology used by Bitcoin and other digital currency to record and secure transaction. This technology enables a highly accessible ledger with greatly reduced risk for tampering. The dynamic immutable, data ledger makes ideal for real time monitoring of the shipment of goods. Cloud is an important of distributed storage system of networking. Cloud system need for security, storage management, minimize the cloud cost and fast storage could be improved. The security using new most development security system of block chain technology is used to improve the cloud security. The data owner to be uploads the data on web page and access the folder. The user has been accessing the data on cloud storage using encryption and decryption using block chain based cyber security system. the problem for security in cloud storage because data transmission and data sharing, the alternate for security solution using Post Quantum-proof cryptography algorithm is used to improve the encryption and decryption process and more tight security for block chain technology for the cloud system. The SHA-3 512 Hash function algorithm automatically generate the key for data security enhancements of cloud networks. Post Quantum-proof cryptography algorithm has been improved the encryption Performance and reduced the power consumption, and increase the Latency performance, and boost up the security performances. Finally Post Quantum-proof cryptography algorithm for well support for security system of the cloud networks. Even some passwords, which are often cited as the weakest link in cyber security, may not be necessary.

РОЗРОБКАМОДЕЛІ ФОРМАЛІЗАЦІЇ ПРОЦЕСУ ВИЯВЛЕННЯ ІНСАЙДЕРСЬКИХ КІБЕРЗАГРОЗ У БАНКАХ: ОНТОЛОГІЧНИЙ ПІДХІД

The article is devoted to developing an ontological model of the formalization of detecting insider cyber threats for banking institutions. This model's general requirements and criteria, elements and stages of construction were defined. As part of the model implementation, the structure of classes, relationships between them, characteristics of rules and restrictions, states of objects, temporal and spatial aspects, and aspects of authentication, access control, encryption and other areas of cyber security were proposed. In the modern realities of constantly growing cyber threats, developing effective means of their detection and countermeasures becomes a critical task for ensuring the cyber security of banking systems. The specificity of banking, where sensitive financial information is at constant risk, makes this problem particularly relevant. This is especially felt when solving tasks related to abuse of trust by internal users, so identifying insider threats becomes a significant challenge for banks. The difficulty of their detection is determined by several factors, such as the internal privileges of individuals with access to confidential information, as well as various traffic and intrusion methods. Therefore, this article aims to create a model for formalising the process of detecting insider cyber threats in banks based on an ontological approach. The development of an ontological model seeks to analyse and standardise knowledge about insider threats to improve the possibilities of their timely detection and reduce the reaction time to security events. Applying such an approach allows us to systematise and standardise knowledge about insider threats, defining relationships between concepts and objects in this context. As part of the research goal, the general requirements and criteria, elements and stages of building an ontological model of the formalisation of the process of detecting insider cyber threats in banks were determined. The structure of classes, relationships between them, characterisation of rules and restrictions, states of objects, temporal and spatial aspects, and aspects of authentication, access control, encryption and other areas of cyber security were proposed. The developed model is designed to solve the problems of identification, analysis and response to insider threats in the banking sector, contributing to increasing cyber security and responsibility in this crucial sector.

Firm-Level Pay Disparity and Breach Risk

ABSTRACT The 2008 financial crisis highlighted the significant, vertical pay disparity between chief executive officers (CEOs) and all other employees. Following equity theory, prior research finds negative associations between vertical pay disparity and job satisfaction and performance (i.e., more errors). We build on this research to investigate if vertical pay disparity between the CEO and employees/other executives is a previously unidentified determinant of data security breaches (DSBs). Results suggest that firms with large, vertical pay disparities are more likely to be breached, are associated with more DSBs, and are more likely to be associated with internal DSBs. We also find some evidence of remediation through narrowing the pay disparity between CEOs and employees/other executives after the DSB. Our findings contribute to the growing accounting information systems (AIS) cybersecurity literature, extend equity theory to a new context, and should be of interest to AIS governance researchers and stakeholders.

