Data Security Practices Research Articles

Revolutionizing Cloud Security: A Novel Framework for Enhanced Data Protection in Transmission and Migration

This research introduces a novel security framework specifically tailored to enhance data protection during cloud transmission and migration. Our study addresses critical gaps in existing security models by proposing a multi-dimensional system that incorporates advanced encryption techniques, dynamic access control, and continuous security auditing. Notably, this framework excels in ensuring cloud data integrity, confidentiality, and availability—core aspects often compromised under conventional methods. Comparative analysis with existing models in simulated cloud environments reveals that our framework significantly enhances threat detection accuracy, response speed, and resource management efficiency. The findings highlight the system’s capability to reduce security vulnerabilities while optimizing operational overhead, presenting a substantial improvement over traditional security solutions. This innovative approach, marked by improved scalability and flexibility, is poised to revolutionize cloud data security practices across various industries, prompting further research into robust cloud computing security methodologies.

Blockchain for HR Data Security

In today's digital landscape, organizations face an escalating threat of data breaches and unauthorized access to sensitive information. This vulnerability is particularly pronounced in Human Resources (HR) departments, where vast amounts of personal employee data are stored and managed. This paper delves into the potential of blockchain technology as a formidable solution for bolstering HR data security. By providing a comprehensive examination of blockchain principles, this research elucidates how the decentralized and immutable nature of blockchain can be leveraged to enhance the security of HR data. The paper explores various applications of blockchain within HR, such as secure employee record management, streamlined payroll processes, and verified credentialing. Additionally, it addresses the challenges and considerations associated with implementing blockchain technology in HR systems, including integration with existing infrastructure, scalability issues, and regulatory compliance. Through a detailed analysis, this research underscores the transformative impact blockchain can have on HR data security practices. It emphasizes how blockchain can ensure the confidentiality, integrity, and availability of employee information, thereby fostering a more secure and trustworthy HR environment. Ultimately, this paper aims to provide valuable insights for HR professionals and organizations seeking to safeguard their data against the ever-evolving landscape of cyber threats.

Research on data security in industry 4.0 manufacturing industry against the background of privacy protection challenges

ABSTRACT As the manufacturing industry advances into the era of Industry 4.0, data security has emerged as a critical concern in the face of growing privacy protection challenges. This research paper explores data security challenges in the Industry 4.0 manufacturing industry and the associated privacy protection concerns. It highlights the risks of interconnected systems and data-driven processes while emphasizing the need for a comprehensive framework. The proposed framework encompasses technological, organizational, and regulatory measures to safeguard data at all stages. The study also examines legal and ethical considerations and suggests strategies to enhance privacy protection. The research aims to provide insights for stakeholders in the manufacturing industry, policymakers, and researchers to strengthen data security practices and uphold privacy rights in the Industry 4.0 landscape.

SAFE AND SENSATIONAL: ASSESSING THE SECURE AND PRIVATE ONLINE DATING WORLD FOR OLDER ADULTS

Abstract Online dating applications have become a popular way for people worldwide to meet potential partners, including older adults aged 65 and above. However, using these applications involves revealing personally identifiable information (PII), which raises privacy and security concerns, particularly for older adults who are often the targets of cyberattacks. To address this issue, this paper conducted a literature review of 38 peer-reviewed publications on online dating security and privacy, with a focus on older adults. The review found that while 10 papers evaluated older adults’ cybersecurity issues, and two papers explored mobile security management with adults, no papers explicitly focused on older adults and dating applications. To fill this research gap, this paper conducted an application-level security and privacy analysis of ten popular online dating applications, including Tinder, Grindr, Match, Bumble, OkCupid, SilverSingles, Harmony, EliteSingles, Christian Mingles, and LDS Singles. The study revealed that these applications have concerning data security practices that may affect the privacy and security of users, especially older adults. The paper concludes by providing actionable recommendations for secure and privacy-preserving user experience. For instance, online dating applications should implement secure authentication mechanisms, such as two-factor authentication, and use end-to-end encryption to protect users’ data. Additionally, the applications should enable users to control their data and allow them to choose the information they want to share with others. Moreover, the dating apps should provide clear and concise privacy policies that are easy to understand and readily available to users.

