Cybersecurity Research Articles

Emerging Trends in Online Privacy and Cyber-Security: A Comprehensive Review

The digital era has ushered in extraordinary advancements in generation, observed through a simultaneous surge in challenges referring to online privacy and cyber security. This comprehensive review paper navigates via the dynamic landscape of those vital domains, unravelling emerging trends that form the future of safeguarding digital interactions and records. The exploration spans modern encryption technology, the mixing of synthetic intelligence in cyber security defences, the evolving regulatory frameworks surrounding privacy, and the intersection of rising technologies with safety risks. By scrutinizing the cutting-edge cyber chance panorama and foreseeing destiny trajectories, this review offers a nuanced understanding of the multifaceted dimensions surrounding on line privacy and cyber security. It is a valuable aid for individuals, corporations, and policymakers looking for to navigate and give a boost to their positions in an increasing number of interconnected and digitally-dependent worlds.

A Novel GAN-based Chaotic Method with DNA Computing for Enhancing Security of Medical Images

Medical images are utilized to diagnose patients' health conditions. Nowadays, medical images are sent over the internet for diagnosis purposes. So, they should be protected from cyber attackers. These medical images are sensitive to any minor changes, and the data volume is rapidly increasing. Thus, security and storage costs must be considered in medical images. Traditional encryption and compression methods are ineffective for encrypting medical images due to their high execution time and algorithm complexity. In this paper, a novel 2D-chaos and Generative Adversarial Network (GAN) with DeoxyriboNucleic Acid (DNA) computing is proposed for generating encryption keys and improving the security of medical images. The proposed scheme uses GAN and 2D-chaos to generate the private key and diffusion process. The pixel values of the original images in the proposed schemes are shuffled using Mersenne Twister (MT) to improve the security of medical images. Moreover, the novel 2D-Chaotic Tent Map (2D-CTM) method is used to construct the key while performing XOR-based encryption. The proposed model has been tested on different medical images, namely the COVIDx-19 X-ray images, the malaria microscopic images, and the brain MRI images. The experiment results have been evaluated using performance metrics, namely key space, histogram analysis, entropy, key sensitivity, robustness analysis, correlation, SSIM, and MS-SSIM. The outcomes demonstrate that the proposed scheme is more effective than the state-of-the-art schemes.

Effects of cyber-security and trust issues on consumers’ intention to use E-commerce systems in rural South Africa

The adoption and use of ICT have increased drastically in developed countries, but it cannot be said that it lags in developing countries. ICT evolution has introduced e-commerce services for users, but these services fail because of low user acceptance and user attitude, especially in developing nations. The security and trustworthiness of e-commerce are known to be of the most significant concern to people intending to use e-commerce services. The study looked at the role of individual characteristics on how cyber-security and trust issues affect non-users of e-commerce systems' intention to use e-commerce systems in South Africa. The effect of cyber security on consumers’ intentions and actual use of e-commerce systems was examined. This study used a quantitative research approach. The findings revealed that perceived security and perceived trust was the primary concern for non-users of e-commerce intentions. It was shown that e-commerce system users are still concerned about security, even though they intend to continue using e-commerce systems. For the success of e-commerce in rural communities, the government needs to join with retailers and SMEs to start awareness campaigns that will clarify how e-commerce systems work and eradicate negative perceptions of e-commerce systems.

Addressing the necessity of cybersecurity literacy: the case of ETTCS CyberTeach project