ARTIFICIAL INTELLIGENCE IN THE FINANCIAL SECTOR OF UKRAINE: A DRIVER OF DEVELOPMENT AND A FACTOR OF MODERNIZATION

It has been studied that the trigger of the transformation of the financial sector of Ukraine and its dynamic digitalization is artificial intelligence (AI), which plays the role of a driver of development and acts as a factor of modernization. It was established that innovations with the help of AI in the financial sector consist in the system's ability to automate data processing and calculations, which leads to acceleration, increased efficiency and expansion of financial operations. It has been established that AI can analyze large volumes of financial data, identify complex dependencies and forecast trends, facilitating strategic decision-making and management. It is noted that the use of AI in the financial sector of Ukraine allows to increase the precision of financial analysis and optimize a wide range of routine operations, which significantly reduces the time and resources of companies due to the automation of tasks, contributes to increasing the reliability of investment decisions and the efficiency of financial processes, identifying anomalies and patterns in financial data, as well as improving the cyber security system to protect against fraud and abuse. The advantages are outlined and certain shortcomings and risks that prevent the spread and use of AI in the financial sector of Ukraine are highlighted. This concerns, first of all, issues of ethics, transparency, unfair or discriminatory use of AI, as well as issues of confidentiality and protection of personal data. It was found that AI has limited capabilities in working with unstructured data and cannot always capture human emotions and context. It found that AI, despite its limitations in understanding context, is a powerful tool for Ukraine's financial sector, helping to increase the sector's competitiveness and efficiency by accelerating customer service, improving risk management and accurately forecasting economic trends.

Cybersecurity and Strategic Management

Against the backdrop of rapidly evolving technologies and increasingly complex communications networks, cybersecurity is becoming a key aspect of strategic planning. Protecting information, financial, reputational and other assets from increasingly frequent and sophisticated cyberattacks depends on the ability to develop and continually update a comprehensive, proactive approach that takes into account a wide range of factors. The state of national cybersecurity has become one of the key indicators of the level of development along with «classic» indicators (GDP, etc.). The recently emerged research area of «cybersecurity economics» is constantly being enriched with new knowledge and approaches.The article analyzes the risks to the cybersecurity system at different levels and the main measures to strengthen it, and assesses the dynamics of management trends. Key competencies relevant for professionals in this field are outlined.

Cyber security issues in Albanian higher education institutions curricula

Cybercrime and the phenomena accompanying, currently with international nature, targeting the main sectors of world economy, are main challenges facing individuals, families, societies and states, four main operators in the open market. An appropriate response to cybercrime, having a high and complete cyber security system, employing legal instruments, IT protocols and ISO standards related with this issue, is a priority. Undertaking this research, a review of curricula and syllabuses of economic, law and IT faculties of public and private higher university institutions in Albania have been done, as well as discussing the issue with lecturers of Cyber Security, Cyber Law and Quality Management discplines on these HUI’s too. Aims of this manuscript is evidencing the lack of scientific information about cyber security, cyber law and ISO standards for IT, Economy and Law faculty students in Albania. The importance of this manuscript is related on improving the current situation of now day’s students, which don’t have skills, knowledge and competencies to enter in the labour market, when cyber security issues are the main risks of public and private sector operators. This manuscript rises for the first time, awareness on offering a better curricula and syllabuses on the issue of cyber security in higher education institutions in Albania.

TECHNICAL REQUIREMENTS FOR THE PHYSICAL AND APARTMENT INFRASTRUCTURE OF THE MOBILE DATA PROCESSING AND STORAGE SYSTEM FOR THE DATA PROCESSING CENTRE OF THE CONTAINER TYPE OF FINANCIAL INSTITUTIONS, ENTERPRISES, ORGANISATIONS