The curious case of tweeting an Aadhaar number: trust/mistrust in security practices of public data infrastructures

ABSTRACT This paper explores data security practices of Aadhaar, India's biometrics-based national identification number, and the co-constitution of trust and mistrust that underlies its operation as a public data infrastructure. Based on 18-months of multi-sited ethnographic research, I document tensions around whether Aadhaar numbers were designed to be disclosed publicly or kept confidential. I further map identification practices around how residents share their Aadhaar numbers with other government and private organizations to access services. These practices to promote sharing of Aadhaar numbers broke down with growing anxieties over their public disclosure on government websites, lack of audits, and emerging forms of Aadhaar-based frauds. In response to this rising mistrust, an ex-member of Aadhaar's design team publicly disclosed his number in a tweet that went viral. The paper uses this tweet as a point of departure to: (1) provide an account of infrastructural concerns (grounded in design choices and events) that transformed Aadhaar from a public to a confidential number; and (2) illustrate that this transformation reflects how trust and mistrust co-constitute Aadhaar's data security practices. I conclude by illustrating how these infrastructural concerns imbricate to produce a spectrum of possibilities where identity numbers are simultaneously public and confidential, trusted and mistrusted.

Protection of Patient Data in Digital Oral and General Health Care: A Scoping Review with Respect to the Current Regulations

The use of digital health technologies, including telemedicine and teledentistry, has become a necessity in healthcare due to the SARS-CoV-19 pandemic. These technologies allow for the reduction of the workload of healthcare providers and the improvement of patient outcomes in cases of remote monitoring, diagnosis, and communication. While there are no doubtful benefits, there are some counterparts, such as concerns about clinical risks, data security, and privacy protection. This paper aims to review the regulations regarding the use of digital health apps and software in healthcare. This scoping review followed the PRISMA-ScR guidelines and the five-step framework of Arksey and O’Malley. Study selection was based on eligibility criteria that were defined using the population-exposure framework. The review of the articles selected (n = 24) found that the majority focused on data security policies in the healthcare industry, highlighting the need for comprehensive regulations and app control systems to protect patient data. The articles also emphasized the requirement for more appropriate research and policy initiatives to improve data security practices and better address privacy and safety challenges related to health-related apps. The review recognized that papers did not report consistent standards in professional obligation and informed consent in online medical consultations, with potential risks for data privacy, medical liabilities, and ethical issues. Digital health has already revolutionized medical service delivery through technology but faces some challenges, including the lack of standardized protocols for handling sensitive patient data and the absence of common legislative provisions, raising concerns about confidentiality and security. To address these issues and deficiencies, regulatory compliance is crucial to clarify and harmonize regulations and provide guidelines for doctors and the health system. In conclusion, regulating patient data, clarifying provisions, and addressing informed patients are critical and urgent steps in maximizing usage and successful implementation of telemedicine.

A Review on Major Cyber Threats and Recommended Counter Measures

Abstract: It was predicted that the number of cyber attacks will rise by a factor of two every year. There have been several highprofile cyber attacks on government organizations in India in recent years. Ransomware attacks, Advanced Persistent Threats, Internet of Things, Cloud security risks, Insider threats, Social engineering attacks, Supply chain attacks, Zero-day exploits in cyber threats are some of the significant types of cyber attacks affecting Indian government entities. Security measures, such as regularly backing up important data, installing antivirus software, training employees on how to identify and avoid phishing emails, and maintaining up-to-date software and operating systems are common countermeasures against significant cyber attacks. Preventing cyber attacks requires a multi-layered approach that addresses vulnerabilities in people, processes, and technology. Empowering, the agencies like CERT-In for cyber resilience, strengthening the penalty framework for noncompliance, advisories on information and data security practices are some of the strategies adopted by the government to secure cyberspace. It is necessary to stay informed about the latest threats and continually reassess and update security measures as needed.

