Cybersecurity Practices Research Articles

Exploring the grounds for cyber resilience in the hyper-connected oil and gas industry

This paper explores the offshore oil and gas industry as a case of an industry operating in demanding conditions with an imminent potential for catastrophic failure, undergoing major transformations driven by advances in digital technologies while being exposed to an increasingly aggressive threat landscape due to geopolitical changes. It is also a case of cyber-physical systems with tight couplings between digital changes which might be incited from virtually anywhere, and real-world, physical consequences. The exploration is aimed at understanding, based on interviews, to which extent the existing cyber security practices in the industry carries the potential to be strengthened by the application of resilience principles. An enhanced level of cyber security, denoted cyber resilience, is regarded as a crucial part for the industry to become able to close a strategic agility gap, in which they are at risk of falling behind in their response repertoire, becoming stuck and stale while trying keep up with an increasing rate of shocks through classical modelling and simulation. Resilience is, however, a concept with many meanings, originating from a diversity of academic discourses. The paper demonstrates the usefulness of analyzing the empirical data through an analytical framework of cyber resilience, a “resilience ABC”, accommodating a crucial distinction between robustness and resilience founded on adaptive capacities. Moreover, we find that closing the strategic agility gap requires a cyber resilience approach that is a mix of robustness and adaptive capacity, and that the gradual shift towards more emphasis on adaptive capacity requires a fundamental shift from seeing resilience-as-outcome as just an epiphenomenon of existing practice. In contrast, we see adaptive capacity as resilience-as-process, a phenomenon to study on its own terms. This also implies that cyber resilience management must move beyond a sheer assimilation with risk management. As access to real incident data may be limited, we also advocate the idea of training on scenarios at the boundaries of robustness.

Exploring IoT Vulnerabilities in a Comprehensive Remote Cybersecurity Laboratory.

With the rapid proliferation of Internet of things (IoT) devices across various sectors, ensuring robust cybersecurity practices has become paramount. The complexity and diversity of IoT ecosystems pose unique security challenges that traditional educational approaches often fail to address comprehensively. Current curricula may provide theoretical knowledge but typically lack the practical components necessary for students to engage with real-world cybersecurity scenarios. This gap hinders the development of proficient cybersecurity professionals capable of securing complex IoT infrastructures. To bridge this educational divide, a remote online laboratory was developed, allowing students to gain hands-on experience in identifying and mitigating cybersecurity threats in an IoT context. This virtual environment simulates real IoT ecosystems, enabling students to interact with actual devices and protocols while practicing various security techniques. The laboratory is designed to be accessible, scalable, and versatile, offering a range of modules from basic protocol analysis to advanced threat management. The implementation of this remote laboratory demonstrated significant benefits, equipping students with the necessary skills to confront and resolve IoT security issues effectively. Our results show an improvement in practical cybersecurity abilities among students, highlighting the laboratory's efficacy in enhancing IoT security education.

Exploring the influence of government social media on cybersecurity compliance: employee attitudes, motivation and behaviors

PurposeThis study aims to investigate the impact of employees’ engagement in government social media (GSM) on their cybersecurity compliance attitude, protection motivation and protective behavior, thereby contributing to effective cybersecurity practices at organizations.Design/methodology/approachA quantitative cross-sectional field survey was conducted to collect primary data in big cities and large provinces in Vietnam. The final data set of 323 responses was analyzed using the partial least squares-structural equation modeling approach to interpret the results and test research hypotheses.FindingsEngagement in GSM positively influences employees’ cybersecurity compliance attitude (ATT). Perceived threat vulnerability and response efficacy also contribute to a positive compliance attitude, although self-efficacy has a negative impact. Moreover, the cybersecurity compliance ATT significantly explains the information protection motivation, which in turn influences employee protective behaviors. However, the relationship between compliance attitude and protective behaviors is weak, unlike previous studies that found a strong correlation.Originality/valueAlthough recent studies have explored specific information security practices in corporate and home contexts, the influence of GSM on individuals’ cybersecurity behaviors has received limited attention because of its novelty. This study contributes to the existing body of knowledge by investigating the impact of GSM on cybersecurity behaviors. This study provides significant contributions to understanding social media’s effects of social media on individuals’ cultivation processes, by expanding upon the protective motivation theory and cultivation theory. The results lead to practical suggestions for organizational managers and policymakers so that they can enhance their understanding of the importance of cybersecurity, encourage the implementation of self-defense strategies and highlight the significance of threat and coping evaluations in influencing attitudes and motivations.