Purpose The purpose of this study is to present actions and initiatives, developed within the scope of the Empowering Teachers to Trigger Cybersecurity at Schools (ETTCS) CyberTeach Erasmus Project, to enhance cybersecurity literacy through innovative digital content and contemporary Learning Management System (LMS) platform. Design/methodology/approach The concept of cybersecurity literacy has become increasingly crucial in recent years, as the digitization of most human activities is being completed within the framework of the 4th Industrial Revolution. Almost all devices, vehicles and services in the near future will be interconnected to the internet and operate on advanced computing platforms. The benefits of these technological advancements are evident, as are the potential risks. To this end, organized cybercriminals, black hat hackers and state-sponsored actors may attempt, through various cyberattacks, to steal personal data, cause road accidents in connected autonomous vehicles and, in general, disrupt critical infrastructures. Cybersecurity is a growing concern when it comes to digitalization and cloudification. This way, digital assets must be conveniently protected to avoid any concern about their confidentiality, integrity and authentication. Therefore, the ability of every citizen to use the internet and smart devices wisely and securely is one of the most fundamental skills they should possess. In this work, the authors present actions and initiatives, developed within the scope of the ETTCS CyberTeach Erasmus Project, to enhance cybersecurity literacy through innovative digital content and contemporary LMS platform. A new approach to teach cybersecurity, based on innovative teaching methods, is presented to prepare future citizens and their teachers to keep up with cybersecurity issues in an efficient manner. To this end, the authors propose ways to reach cybersecurity literacy, giving use case examples and proposing the necessary digital skills. Findings A new approach to teach cybersecurity, based on innovative teaching methods, is presented to prepare future citizens and their teachers to keep up with cybersecurity issues in an efficient manner. To this end, the authors propose ways to reach cybersecurity literacy, giving use case examples and proposing the necessary digital skills. Originality/value This work demonstrates a new methodology to infuse cybersecurity awareness into teachers so that they can train and prepare their students accordingly. The authors identify the teacher as the critical link between a young generation of digital natives, who consider the internet as a utility, and the most experienced information technology security experts striving to enforce good cybersecurity practices among users.

Ontology of Protection Motivation Theory on Digital Risk–A Systematic Literature Review

The world of technology is advancing at a breakneck pace. There is no doubt that the convenience of this technology simplifies and expedites everything. The services made available with digitization technology are vast to start with, such as government services, online sales, e-learning, e-banking and many more. Among the areas of importance that shall be highlighted via this article would be any routines involving digital payments. The availability of digital payments facilitates the buying process, business transactions, and bill payments, among other things. Risks related to digital payment usage shall be accelerated if individuals lack experience, disclosure, and much more information related to the procedure of digital payments itself. Not to mention, the risks of cyber security hacking which also on the rise courtesy of the increasing usage of digitalized technology per se. As a result, risks that occur will negatively affect the public's perception, trust and confidence. Simultaneously, this will impact the economic environment, business, and society. As a result, precautionary behavior among customers shall be studied rather than technology acceptance. The protection motivation theory (PMT) shall be adopted for this study since it is well-suited to identifying users' adaptive behavior towards the usage of technology as well as determining whether or not they are aware of the risks associated with the relevant technology involved. The study uses the method of Systematic Literature Review using 11 extant studies to evaluate the protection behavior of digital payment risk.

Evolving cybersecurity of AI-featured digital products and services: Rise of standardisation and certification?

The field of cybersecurity has changed dramatically since the Cybersecurity Strategy for the Digital Decade was presented by the European Commission and the High Representative of the Union for Foreign Affairs and Security Policy in December 2020. The Cybersecurity Strategy highlights the potential of AI as a new technology, but also the need for cyber security of AI technology. Indeed, since the strategy was adopted, AI has shown that it has enormous potential for growth, but also several risks and vulnerabilities that this new technology brings. The paper analyses the shift and further development in the field of cybersecurity of digital products and services, AI itself as a technology, as well as products and services that will contain an AI component. In our opinion, the way to ensure that not only AI technology itself, but also products and services are cyber-secure, is to achieve a high level of standardisation of best practices, as there are many gaps in this area. The adoption of technical standards will fully form a path for conformity assessment and certification of not only AI systems but also AI-featured digital products and services. However, the current regulatory trend is to adopt a comprehensive legal regulation of AI even before such technical standards are fully developed and adopted. We consider this risky. Despite the well-intentioned effort to define and regulate AI, the purpose set forth in the AIA may not be achieved, as the requirements adopted in this way can very quickly become unnecessarily burdensome or even outdated due to increasing technological development. The proof of this is also the recent rise of large ML models, known as foundation models, which significantly changed the previous understanding of the creation of AI systems. It will be the technological development of AI, AI specific standardisation, and subsequent certification of digital products and services, which will govern future activities in building Europe's cyber resilience.