Adopting Zero Trust Architecture in Data Engineering: Implementing Secure, Trustless Systems for Modern Data Security

The ever-evolving landscape of data engineering necessitates robust security measures to protect sensitive information in distributed environments. Traditional security paradigms, which rely heavily on perimeter defenses, are increasingly inadequate against sophisticated cyber threats. Zero Trust Architecture (ZTA) emerges as a pivotal strategy, advocating the principle of "never trust, always verify." This paper delves into the implementation of ZTA within data engineering, outlining its core principles, significance in modern data security, and practical applications to safeguard data integrity and confidentiality. Through detailed methodologies, algorithms, and visual representations, we explore how ZTA can transform data security practices, ensuring resilient protection against a myriad of cyber threats.

Navigating the Digital Frontier: Strategies for Securing Personal and Financial Data in Mortgage Applications

The digital transformation of the mortgage industry has significantly enhanced the efficiency and accessibility of mortgage applications. However, this evolution also introduces complex challenges in securing personal and financial data. The research paper delves into the multifaceted strategies and technological advancements employed to safeguard sensitive borrower information in the digital mortgage landscape. Drawing from a diverse array of scholarly papers and industry articles, the paper explores the integration of cutting-edge technologies such as blockchain, encryption, and secure online portals, which collectively fortify the security framework within the mortgage application process. It examines the role of blockchain in creating immutable records and ensuring transparent transactions, while also discussing how encryption and secure data storage methods are pivotal in protecting against data breaches and cyber threats. The paper further highlights the importance of regulatory frameworks and industry standards in guiding and enforcing data security practices. Through this comprehensive analysis, the research provides insights into how these technological and regulatory mechanisms interplay to maintain the integrity and confidentiality of borrower data, thereby fostering trust and reliability in the digital mortgage sector

Comments of the Cordell Institute on the Prevalence of Commercial Surveillance and Data Security Practices that Harm Consumers

Comments of the Cordell Institute on the Prevalence of Commercial Surveillance and Data Security Practices that Harm Consumers

Hong Kong's data breach notification scheme: From the stakeholders’ perspectives

Data breach notification laws have been enacted in an increasing number of economies around the world. These laws establish the requirement for notice in the event of a data breach incident. Although, there are a number of reasons for requiring data breaches to be notified, the primary objective of the laws is to regulate organizations’ data security practices in order to protect the data privacy of its customers. In so doing, the data reporting obligations promote accountability, transparency and trust, thereby improving the overall organizational data security environment. Opinions are, however, divided amongst various private sector stakeholders on the issue of mandatory data breach notification. Drawing on the interviews with 24 private sector representatives with interest in data breach issues, this article documents and examines their position on the appropriate regulatory approach for data breach notification in Hong Kong .

Stranger Danger!: How Hackers Break into School Databases to Steal Student Data, and What Legislatures Should Do about It

Inadequate data security practices in K-12 public schools leave students’ personal information vulnerable to exposure, theft, and marketing on the dark web. In 2017, schools across the country reported 122 cybersecurity incidents, and those were only the events school officials detected and disclosed; the real number is likely much higher. These security breaches are costly for student victims and their families, often costing them hundreds or thousands of dollars in credit repair and identity recovery services. Though this problem affects every school in the United States, there is no federal law that establishes a standard for a school’s duty to its students in dealing with their personal information. Furthermore, though every state in the country has passed some form of school cybersecurity legislation, no state has gone beyond requiring that schools have a cybersecurity policy to articulate exactly how schools should protect this valuable student information. Worse, neither the federal nor state governments have provided any financial remedy for student victims of data theft or exposure. This Article presents one unprecedented legislative solution to remedy this growing national problem: Congress should pass legislation that establishes uniform standards for how schools should collect and protect student data, and how they should respond when cybersecurity breaches occur. It should also provide financial recompense for victims of the breaches so that they might move forward with little financial burden in the wake of such an event.