Islamic Perspectives on Cybersecurity and Data Privacy: Legal and Ethical Implications

In the rapidly evolving landscape of cybersecurity and data privacy, the interface between culture, ethics, and law plays a pivotal role. This study delves into "Islamic Perspectives on Cybersecurity and Data Privacy: Legal and Ethical Implications" to investigate how Islamic principles and values intersect with contemporary cybersecurity practices. Combining qualitative content analysis of Islamic texts with a quantitative survey, the research reveals a strong alignment between Islamic principles and modern cybersecurity norms, particularly in areas of privacy, honesty, and the prevention of harm. However, it also highlights the legal and ethical challenges that arise, such as reconciling the prohibition of 'gharar' and addressing the intersection of Islamic finance with digital transactions. The findings emphasize the need for inclusive and culturally sensitive approaches to cybersecurity, informed by a deeper understanding of Islamic ethics and jurisprudence.

Local government cyber insecurity: Causes and recommendations for improvement

AbstractIn this paper, we address several facets of the problem we call local government cyber insecurity—a problem that plagues such governments across the nation, if not the world. We describe this problem and discuss its manifestations in local governments. This is followed by our analysis of why, on average, local government cybersecurity is managed and practiced so poorly. Next, we discuss several constraints on local governments that may help to explain why so many of these governments are not able to provide highly effective cybersecurity. We then discuss steps that local governments can and should take to improve their cybersecurity, including adopting dedicated cybersecurity budgets, adopting several highly recommended cybersecurity policies, and following best cybersecurity practices.

Exploring Current Trends and Challenges in Cybersecurity: A Comprehensive Survey

Cyber security is the process of preventing unauthorized access, theft, damage, and interruption to computers, servers, networks, and data. It entails putting policies into place to guarantee the availability, confidentiality, and integrity of information and information systems. Cyber security seeks to protect against a variety of dangers, including as hacking, data breaches, malware infections, and other nefarious actions. Cyber security has grown to be a major worry as a result of the quick development of digital technology and the growing interconnection of our contemporary society. In order to gain insight into the constantly changing world of digital threats and the countermeasures put in place to address them, this survey seeks to study current trends and issues in the area of cyber security. The study includes responses from end users, business executives, IT administrators, and experts across a wide variety of businesses and sectors. The survey gives insight on important problems such the sorts of cyber threats encountered, the efficacy of current security solutions, future technology influencing cyber security, and the human elements leading to vulnerabilities via a thorough analysis of the replies. The most important conclusions include an evaluation of the most common cyber dangers, such as malware, phishing scams, ransom ware, and data breaches, as well as an investigation of the methods and tools used to counter these threats. The survey explores the significance of staff education and awareness in bolstering cyber security defenses and pinpoints opportunities for development in this area. The survey also sheds insight on how cutting-edge technologies like cloud computing, artificial intelligence, and the Internet of Things (IoT) are affecting cyber security practices. It analyses the advantages and disadvantages of using these technologies while taking into account issues like data privacy, infrastructure security, and the need for specialized skills. The survey also looks at the compliance environment, assessing how industry norms and regulatory frameworks affect cyber security procedures. The survey studies the obstacles organizations encounter in attaining compliance and assesses the degree of knowledge and commitment to these requirements. The results of this cyber security survey help to better understand the current status of cyber security and provide organizations and individual’s useful information for creating effective policies to protect digital assets. This study seeks to promote a proactive approach to cyber security, allowing stakeholders to stay ahead of threats and build a safe digital environment by identifying relevant trends and concerns.

“I knew it was a scam”: Understanding the triggers for recognizing romance fraud

AbstractResearch SummaryThis article investigates the contributing factors (or triggers) to a realization of romance fraud victimization, based on 1015 reports lodged with Scamwatch (Australian online reporting portal for fraud) between July 2018 and July 2019 (inclusive). The article examines the free text narrative of each report to propose five discernible trigger categories: further requests for money; characteristics of communications; verification checks; an offender's action(s); and being told by a third party.Policy ImplicationsBased on a comprehensive understanding of these five categories, the article advocates for broader messaging approaches to encompass financial literacy and well‐being, cyberliteracy and critical thinking skills, cybersecurity practices, and respectful and healthy relationships. Leveraging the use of these wider education and awareness campaigns could improve recognition of romance fraud. Importantly, it is suggested that banks and other financial institutions are in a strong position to focus their efforts on some of these broader messages to effect positive change.