In modern conditions, the amount of information is constantly increasing, and at the same time, the speed of doing business is increasing. According to Gartner Group estimates, the global average amount of user data per company is 120 terabytes. In turn, according to IDC calculations, last year 35 billion messages were sent in one hour in the world. If these numbers are taken into account, it turns out that one message accounts for approximately 3.4 Mв of information. To be successful, companies not only have to operate with large volumes of data, but also process it quickly and efficiently. At the same time, according to the opinion of the world's leading experts, there are about 40 key macrotechnologies in the world today that determine the level of the economy. These processes were significantly influenced by the specifics of the formation, constant development and transformation of cyberspace. In these areas, breakthrough achievements are predicted, first of all, in artificial intelligence, cloud technologies, internet of things, productivity and nature of computing devices, possibilities of storage, processing and transmission of large arrays of data and information (Big Data), means and technologies for their implementation on radically new principles. The capabilities and vulnerabilities of almost all modern infocommunication and cybernetic systems increasingly depend, in addition, on the growth of the interrelationships of various information systems and control systems among themselves in multiparametric, multidimensional cyberspace and their informational and cybernetic interpenetration, interaction and interdependence, etc. Therefore, taking into account the above, it is necessary to focus primarily on the creation of permanently functioning data processing centers (data centers), and under the conditions of our state's opposition to the aggressor country, to develop appropriate data processing and storage systems on mobile platforms. Another, quite significant and meaningful component is taking into account the modern structures of information protection and cyber security systems, which involve the use of a fairly powerful line of tools, both at the technological and software levels, the use of extensive relevant architectures, protection methods aimed at prejudice, detection and response to potential cyber threats.

Business Impact Analysis of AMM Data: A Case Study

The issue of Automated Meter Management (AMM), an integral part of modern energy smart grid systems, has become a hot topic in recent years. With the current energy crisis, and given the new approaches to smart energy and its regulation, implemented at the level of the European Union, the gradual introduction of AMM as a standard for the regulation and management of the distribution system is an absolute necessity. Modern smart grids incorporate elements of smart regulation that rely heavily on the availability and quality of the data generated or used during AMM as part of the smart grid. In this paper, based on an analytical view of AMM as a whole and guided interviews with the sponsors of each service and owners of each dataset, criteria are proposed and a Business Impact Analysis (BIA) is implemented, the results of which are used to determine security measures for the safe and reliable running of the AMM system. This paper offers a unique view of the AMM system as an integral part of modern smart grid networks from a data-driven perspective that enables the subsequent implementation and fulfillment of security requirements by ISO/IEC 27001 and national security standards, as the AMM system is also a critical information system under the EU directive regarding the cybersecurity of network and information systems, which are subject to newly defined security requirements in the field of cybersecurity.

Cybersecurity of photovoltaic systems: challenges, threats, and mitigation strategies: a short survey

Photovoltaic (PV) systems, as critical components of the power grid, have become increasingly reliant on standard Information Technology (IT) computing and network infrastructure for their operation and maintenance. However, this dependency exposes PV systems to heightened vulnerabilities and the risk of cyber-attacks. In recent times, the number of reported cyber-attacks targeting PV systems has increased significantly. This paper provides an overview of the cybersecurity challenges faced by PV systems, emphasizing their susceptibility to anomalies and cyber threats. It highlights the urgency of implementing robust cybersecurity measures to protect the integrity and reliability of PV installations. By understanding and addressing these challenges, stakeholders can ensure the resilience and secure integration of PV systems within the power grid infrastructure.

The Quality of E-Government in Population Service in Bandung 2021

This study explains the quality of e-government in population service in Bandung City. E-Government is an activity or activity utilizing tools in the form of information technology in helping implement a government system so that it can run more efficiently. However, e-Government are still not running optimally. The theory used in this study is the e-Government Quality (e-GovQual). This study uses a qualitative descriptive research method. <em>The data sources used are primary data and secondary data. As well as data collection techniques carried out by researchers, namely observation, in-depth interviews, and documentation. </em>Based on the research that has been done, it is concluded that the quality of e-government at the Bandung City Population and Civil Registration Office is still not running optimally, indicated by data leaks and cybersecurity systems that are not yet qualified and services that can only be accessed via Android. Also, the features in the application cannot be used in real-time, but are opened only if there are human resource (HR) constraints in e-government management, which are also still very limited.