Data Breaches and Potemkin Privacy: How FTC Regulation Can Restore Authority and Agency to Online Users and Destroy the Data Oligarchy

Data Breaches and Potemkin Privacy: How FTC Regulation Can Restore Authority and Agency to Online Users and Destroy the Data Oligarchy

Cryptic Commonalities

Based on ongoing interdisciplinary research about advances in a cryptographic technique called Secure Multiparty Computation (MPC), this article explores how research commonalities are carved out among mathematicians, engineers and anthropologists. STS scholars and anthropologists are increasingly engaged in research about and with data scientists and engineers, particularly as this relates to discrimination, surveillance and rights. Cryptography - a sub-genre of mathematics and often-invisible infrastructure enabling secure digital communication has received less attention. The article argues that the ubiquity of digital computing in our lives necessitates the creation of socio-mathematical vocabularies. Such vocabularies have the potential to lead to new situated data security practices based on local perceptions of rights and protection. STS scholars and anthropologists are uniquely situated to do this work. The article follows three anthropologists in their endeavors to find “cryptic commonalities” by “tacking back and forth” (Cf. Helmreich 2009) between mathematicians’, engineers’ and their own scientific vocabularies. Despite these attempts, however, the parties often “talk past each other”. Instead of shying away from the awkwardness that such moments produce, the authors embrace “epistemic disconcertment” (Cf. Verran 2013a), carving out a space in which they can communicate productively with each other. This space does not turn mathematicians into anthropologists or STS scholars into engineers, but it does make space for a shared scientific “pidgin” that enables collaboration (Cf. Galison 2010). With this pidgin, the authors walk the reader through the logics of MPC, and specifically, a cryptographic technique called “Shamir Secret Sharing” (Shamir 1979). In doing so, we join emerging voices in the crypto-community in an effort to develop cryptographic techniques for social good. This requires not just an understanding of the math, but also the social worlds impacted by these techniques.

Data Security in Practitioner-Academic Partnerships: An Agenda for Improvement

A large and growing body of social science research uses personal information from research subjects—often collected in collaboration with non-academic partners like private enterprise, governments, or NGOs. Consideration of the complex data security obligations and obstacles that come along with academic/practitioner collaboration, however, has been piecemeal, and actual security practices vary widely from project to project. Identifying and implementing “good practices” depends on the scruples and best judgment of individual research teams because discipline-wide best practices are insufficiently consolidated. This essay makes three preliminary contributions toward the development of best practices. First, it proposes a general set of imperatives/obligations against which data security practices can be measured, and then identifies the primary threats to fulfilling these obligations. Second, it elaborates on the particular threats to data security that come along with practitioner partnerships. Finally, it suggests a non-exhaustive range of data-security practices to address different threats, and demonstrates in appendices how three off-the-shelf tools can be used to ameliorate threats to data security, especially in collaborative projects.

Internalizing the Harm of Privacy Breaches: Do Firms Have an Incentive to Improve Data Protection? An Event Study

Big data, combined with machine learning and artificial intelligence, is expected to increase the bulk of personal data in the hands of private and public entities, presenting a unique challenge to policymakers. Therefore, the question of how to incentivise firms to protect personal information is more relevant today than ever before. This study attempts to associate privacy breach announcements with the drop in share price using an event study. The results show that firms suffer a significant and immediate share price depreciation over a short window, and this is sustained over the entire forecast window after the event. Furthermore, this effect is greater when a larger number of customers are affected and the information exposed is financially sensitive. This represents a departure from previous studies, which found only a mild negative and temporary market reaction following a breach. These findings, using data from 2014-2018, will encourage policymakers to consider strict disclosure policies, thereby encouraging firms to invest in best data security practices.

Should executives go to jail over cybersecurity breaches?