Cyber resilience in industrial networks: A state of the art, challenges, and future directions

Industrial networks, and more particularly, industrial control systems (ICSs) and industrial Internet of things (IIoT), are no longer isolated environments. The rapid increase of functional needs in Industry 4.0 has indeed exposed them to numerous cyberattacks. Cyberattacks against ICSs or IIoT can cause considerable societal and economic disruption. Cyber resilient and cybersecurity practices are essential to integrate secure networks, control systems, physical processes, and their interconnections toward handling cyberattacks. In this paper, we survey relevant cyber resilience strategies for industrial networks, focusing on ICSs and IIoT. First, we provide a coverage of resilient networks and the fundamental components of ICSs and IIoT. Second, state of the art articles that propose cyber resilience assessment frameworks are reviewed. They are classified according to the resilience aspects they address and the defense mechanism, anomaly detection, failure management and survivability strategy, as well as resilience measure they present. As a result, the main technical and human related challenges, practical limitations, and current cyber resilience needs of industrial networks are identified. Finally, we establish the principal requirements that cyber resilience schemes for industrial networks should meet shortly and suggest promising directions for future research.

What motivates users to adopt cybersecurity practices? A survey experiment assessing protection motivation theory

AbstractResearch SummaryA 2 × 2 × 3 fully crossed factorial experiment is used to examine the linkages between key dimensions of protection motivation theory (PMT; perceived severity of risk, vulnerability to risk, and response costs) and the intentions to adopt information technology (IT) cybersecurity recommendations after being informed of degrees of risk in the vignettes. Data in this study consist of a nationwide sample of 720 American adults. Results from a series of fractional logistic regressions indicate support for many of the core mechanisms within PMT. Seventy percent of respondents indicated they were likely to follow IT recommendations to mitigate a cyber threat. Self‐efficacy and response costs affected intentions to do so.Policy ImplicationsThe study's findings have important implications for improving cybersecurity and reducing vulnerabilities to cyber threats. Current training programs need more effective communication strategies and engagement tools. Perceptions of users as security threats rather than potential contributors hinder progress in the ability of organizations to improve cybersecurity. Collaborative, user‐centered approaches can enhance users’ self‐efficacy and improve cybersecurity by aligning user and IT professional needs and capabilities. Strategies like gamified simulations and tailored interventions can create a more security‐focused culture and encourage user participation in defending an organization. Recognizing individual differences among users and further examining personal characteristics that may impact user interactions with technology and cybersecurity interventions is crucial. Overall, more personalized, adaptable approaches to cybersecurity policies and technical solutions, accounting for diverse user needs and characteristics, should be a priority for improving cybersecurity practices.

AI in Cybersecurity: Threat Detection and Response with Machine Learning

Cybersecurity threats are malicious activities or events that pose risks to the confidentiality, integrity, and availability of digital information systems, networks, and data. These threats can encompass a wide range of actions conducted by cybercriminals, hackers, or even insiders with malicious intent. Understanding these threats is crucial in safeguarding digital assets and maintaining the trust and reliability of modern information technology. In the rapidly evolving landscape of cybersecurity, the relentless growth of cyber threats poses a formidable challenge to organizations worldwide. To combat these threats effectively, there is an increasing reliance on Artificial Intelligence (AI) and Machine Learning (ML) techniques. This paper explores the integration of AI and ML into cybersecurity for threat detection and response, shedding light on the transformative impact of these technologies. AI (Artificial Intelligence) and ML (Machine Learning) have the potential to both bolster cybersecurity defences and, paradoxically, facilitate cyberattacks. On the defensive side, AI and ML technologies enhance threat detection and response, allowing organizations to identify and mitigate threats more efficiently. They can analyse vast amounts of data in real-time, spot anomalies, and recognize patterns indicative of potential cyberattacks. However, cybercriminals are also harnessing the power of AI and ML to perpetrate more sophisticated and targeted attacks. Ethical considerations surrounding AI in cybersecurity, including privacy concerns and responsible AI implementation, are also discussed to ensure a balanced and secure approach. The paper underscores the transformative impact of AI and ML in bolstering cybersecurity practices. It advocates for the integration of AI as an indispensable tool to fortify organizations against the ever-evolving landscape of cyber threats, ultimately enhancing their ability to detect, respond to, and mitigate potential breaches.