Digital Warfare: The Evolution of U.S. and Russian Cybersecurity Strategies

This article will explore the evolution of U.S and Russian cyber security strategies As the world becomes increasingly interconnected, the importance of cybersecurity has surged, particularly in the context of geopolitical rivalries. This article explores the evolution of cybersecurity strategies employed by the United States and Russia, highlighting how historical tensions have shaped their approaches to digital warfare. From the early days of the internet to the sophisticated cyber operations of 2024, the U.S. and Russia have engaged in a complex interplay of offense and defense, employing advanced technologies and strategies to protect national interests. The article examines key incidents that have defined their cybersecurity landscapes, including state-sponsored cyberattacks, espionage efforts, and the manipulation of public opinion through disinformation campaigns. By analyzing the motivations, tactics, and responses of both nations, this research aims to provide a comprehensive understanding of the dynamics of digital warfare and its implications for global security. Ultimately, the findings underscore the necessity for robust international cooperation and the establishment of norms to mitigate risks associated with cyber conflicts, as both nations continue to navigate this evolving battlefield.

Quantum Networks and Cyber Security. A Simulation Case Study for Point-to-Point QKD Links

Quantum Networks and Cyber Security. A Simulation Case Study for Point-to-Point QKD Links

Cybersecurity Threats in Healthcare IT: Challenges, Risks, and Mitigation Strategies

The healthcare industry's reliance on digital technology to improve patient care, operations, and performance has exposed it to cybersecurity threats. The extensive capture, storage, and transmission of confidential data by healthcare institutions has led to a significant prevalence of cyber-attacks. The intersection of healthcare and information technology presents considerable challenges, with patient privacy, the security of medical devices, and the continuity of essential healthcare services all at risk. This study offers a contemporary contextual analysis of IT cybersecurity concerns within the healthcare sector. It employs a systematic methodology to delineate critical risk factors and threats, the strategies they might utilize to attain their compromise aims, and the repercussions they may impose on healthcare delivery. It also explores the measures and guidelines to address this risk. The study highlights the existence of many threats experienced by healthcare organizations, such as data theft and leakage, ransomware, cyber-attacks in different forms, and contaminated medical equipment. One prominent example is the WannaCry attack on the United Kingdom's National Health Service in 2017. According to the survey, there is a severe scarcity of qualified personnel in healthcare organizations who can defend against cyber threats effectively and efficiently, underscoring the urgent need for skilled professionals in cybersecurity. This analysis also discusses various considerations concerning achieving high availability and protecting data in healthcare businesses. It examines how emerging applications like IoMT enhance the quality of medical services for patients and the security challenges these devices pose. The report evaluates the sufficiency of existing regulatory guidelines in addressing emerging dangers, including HIPAA vulnerabilities. The current definitive framework underscores the critical importance of enhancing cybersecurity within healthcare IT. It elucidates optimal strategies for mitigating cyber hazards by promoting technological prevention, staff training, and adherence to organizational policies. The work emphasizes the necessity for ongoing research, the establishment of collaboration between medical professionals and IT security experts, and the formulation of effective strategies to protect patient information and ensure the continuity of healthcare delivery in the face of increasing cyber-attack threats in digitalization.

The Russian invasion of Ukraine and changes in MEPs’ conceptions of security

AbstractOptions of organizing security are often determined by how it is conceived. The paper focuses on how European security has been discussed in the European Parliament in response to the Russian annexation of Crimea in 2014 and the Russian invasion of Ukraine in 2022. Drawing on parliamentary debates and meaning-making of security, we construct a threefold argument. Firstly, when MEPs discuss whose security needs to be addressed, we observe no significant changes between 2014 and 2022, but a decrease in the imagined distance between the EU and Ukraine and increase in the animosity toward Russia. Secondly, we show that security is continuously defined more broadly and extends to issues such as food, cyber, and civilian security. Finally, organizing security is increasingly viewed in competitive terms as opposed to a cooperative approach with Russia and has a strong focus on the EU’s independent agency in 2022.