ABSTRACTThe Consumer Data Protection Act, a new bill introduced by Senator Ron Wyden, is proposing “jail time of up to 20 years for executives who knowingly sign off on incorrect or inaccurate annual certifications of their companies’ data-security practices.” The bill also recommends that companies be fined “up to 4 percent of their annual revenue.” While the critics consider the penalties too harsh and severe, the proposed legislation reflects two key realities – a) active involvement and commitment of senior management is essential to achieving a high level of cybersecurity preparedness; and b) legislation and fear of severe penalties (such as Sarbanes-Oxley Act of 2002 and European Union’s General Data Protection Regulation) is often necessary to motivate desired organizational behavior. In an increasingly digital ecosystem characterized by high levels of electronic connectivity, vulnerability to cyberattacks is growing. Organizations are in a perpetual state of breach with rapidly expanding attack surfaces and evolving threat vectors. Protecting confidential data and related digital assets is becoming critical to survival and success. Senior management must come to terms with this new business reality and give strategic priority to cybersecurity preparedness and investments. Research finds active involvement of top management in cyber risk mitigation initiatives to be a critical success factor and best practice. The onus is also on senior management to create a high-performance security culture founded on three key cornerstones – commitment, preparedness, and discipline. They also must lead the charge in establishing a cybersecurity governance structure characterized by joint ownership, responsibility, and accountability.

The impact of Big Data analytics and data security practices on service supply chain performance

PurposeThe purpose of this paper is to investigate the effects of Big Data analytics, data security and service supply chain innovation capabilities on services supply chain performance.Design/methodology/approachThe paper draws on the relational view of resource-based theory to propose a theoretical model. The data were collected through survey of 145 service firms.FindingsThe results of this study found that the Big Data analytics has a positive and significant relationship with a firm’s ability to manage data security and a positive impact on service supply chain innovation capabilities and service supply chain performance. This study also found that most service firms participating in this study used Big Data analytics to execute existing algorithms faster with larger data sets.Practical implicationsA main recommendation of this study is that service firms empower a chief data officer to establish the data needed and design the governance of data in the company to eliminate any security issues. Data security was a concern if a firm did not have ample data governance and protection as the information was shared among members of service supply chain networks.Originality/valueBig Data analytics are a useful technology tool to forecast market preference based on open source, structured and unstructured data.

Password compliance for PACS work stations: Implications for emergency-driven medical environments

Background. The effectiveness of password usage in data security remains an area of high scrutiny. Literature findings do not inspire confidence in the use of passwords. Human factors such as the acceptance of and compliance with minimum standards of data security are considered significant determinants of effective data-security practices. However, human and technical factors alone do not provide solutions if they exclude the context in which the technology is applied. Objectives . To reflect on the outcome of a dissertation which argues that the minimum standards of effective password use prescribed by the information security sector are not suitable to the emergency-driven medical environment, and that their application as required by law raises new and unforeseen ethical dilemmas. Method . A close-ended questionnaire, the Picture Archiving and Communication System Confidentiality Scale (PAC-CS) was used to collect quantitative data from 115 health professionals employed in both a private radiology and a hospital setting. The PACS-CS sought to explore the extent of compliance with accepted minimum standards of effective password usage. Results . The percentage compliance with minimum standards was calculated. A significant statistical difference ( p <0.05) between the expected and observed data-security practices was recorded. Conclusion . The study interrogates the suitability of adherence to minimum standards of effective password usage in an emergency-driven medical environment and calls for much-needed debate in this area.

Cyber Security Risks and Challenges in Supply Chain

Traditional data security practices are not much helpful if any hardware or software component of the system is built to send the inner data to outside of the system or leave the back door open for intruders intentionally. This kind of back door entry may be restricted if proper inspection of the network components, monitoring of supply chain steps, history check of network component suppliers is done properly. To address the above issues, there is need of standard cyber security practice frameworks, cyber security guidelines in supply chain management to mitigate the cyber security risks in the supply chain of the network components. In this paper, need of cyber security practice framework, Strategies, Road Map and solutions to resolve the threats of Cyber security in supply chain are discussed and analyzed.