A Cyber Security and Digital Transactions to Educated the Micro, Small and Medium Business Community

The rapid growth in the digital economy has brought countless benefits, especially in the micro, small, and medium enterprise (MSME) community. However, along with these opportunities, serious threats also emerge in the form of increasingly sophisticated cybercrime. This article aims to explain the important role of cyber security in digital transactions and how it can be used as an educational tool for the MSME community. The importance of understanding cyber threats and cyber security practices in a rapidly changing digital era cannot be underestimated. This article discusses the various types of cyber threats that MSMEs may face, such as phishing, malware, and ransomware attacks, as well as the financial and reputational impact these attacks can have. Additionally, this article highlights the cyber security principles that MSMEs must follow to protect their data and digital transactions. Apart from explaining threats, this article also promotes the role of education in increasing MSME awareness and understanding of cyber security. We present practical recommendations on how MSMEs can educate themselves and their team members on cybersecurity best practices. Additionally, this article discusses available resources, such as online training and security tools that can help MSMEs protect their businesses from cyber threats. With a better understanding of cyber security and best practices in digital transactions, the MSME community can reduce the risk of data and financial loss, and build a stronger foundation for sustainable growth in the digital economy era. This article provides useful guidance for the MSME community looking to strengthen their defenses against cyber threats and harness the unlimited potential of secure digital transactions.

Counterattacking Cyber Threats: A Framework for the Future of Cybersecurity

Amidst the rapid advancements in the digital landscape, the convergence of digitization and cyber threats presents new challenges for organizational security. This article presents a comprehensive framework that aims to shape the future of cyber security. This framework responds to the complexities of modern cyber threats and provides guidance to organizations to enhance their resilience. The primary focus lies in the integration of capabilities with resilience. By combining these elements into cyber security practices, organizations can improve their ability to predict, mitigate, respond to, and recover from cyber disasters. This article emphasizes the importance of organizational leadership, accountability, and innovation in achieving cyber resilience. As cyber threat challenges continue to evolve, this framework offers strategic guidance to address the intricate dynamics between digitization and cyber security, moving towards a safer and more robust digital environment in the future.

Behavioural Insights Into Cybersecurity Practices Among Digital Banking Consumers in South Africa

Digital banking is linked with several cybersecurity threats, such as the risk of hackers. Against this background, this study aims to explore behavioural insights into cybersecurity practices among digital banking consumers in South Africa. The researcher gathered data from 338 South African banking consumers. A structured questionnaire was used to survey these consumers, and the obtained data were analysed using structural equation modelling (SEM). The results revealed that subjective norms, self-efficacy, and attitude significantly influence the cybersecurity intention behaviour of digital banking consumers. The implications of the study's findings need to be more readily generalisable due to the sociocultural differences across different provinces and populations. Future research should include a more diverse sample to validate these findings further.

Impact of Covid-19 Pandemic Circumstances on Cyber Hygiene of University Students

The covid-19 pandemic has motivated the cyber security research activities mainly at national and organizational level, but broader assessment of cyber security at individual level is undoubtedly lacking. Cyber security at individual level refers to humans and their personal cyber security practices that is called cyber hygiene. This study aims to evaluate the impact of the covid-19 pandemic circumstances on cyber hygiene outcomes, i.e., awareness, behavior, and knowledge. The intention was to estimate and compare the cyber hygiene of university students prior to and during the covid-19 pandemic. The results of the survey study indicate that covid-19 pandemic circumstances have caused the change of level of cyber hygiene awareness, behavior, and knowledge of university students. The covid-19 pandemic has improved all these cyber hygiene outcomes and that could be the consequence of intense use of digital space and mirroring of strict covid-19 pandemic protection measures. However, it is evident trend of cyber hygiene knowledge decline which coincides with covid-19 pandemic protection measures relaxation and less utilization of digital services. The findings of this study can be used to improve cyber hygiene worldwide and create a better extraordinary event response as digital space is expected to be increasingly used in future extraordinary circumstances.