Uncovering advances in final end-user applications, user acceptability, quality assurance, and digital technologies for 3D-printed oral drug delivery systems

The increasing demand for innovative drugs and personalized treatment is radically changing the pharmaceutical industry, where significant efforts in research and development (R&D) are taking place. Three-dimensional (3D) printing offers interesting solutions for these demands, solving some of the limitations of current manufacturing processes. 3D-printed oral drug delivery systems can improve the delivery of pharmaceutical substances in the body, and the dynamic interaction between pharmaceutical ingredients, while providing personalized formulations, geometries, sizes, controlled release rates, and increasing time in the gastrointestinal tract. Advances in 3D printing for oral drug delivery systems have been investigated in terms of processes, materials, and effects. However, it is important to also consider other topics, such as the specific needs of the users to enhance drugs acceptability, the quality control processes due to the absence of approved guidelines, and the digitalization of the industry to respond to future challenges of the digital era; nevertheless, there are no studies that comprise these elements. To fill this gap, the aim of this research is to identify advances in terms of final end-user applications, quality assurance, user acceptability, and digital technologies for 3D-printed oral drug delivery systems. To accomplish this, a competitive technology intelligence (CTI) methodology was applied, where scientific literature was retrieved from the Web of Science covering the period from January 1, 1900, to May 1, 2023. For this task, a scientometric analysis was performed, and the main trends involving the previously mentioned elements were identified. In the first case, 3D-printed oral drug delivery systems are being designed for different purposes, including as anti-deterrent formulations to decrease the global problem of opioid abuse. For quality assurance, the results demonstrated the implementation of approaches like quality by design to increase the quality of the 3D-printed dosage forms. In the case of user acceptability, the interest in creating more attractive formulations was identified; for this, innovative technologies such as ColorJet 3D printing are being used. Lastly, regarding digital technologies, the importance of cyberattacks while sending the 3D-printed dosage form file to the 3D printer is highlighted; for this, cybersecurity systems are being studied. The outcomes of this study can add value to researchers, organizations, and investment firms interested in the R&D of novel and personalized treatments, and the areas of 3D printing, pharmaceutical, medical, and health.    

Formation of anti-terrorist competencies of specialists of the national cyber security system

Formation of anti-terrorist competencies of specialists of the national cyber security system

The Analysis of Cyber security in Intelligent Transportation Systems Using Multi-Objective Optimization on the Basis of Ratio Analysis (MOORA) Method

Cyber security has become a critical concern in today's interconnected world, with the escalating frequency and sophistication of cyber threats. To effectively protect digital assets and sensitive information, organizations must adopt robust cybersecurity systems. The Multi-Objective Optimization on the basis of Ratio Analysis (MOORA) method has emerged as a promising approach for evaluating and improving cybersecurity systems.This research presents an innovative application of the MOORA method to enhance cybersecurity systems. The MOORA method is a Multi-Criteria Decision Analysis (MCDA) technique that enables decision-makers to rank alternatives based on multiple criteria, ultimately aiding in selecting the most suitable solution. In the context of cybersecurity, various evaluation criteria are considered, such as threat detection accuracy, incident response time, scalability, resource utilization, and cost-effectiveness.Through the integration of the MOORA method, this study offers a systematic and quantitative assessment of cybersecurity systems, addressing the limitations of traditional evaluation techniques that often overlook the complexity of cyber threats. By prioritizing the criteria most relevant to an organization's specific needs and risk profile, decision-makers can make informed choices about investing in the right cybersecurity measures.The practical implementation of the proposed MOORA-based cybersecurity system is demonstrated using real-world data from a diverse set of organizations. The results showcase the effectiveness of the method in guiding cybersecurity decision-making, leading to the identification of optimal solutions that strike the best balance between performance, cost, and resource allocation.The alternatives are A1 is Providing only essential information and continuing to use the service or product, A2 is Giving wrong or partially wrong information as personal data (misinformation), A3 is Closing the account, disposing of, or deactivating the smart device or application and A4 limiting the use of the application, financial institution, or device. The Evaluation parameters are C1 is Low trust in the firm, device, or application, C2 is Poor referrals or negative word-of-mouth from previous users about the service or app, C3 is Negative previous online experience, C4 is Being tech-savvy, experienced, and knowledgeable about recent trends in data privacy and cybersecurity, C5 is The firm or institution not meeting essential privacy and security expectations, such as privacy policies, notices (cookies), seals, etc and C6 is Perceiving that the benefits outweigh the risks of disclosing information.The final result is Limit the use of application, financial institution or device, etc (A4) is got first rank and Provision of strictly necessary Information and continue the use of service or product (A1) is got lowest rank.