Cybercrime: Psychological Tricks and Computer Securities Challenges

Several studies agree that traditional ways of preventing cybercrime, by applying common computer security techniques such as passwords, firewalls and anti-virus, are no longer effective tools/methods for preventing cybercrime. Moreover, the empirical studies evidence that the most effective cybercriminals’ technique is the phishing. Phishing is the cybercriminals means of entry or technique that devote both psychological and technical tricks to deceive the service users (individual or organizations) to become a victim of cybercrime. In that sense, the individual or organization (victim) became the enabler or catalyst of their own risk (cyberattack). The study established Psycho-Cybercrime Solution (PCS) algorithmic Model that detects psychological tricks in the phishing attack. The PCS model is the awareness and preventive model that provides the early warnings to the service users. The PCS model was tested in 40 e-mail messages, 20 from the author’s Gmail and 20 from Yahoo accounts and its results show the best fits. The study finds that the phishing attacks are psychologically and technically tricked. The common psychological tricks are fear, urgency, Authority, familiarity, curiosity, social proof, emotional appeal and trust, and the technical tricks are E-mail, Domain and DNS spoofing, URL manipulation and link shortening. Consequently, the study concluded that the phishing is the initiator or predecessor of other cybercrimes; it is a cybercriminal entry mean technique, which most cybercrimes start with phishing attacks. Hence the avoidance or prevention of phishing will consequently reduce the incidence of other cybercrimes. Therefore, we recommend the adaption of the PCS algorithmic model in cybercrime investigation and in community awareness campaign on cybersecurity issues. More specifics, cybersecurity stakeholders such as financial institutions, learning institutions, revenues authorities, communication service provider companies, healthcare centers, security organs, e.g., law enforcement organs and others to accommodate the PCS model their security strategy plans at their organizational levels. This will reduce the risks cyberattack and hence improve their organizational performance and customer trust.

Federated inception-multi-head attention models for cyber-attacks detection

<span lang="EN-US">With the proliferation of internet of things (IoT) devices, ensuring the security of these interconnected systems has become a critical concern. Cyberattacks targeting IoT devices pose significant threats to individuals and organizations due to the generation of vast amounts of data across many connected devices, which traditional centralized methods cannot solve. Federated learning (FL) could be a promising solution to mitigate privacy concerns associated with centralized approaches and address cybersecurity concerns. This paper uses FL and deep learning (DL) approaches to cybersecurity in IoT applications. The goal of cyber security is achieved by forming a federation of acquired and shared models at the head of the various participants. We use inception time and multi-head attention (CNN) algorithm based on FL to detect cyber-attacks and avoid data privacy leaks under two distribution modes, namely IID and Non-IID. In contrast, the FedAvg and FedMA algorithms aggregate local model updates. A global model is produced after several communication rounds between the IoT devices and the model parameter server. Cyber threats are simulated using edge-IIoT datasets. Experiment results show that the federated inception model's best global accuracy was 93, 91%, and 93, 49% using multi-head attention.</span>

Factors That Influence Cybersecurity Compliance Behaviours by Bank Employees: A Case of Banks Operating In Kenya

