Increase Information Security Research Articles

An assessment of critical success factors in information security implementation in organizations in Ghana

Purpose This paper aims to identify the critical success factors in improving information security in Ghanaian firms. Design/methodology/approach Through an exploratory study of both public and private Ghanaian organizations. The study relied on a research model based on the technology–organization–environment (TOE) framework and a survey instrument to collect data from 525 employees. The data was analyzed using partial least squares-structural equation modeling (PLS-SEM). Findings The findings confirm the role of the technological, organizational and environmental contexts as significant determinants in the implementation of information security in Ghanaian organizations. Results from PLS-SEM analysis demonstrated a positive correlation between the technology component of information security initiative, organization’s internal efforts toward its acceptance and a successful implementation of information security in Ghanaian firms. Top management support and fund allocation among others will result in positive information security initiatives and positive attitudes toward securing the organization’s information assets. Research limitations/implications The authors discussed the implications of the authors’ findings for research, practice and policy. Social implications The results of this study will be useful for both governmental and non-governmental organizations in terms of best practices for increasing information security. Results from this study will aid organizations in developing countries to better understand their information security needs and identify the necessary procedures to address them. Originality/value This study contributes to filling the knowledge gap in organizational information security research and the TOE framework. Despite the TOE framework being one of the most influential theories in contemporary research of information system domains in an organizational context, there is not enough research linking the domains of information security and the TOE model.

Method of information protection based on the integration of probabilistic encryption and noise immune coding

The subject matter of this article is the processes of increasing information security in communication systems to solve applied problems that are critical in the transmission of confidential data. The goal is to develop a multi-stage method for protecting information from unauthorized access, based on probabilistic encryption integration, error-correcting code, and error decorrelation. The tasks to be solved are as follows: to develop a probabilistic encryption algorithm that considers the entropy of the characters’ appearance in a message; to implement iterative coding with variable parameters of the information bits matrix; and to implement error decorrelation based on the generated matrix by interleaving information and check bits according to a given algorithm. Methodology: theory of signal communication and signal processing, theory of cryptography, theory of noise-resistant codes, probability theory, statistical analysis. The following results were obtained: a multi-stage method for protecting information from unauthorized access was proposed, in which at each step of data conversion, information secrecy is increased; probabilistic encryption was implemented, which considers the entropy of a discrete source of information when forming a space of random combinations; based on an iterative code with specified matrix parameters, an additional increase in the space of random combinations was implemented; error decorrelation reduces the multiplicity of errors in codewords and ensures mixing of bits according to a predetermined law. Conclusions. The scientific novelty of the results obtained is as follows: 1) an improved method of information protection from unauthorized access is proposed, based on probabilistic encryption integration, interference-resistant coding, and error decorrelation; 2) increasing information concealment is realized by eliminating the main shortcomings of probabilistic encryption, which did not take into account the entropy of the symbols of the open message; 3) it is proposed to form the space of random combinations taking into account the average probability of the appearance of a symbol in open texts, which will allow the output of a probabilistic cipher to form a stream of random combinations, which, according to its statistical properties, is close to the uniform distribution law; 4) further development of information protection methods based on interference-resistant coding and error decorrelation with encryption functions is received; 5) a further development of the statistical encryption method is the use of all redundant elements for both probabilistic encryption and interference-resistant coding.

Dampak Pengaruh Digitalisasi Era Society 4.0 Terhadap Manajemen Kinerja Pegawai

In the Society 4.0 era marked by digitalization, the development of information technology has changed the way of work, communication, and management in various sectors, including the government and business sectors. This study aims to determine the impact of digitalization in the Society 4.0 era on employee performance management. This research uses qualitative research methods. The data collection technique was carried out by literature study by exploring journals, books and other information relevant to the research. The data that has been collected is then analyzed with three stages, namely data reduction, data presentation and conclusion drawing. The results showed that the digitalization of the Society 4.0 era has positive and negative impacts on employee performance management. The positive impact of digitization in the Society 4.0 era on employee performance management includes increasing the efficiency and effectiveness of employee performance management, increasing the objectivity of employee performance appraisals, increasing transparency and accountability of employee performance management, increasing employee motivation and job satisfaction. Meanwhile, the negative impacts of digitization in the Society 4.0 era on employee performance management include increasing the complexity of employee performance appraisals and increasing information security risks.