IRS-Driven Cybersecurity of Healthcare Cyber Physical Systems

Intelligent reflective surface (IRS) as one of the most potential 6G key technologies injects new vitality into the smart medical and health system by intelligently configuring the wireless communication environment and spawns the construction of a modern medical information system. Medical data security is a sensitive issue that hospitals are generally concerned about in recent years. There are great hidden dangers to information security in the environment of “cloud storage”. The IRS provides a new solution for enhancing the privacy and security of “cloud storage” medical file data, assisting in the efficient transmission and interconnection of information, and ensuring highly secure and uninterrupted services in healthcare-based cyber physical systems (CPS). Specifically, the modelling in this paper considers the situation where communication over multiple-input single-output (MISO) channel is eavesdropped by a patient spy holding a single antenna receiver, and additionally the patient spy is obscured by an obstacle. One of the multi-antenna base stations (BS) transmits independent data streams to doctors and keeps them secret from patient spies. By jointly optimizing the beamforming at the BS and the phase shift of the IRS reflection elements, the simulation analysis verifies that the introduction of IRS can effectively improve the privacy security of medical data.

A Comprehensive Analysis of the Worst Cybersecurity Vulnerabilities in Latin America

Vulnerabilities in cyber defense in the countries of the Latin American region have favored the activities of cybercriminals from different parts of the world who have carried out a growing number of cyberattacks that affect public and private services and compromise the integrity of users and organizations. This article describes the most representative vulnerabilities related to cyberattacks that have affected different sectors of countries in the Latin American region. A systematic review of repositories and the scientific literature was conducted, considering journal articles, conference proceedings, and reports from official bodies and leading brands of cybersecurity systems. The cybersecurity vulnerabilities identified in the countries of the Latin American region are low cybersecurity awareness, lack of standards and regulations, use of outdated software, security gaps in critical infrastructure, and lack of training and professional specialization.

Maritime Cybersecurity Education and Training at Nikola Vaptsarov Naval Academy

As of the beginning of 2021, a set of new requirements has been introduced by the International Maritime Organization (IMO), necessitating established rules and measures about the cybersecurity of the ship’s systems. That is to ensure a certain level of cybersecurity onboard, as well as re-occurring training of onboard staff, is required, to maintain cybersecurity measures. That leads to a new vector of postgraduate certification and namely – ships’ system cybersecurity and cybersecurity management. Its purpose is to provide the necessary knowledge and skills, related to fulfilling the requirements of the IMO. This paper examines some aspects of education and training of the ship’s crew regarding cybersecurity.

Cybersecurity Strategies for Safeguarding Customer’s Data and Preventing Financial Fraud in the United States Financial Sectors

As the financial sectors in the United States deal with expanding cyberthreats and a rising danger of financial crime, cybersecurity has become a top priority. This paper examines the crucial cybersecurity techniques used by financial institutions to protect client information and counter the growing risk of financial fraud. It proves that understanding common fraud tactics used to defraud financial institutions and customers, putting fraud detection and prevention techniques like anomaly detection and machine learning into practice, and using transaction monitoring and anti-money laundering tactics to spot and stop fraudulent activity are all necessary for preventing financial fraud. The paper begins by reviewing the common cyber dangers affecting the financial industry and the strategies used by cybercriminals to circumvent security precautions and take advantage of weaknesses. After looking at potential risks, the paper highlights the importance of proactive cybersecurity measures and risk mitigation techniques. It highlights crucial components of cybersecurity frameworks, including strong data encryption, multifactor authentication, intrusion detection systems, and ongoing security monitoring. This paper also emphasizes the value of educating and training financial institution staff members to increase cybersecurity resilience. It underlines the significance of building a strong security culture, educating personnel about potential dangers, and encouraging responsible management of client data. The study also explores the advantages of financial organizations working together and exchanging threat knowledge. It examines industry alliances, information-sharing platforms, and public-private partnerships as crucial methods for group protection against cyber threats. This paper highlighted the significance of artificial intelligence and machine learning in cybersecurity domain. It demonstrates how these technologies improve cybersecurity systems' capabilities by spotting irregularities and potential attacks. It emphasizes the significance of taking a proactive and dynamic strategy to securing client information and maintaining faith in the United States’ financial sectors. Overall, this paper provides a thorough overview of cybersecurity tactics crucial for protecting consumer data and avoiding financial fraud in the financial sectors across the United States. By taking a vigilant, team-based, and technology-driven strategy, financial institutions may strengthen their cyber defenses, protect the data of their clients, and defend the integrity of the financial system.