Digitization of transactions in Banks has developed exponentially since the advent of the internet technology. This has brought about efficiency and high quality service delivery at all times. However, cyber threats also continue to grow exponentially in spite of various initiatives to counter the threats. There are numerous technology initiatives to address the issue of cyber threats but the problem still persists. There is very limited research on how to leverage on human behaviours to effectively improve Cyber security compliance behaviours in Banks. Investigating Cyber security Compliance behaviours in Banks has therefore become inevitable. The main purpose of this study was to determine the factors that influence cyber security compliance behaviours in banks operating in Kenya. This was accomplished using a model that was based on an integration of three theories: Institutional Theory, the Protection Motivational Theory (PMT) and the General Deterrence Theory (GDT). In order to empirically test the relationships between the independent and dependent variables, data were collected from 75 purposively selected bank employees in Kenya. The Research was carried out using the mixed (both quantitative and qualitative) approach and survey tools used to collect data were verified for reliability and validity before being used. Data analysis was carried out using SPSS Version 25.0, MS Excel 2013, and WarpPLS (SEM) Version 7.0. The findings of our study indicate that the direct paths from the independent variables “Normative pressure” (p = 0.026, β = 0.213), “Self-Efficacy” (p < 0.001, β = 0.440), “Punishment certainty” (p = 0.024, β = 0.217), “Age” (p = 0.013, β = 0.243), “Prior experience with computers” (p = 0.004, β = -0.284) were found to have a positive, direct and significant influence on a bank employee cyber security compliance behaviours. “Top management commitment” was found to partially mediate between self-efficacy and Cyber security compliance behaviours. Bank management may find the results useful for future policy formulation in relation to cyber-security compliance behaviours. Researchers and scholars may also find the results useful in terms of contribution to the body of knowledge and further investigation to fill the gaps identified by the study.

Digital hygiene skills and cyberbullying reduction: a study among teenagers in Kazakhstan

Digital hygiene skills and cyberbullying reduction: a study among teenagers in Kazakhstan

Intelligent Cyber Defense: Exploring the Role of AI in Safeguarding Digital Assets

Abstract: In a modern digital environment, cyber threats are one of the main problems that pose a serious threat to the attacks on digital assets' security. To handle this problem, the marriage of artificial intelligence (AI) technologies into such cybersecurity plans has been introduced as an innovative solution to reinforce defense capacities. This work discusses how the AI that advocates cyber security can act against malicious acts. The immediate picture begins with describing quickly growing cyber threats and crucial requirements for defense procedures development. This part moves on to a general overview of AITbased cybersecurity methods consisting of machine learning, natural language processing, and anomaly detection. The abstract demonstrates the capabilities of AI-driven solutions through the use of illustrative figures and case studies showing the power of this technology in extracting threats in real time, preventing them proactively, and automating incident response. Besides that, normative and law issues around AI use in cyber security are discussed briefly, with a clear accent on the necessity of clear and accountable governance. The abstract of this paper wraps up by addressing issues of the existing state and possible developments in AI-supported cyber defense, emphasizing the uniqueness of the AI technologies in this field for ensuring necessary security measures against cyber threats, which could change or evolve further in time.

Machine Learning for Aortic Stenosis: Enhancing Diagnostic Accuracy and Security in Health Information Systems

Aortic Stenosis (AS) is a prevalent and potentially life-threatening cardiovascular condition that requires accurate diagnosis for optimal management. Traditional diagnostic methods, while effective, face limitations in terms of precision, timely detection, and clinician workload. The emergence of Machine Learning (ML) offers an innovative solution to these challenges, enhancing diagnostic accuracy and improving patient outcomes. This article explores how ML algorithms can be utilized to refine AS diagnosis, particularly through medical imaging and predictive modeling. In addition, the integration of ML in health information systems must be coupled with robust data security measures to protect sensitive patient information. We discuss the intersection of machine learning and healthcare IT security, focusing on innovative methods for safeguarding health data while improving diagnostic efficiency. The paper examines various ML techniques applied to AS, evaluates their impact on clinical workflows, and identifies the security protocols necessary to ensure compliance with privacy regulations. Finally, the study presents the potential challenges and future directions for integrating ML and health information security in clinical practice.