Navigating the Intersection of Innovation and Cybersecurity: A Framework

Reliance on digital technologies for innovation management is unavoidable in current contexts. While digital processes and business models have been prioritised as key factors to drive innovation and value creation within firms, cybersecurity concerns are still rife. Increased levels and severity of cybersecurity breaches (CSBs) have had adverse effects on trust, caused significant revenue losses, and inflicted reputational damage on many firms. Further exacerbating these concerns is an observation made in the Global Risks Report of 2022, the World Economic Forum: cybersecurity measures taken by businesses are becoming increasingly obsolete. Many firms face severe consequences without implementing strategic objectives to limit the threats posed by CSBs. Cybersecurity breaches (CSBs) have a significant long-term impact on firm-level innovation and investment decisions. However, many firms are reluctant to examine or enhance their existing cybersecurity practices because of concerns that they may limit their innovation ability. Determining a method to limit CSBs and retain capabilities to perform necessary innovative processes is a delicate balance, with trade-offs to be considered within each process.
 This paper aims to address the delicate balance between limiting CSBs and preserving the ability to undertake necessary innovative processes. Building upon the Cyber Security Maturity and Innovation matrix introduced by Nelson and Madnick (2017), this paper expands the framework by providing specific suggestions for each quadrant. The matrix classifies firms into different quadrants based on their reliance on innovation and their assessment of cyber risk. We then detail measures to improve cybersecurity maturity for firms in each quadrant, incorporating the National Institute of Standards and Technology (NIST) Cybersecurity Framework Version 1.1 (CSF) as a reference. By making well-informed decisions and implementing appropriate measures, firms can effectively mitigate CSB risks while continuing to drive innovation and create value. This expanded framework serves as a valuable tool for firms seeking to align their cybersecurity practices with their innovation objectives, in accordance with the NIST CSF.

Artificial Intelligence In Cyber Security: Rescue Or Challenge

Objective: The objective of this research paper is to explore the potential of artificial intelligence (AI) in enhancing and fortifying cybersecurity measures. In light of the increasing cyber threats and the limitations of traditional computer security systems, the paper aims to shed light on the concept of AI and its components. The central goal is to demonstrate how AI can be leveraged to improve cybersecurity, focusing on key areas such as machine learning, data mining, in-depth learning, and expert programs.
 Method: This research paper utilizes a literature review approach to investigate the intersection of artificial intelligence and cybersecurity. It involves analyzing existing scholarly works and studies to understand the challenges posed by evolving cyber threats and the limitations of conventional security systems. The paper identifies various components of AI that have the potential to enhance cybersecurity measures and delineates their applicability in the digital landscape.
 Results: The analysis of past literature emphasizes the growing significance of adopting artificial intelligence techniques to bolster cybersecurity practices. The results underscore the inadequacies of traditional security systems in predicting and countering the ever-evolving tactics of cyber attackers and terrorists. Through an examination of various AI components, including machine learning, data mining, in-depth learning, and expert programs, the paper demonstrates the potential benefits that these technologies can offer to the field of cybersecurity.
 Conclusions: In conclusion, this research paper highlights the escalating threats to cybersecurity in the face of rapid technological advancement. The imperative of addressing these challenges through AI becomes evident as traditional security systems prove insufficient. By harnessing the power of artificial intelligence techniques such as machine learning, data mining, in-depth learning, and expert programs, institutions can significantly enhance their cybersecurity capabilities. The paper underscores the need for a paradigm shift towards AI-driven cybersecurity strategies to effectively predict, prevent, and counteract cyber threats in the digital age.

Enhancing Cyber Security Governance and Policy for SMEs in Industry 5.0: A Comparative Study between Saudi Arabia and the United Kingdom