A high-accuracy phishing website detection method based on machine learning

The rapid development of e-commerce, e-banking, and social networks has made phishing attack detection one of the most critical technologies in all cyber security systems. To improve the efficiency of anti-phishing techniques, we present an improved predictive model based on machine learning. The proposed method uses six different algorithms; Logistic Regression, K-Nearest Neighbors, Naive Bayes, Random Forest, Support Vector Machine, and Extreme Gradient Boosting (XGBoost). The experiments are based on a public dataset of 58,000 legitimate websites and 30,647 phishing ones, including 112 attributes for each sample. Our evaluations in the feature selection process show that after balancing the dataset and dropping constant features, a noticeable improvement can be achieved. We conducted our evaluation found on eight major unique scenarios. The experimental results of our phishing websites detection (PWD) method indicate remarkable performances in which each algorithm reached an accuracy of more than 93%, and the XGBoost classifier outperforms others with 99.2% overall accuracy, 99.1% precision, 99.4% recall, and 99.1% specificity. In addition, the study achieved optimal run-time of about 1500 ms for the XGBoost algorithm without dimension reduction while using Principal Component Analysis (PCA) reduces it down to just 869 ms. As a result, the proposed approach would be practical in both offline and real-time applications.

Logistics 4.0 for supply chain performance: perspectives from a retailing case study

PurposeThis study considers the potential of logistics 4.0 for supply chain (SC) optimization in French retail. The authors investigate the implementation of Industry 4.0 technologies to optimize SC performance in the retail sector and SC's role in the digital transformation in supply chain management (SCM).Design/methodology/approach The authors first carry out a comprehensive bibliographic taxonomy to highlight the different existing digital tools. Based on this, the authors posed three research questions (RQs) and hypotheses to examine the contribution of logistics 4.0 in improving the performance of retail logistics. Then, the authors considered a case study of retail in France based on qualitative and quantitative analysis to answer all the RQs and examine the hypotheses.FindingsThe results showed that digital tools such as Cyber Security Systems (CSS), Big Data Analytics (BDA) and Blockchain (BC) technology are the most effective and appropriate tools to optimize the SC performance in retail.Practical implicationsThis research work showed that the implementation of these tools in retail can offer several benefits such as improved productivity, optimized delivery times, improved inventory management and secure real-time communication, which leads to improved profitability of the SC.Originality/valueThe study opens a door to develop practical roadmaps for companies that enable smart deliveries based on logistics 4.0.

Encrypted Model Predictive Control of a Nonlinear Chemical Process Network

This work focuses on developing and applying Encrypted Lyapunov-based Model Predictive Control (LMPC) in a nonlinear chemical process network for Ethylbenzene production. The network, governed by a nonlinear dynamic model, comprises two continuously stirred tank reactors that are connected in series and is simulated using Aspen Plus Dynamics. For enhancing system cybersecurity, the Paillier cryptosystem is employed for encryption–decryption operations in the communication channels between the sensor–controller and controller–actuator, establishing a secure network infrastructure. Cryptosystems generally require integer inputs, necessitating a quantization parameter d, for quantization of real-valued signals. We utilize the quantization parameter to quantize process measurements and control inputs before encryption. Through closed-loop simulations under the encrypted LMPC scheme, where the LMPC uses a first-principles nonlinear dynamical model, we examine the effect of the quantization parameter on the performance of the controller and the overall encryption to control the input calculation time. We illustrate that the impact of quantization can outweigh those of plant/model mismatch, showcasing this phenomenon through the implementation of a first-principles-based LMPC on an Aspen Plus Dynamics process model. Based on the findings, we propose a strategy to mitigate the quantization effect on controller performance while maintaining a manageable computational burden on the control input calculation time.