Quantum-enhanced algorithms for real-time processing in cryptographic systems: A path towards post-quantum security

New technologies such as quantum computing present a major challenge to the current cryptographic systems; thus, quantum-resistant techniques are required. This work describes a new approach for adapting QE schemes to real-life IT security applications, giving a glimpse of the way to post-quantum security. Hence, the architecture proposed here incorporates classical and quantum methods to present a vast enhancement in speed and the stability of security. The system seeks to solve this problem using a hybrid quantum-classical computing strategy. It achieves a 470 percent performance improvement in latency while withstanding both classical and post-quantum attacks concurrently. Field experiments and numerous tests for the accuracy and practicability of the framework established its elasticity and robustness. This research suggests many directions for further research – improving the efficiency of merging quantum-classical users, studying the adaptive quantum algorithms issue, and employing machine learning technology for the identification of threats. The applicability of quantum-enhanced cryptographic processing in producing practical and commercially viable technology highlights the significant advances that have been made in guaranteeing the security of sensitive applications in the coming years, including commerce and appeals. The findings of this type of work can be helpful to the continuous process of establishing post-quantum cryptographic standards and increasing the use of quantum-safe technologies.

The Influence of Cyber Security Knowledge, Cyber Security Awareness, and Behaviour Protection on Intention to Use Among Mobile Banking Users in Jakarta

Businesses and individuals, especially banks, must use risk assessment methods and preventive measures to protect mobile banking application users. Looking at these events, the researcher aims to see whether cyber security awareness, knowledge & behavior protection of users affect the intention to use mobile banking applications and whether these three variables are important for mobile banking users to understand in maintaining the security of transactions using mobile banking which will test the influence of these 3 variables on users' interest in continuing to use mobile banking even though users know the high risk if there is negligence in carrying out these 3 things and believing in the security of the mobile banking system in Indonesia. The population of this study is people who work in Jakarta. The respondents' answers were taken using Google Docs and distributed in general. The researcher obtained a total of 130 respondents. The data was processed using SPSS 27 with the analysis method of validity, reliability, and hypothesis test including the R2 test, F test, and T-test.

Cybersecurity Behavior in the West Sumatra Universities

User cybersecurity behavior refers to the actions, habits, and decisions made by individuals when using technology and information that affect the level of security of the data and systems they access. Previous research has shown that user cybersecurity behavior is one of the leading causes of computer and information security issues in many organizations, particularly education. To address this issue, researchers must find solutions to improve user cybersecurity behavior within an organization. Therefore, this study aims to find the factors influencing user cybersecurity behavior in higher education institutions in West Sumatra in 2020. This study was conducted using a survey research method. A questionnaire was distributed to 155 respondents. The questionnaire consisted of 28 questions covering seven factors influencing user cybersecurity behavior. The survey data will be analyzed using the Structural Equation Model based on Partial Least Square. The research findings indicate that all variables, such as Misuse Prevention and Compliance, Body of Knowledge, Skill, Behavioral Intervention, Attitude, Security Compliance Behavior, and Technology, have significant relationships. The relationships between these factors will be shown in the framework to be developed. This indicates that the education sector in Indonesia is aware of cyber threats and the importance of security procedures in the workplace. For further research, a deeper exploration of specific security issues is needed to propose potential solutions or actions that can be implemented to improve user cybersecurity behavior in the education sector, particularly in Indonesia.

Trends in the Literature About the Adoption of Digital Banking in Emerging Economies: A Bibliometric Analysis

This study examines the trends in the literature about adopting digital banking in emerging economies. It is based on the concepts of digital transformation and technological adoption, which significantly impact the development of the banking industry. A quantitative approach was used through a bibliometric analysis using data from Scopus to achieve the objective. The search equation allowed 118 publications to be extracted and analyzed. The results show that digital banking in emerging countries is a growing field of research that has driven the introduction of new information technologies. The perceived usefulness of digital banking is a key factor in promoting its adoption in the market. Attributes such as security and trust were identified as affecting the level of user satisfaction. Most studies are based on technological adoption, where perceived risk, usefulness, and ease of use are key to understanding the intention to use these technologies. Some countries’ concerns about financial inclusion, cyber security, and trust in financial technology are evident. While digital banking has the potential to increase the coverage of financial services, there are concerns about cybersecurity risks and user data protection.