The emergence of Industry 5.0 has revolutionized technology by integrating physical systems with digital networks. These advancements have also led to an increase in cyber threats, posing significant risks, particularly for small and medium-sized enterprises (SMEs). This research investigates the resistance of SMEs in Saudi Arabia and the United Kingdom (UK) to cyber security measures within the context of Industry 5.0, with a specific focus on governance and policy. It explores the cultural and economic factors contributing to this resistance, such as limited awareness of cyber security risks, financial constraints, and competing business priorities. Additionally, the study examines the role of government policies and regulations in promoting cyber security practices among SMEs and compares the approaches adopted by Saudi Arabia and the UK. By employing a mixed methods analysis, including interviews with SME owners and experts, the research highlights challenges and opportunities for improving cyber security governance and policy in both countries. The findings emphasize the need for tailored solutions due to the differing cultural and economic contexts between Saudi Arabia and the UK. Specifically, the study delves into the awareness and implementation of cyber security measures, focusing on SMEs in Saudi Arabia and their adherence to the Essential Cyber Security Controls (ECC-1:2018) guidelines. Furthermore, it examines the existing cyber security awareness practices and compliance in the UK, while also comparing official guidance documents aimed at supporting SMEs in achieving better cyber security practices. Based on the analysis, greater engagement with these documents is recommended in both countries to foster awareness, confidence, and compliance among SMEs, ultimately enhancing their cyber security posture. This paper offers a comparative research study on governance and policy between Saudi Arabia and the UK, presenting a set of recommendations to strengthen cyber security awareness and education, fortify regulatory frameworks, and foster public–private partnerships to combat cyber security threats in the Industry 5.0 landscape.

Perspective of small and medium enterprise (SME's) and their relationship with government in overcoming cybersecurity challenges and barriers in Wales

Small and medium enterprises (SMEs) have adapted their working methods in response to cyber threats, including security checks on internet-connected devices and securing social media accounts. To safeguard their data, SMEs are increasingly adopting intelligent software packages, despite the additional costs and need for skilled personnel. This study examines the perspectives of SMEs in Wales regarding their collaboration with the government to overcome cybersecurity challenges. Through qualitative research involving 34 SMEs, the study explores current cybersecurity practices, challenges faced, and interactions with government agencies. Wales, with its thriving economy and significant number of SMEs, provides a suitable context for the research. The findings will shed light on barriers and challenges encountered by SMEs in implementing effective cybersecurity measures, while also examining their perceptions of government agency involvement. By contributing insights to SME cybersecurity and government policy, the study aims to enhance government initiatives in supporting SMEs to tackle cybersecurity challenges effectively.

The Impact of Quantum Computing on Cybersecurity

The advent of quantum computing heralds a transformative shift in the computational landscape, offering unparalleled processing power that promises to solve complex problems far beyond the reach of classical computing. This quantum leap also poses significant challenges to the foundations of current cybersecurity practices, especially encryption methods that safeguard digital communications and data.

Assessing the Effectiveness of Cybersecurity Measures in the United States Telecommunications Industry: A Comprehensive Analysis

This research study assessed the effectiveness of cybersecurity measures in the United States telecommunications industry through a comprehensive analysis. Descriptive survey design was employed to establish a theoretical foundation and draw insights from existing scholarly articles, industry reports, and relevant cybersecurity frameworks. The analysis focused on historical cyber threat data and incidents within the telecommunications sector to identify prevalent threats and vulnerabilities. The literature review provided valuable insights into the challenges faced by the industry and the evolving landscape of cybersecurity. Quantitative data was collected through surveys administered to telecommunication companies operating in the United States. The surveys covered various aspects of cybersecurity practices, protocols, and incidents. The data collected from the surveys was analyzed to evaluate the effectiveness of existing cybersecurity measures in mitigating cyber threats. Additionally, qualitative insights and perspectives were gathered through interviews with key stakeholders, including cybersecurity experts, telecommunication industry professionals, and regulatory authorities. The findings of this study contribute to a better understanding of the state of cybersecurity in the United States telecommunications industry. The literature-based approach allowed for a comprehensive assessment of the industry's cybersecurity posture based on existing knowledge and research. The research outcomes provide valuable insights for telecommunication companies, policymakers, and regulatory authorities. By addressing the identified gaps and weaknesses, policymakers and regulatory authorities can implement targeted interventions to enhance cybersecurity practices. Telecommunication companies can leverage the research findings to strengthen their cybersecurity protocols and protect critical infrastructure. The research study demonstrates the importance of continuous evaluation and improvement of cybersecurity measures in the telecommunications industry. It highlights the need for ongoing collaboration between industry stakeholders, policymakers, and regulatory bodies to address the evolving cyber threat landscape effectively. Keywords: Cybersecurity, Measures, United States, Telecommunications Industry, Comprehensive Analysis.