Analysis of Higher Education SIAKAD Website Security Gaps Using the Vulnerability Assessment Method

SIAKAD is a website-based application designed to facilitate academic management and academic activities by universities. The SIAKAD system contains sensitive and important information from lecturers and students such as personal, academic, and financial information. Seeing the importance of information security, universities must be able to ensure that their SIAKAD is protected by a strong and reliable security system. To find out threats that can be exploited by hackers, it is necessary to analyze security holes in a system. The research procedure was carried out through (1) Terminal, Zenmap, Whois, Wappalyzer as tools for foot printing or data collection, (2) OWASP ZAP as a tool for conducting Vulnerability Scanning. The results of this study revealed that there were 11 vulnerabilities found, consisting of 5 medium vulnerability levels and 6 low level vulnerabilities. In addition, to deal with these vulnerabilities, this research also discusses solutions that can be alternatives for increasing information security in higher education SIAKAD.

Identify Cyber Intelligence Threats in Indonesia

Currently, the cyber domain has become a new strategy that can cause losses that have a strategic impact on a country. The current condition shows that the cyber domain has also been used in intelligence operations. The lack of human resource support, infrastructure support and financial support raises concerns about the readiness to deal with cyber intelligence threats in Indonesia. This research aims to analyse the identification of cyber intelligence threats in Indonesia. This research was conducted using a qualitative method with a case study approach. The analysis was conducted comprehensively through in-depth analysis of the issues raised. The results of this study show that the pattern of cyber intelligence threat identification in Indonesia focuses on deepening the aspects contained in the 9 components of strategic intelligence so as to produce estimates and early detection of potential threats / impacts that can be caused by cyber threats. So that it is necessary to increase information security awareness for the community and the need to increase the quantity and quality of human resources and infrastructure to support the success of cyber intelligence operations so as to produce quality intelligence products.

Impact of administrative decision-making on the performance of health facilities in Medina, Saudi Arabia

Enhancing the administration of primary healthcare facilities might be a significant step toward achieving the quality improvement goal. The purpose of this research was to determine whether or not improvements in healthcare performance lead to improvements in the overall quality of decision-making in Medina, Saudi Arabia. In order to determine the impact that increased information security has on the quality of decision-making, the researcher used the use of a questionnaire. Our findings revealed a high level of the quality, accepting and implementing and timeliness and administrative decision-making, and this suggests that health facilities have a high degree of competence to make administrative choices in all three of their dimensions. In addition, we mentioned a high level of performance of health facilities, and this suggests that the health facilities that were investigated had a high level of performance. We found that administrative decision-making had a statistically significant influence on the performance of healthcare facilities, and we found that for every 1% rise in the level of administrative decision-making, the performance of healthcare facilities improved by 0.853%.

ПЕРСПЕКТИВЫ ВНЕДРЕНИЯ ИНФОРМАЦИОННЫХ СИСТЕМ В ДЕЯТЕЛЬНОСТЬ ТУРИСТИЧЕСКОЙ КОМПАНИИ

The article is devoted to the study of the prospects for the introduction of information systems in the activities of a travel company. The theoretical state and foundations in the field of modern information systems for the purposes of enterprise management are specified, the types of such systems are identified, and their description is given. The characteristic features and manifestations of digitalization of travel companies at the present stage are described, which mainly reflects the specific features and needs of a travel company in the choice of information systems. A comparison is made of the existing types of information systems for managing a travel company, taking into account their characteristic advantages and disadvantages. It is concluded that the prospects for the introduction of enterprise management information systems in the travel business are associated with the achievement of such global typical effects as: cost optimization, reduction in the speed of operations, elimination of the negative impact of the human factor, release of human potential, formation of a database with structured / unstructured information, competitiveness growth due to additional opportunities that arise due to modern technologies, support for managerial decision-making, ensuring management transparency, increasing information security, etc.

Modelling the effects of personal factors on information security awareness

According to research, the number of attacks on the Internet has been increasing each year. Hence, information security awareness is a very significant skill. Accordingly, this study aimed to investigate the effects of students’ personal factors on their information security awareness. The researchers conducted a quantitative study that examines a theoretical model. The data were collected from 684 undergraduate students via three data tools. The effects of variables on information security awareness were explained via path analysis. The mediating role of technology attitude was examined in the relationship between information security awareness and the individual variables for the first time. The findings showed that gender and grade did not directly affect information security awareness levels, while attending information security training, department and technology attitude had a significant effect. On the other hand, some personal factors indirectly affected information security awareness. This analysis offered substantial contributions to the literature in uncovering the effects of variables on students’ information security awareness in a holistic way. The results can guide planning for information security training to increase information security awareness by considering personal factors.

Impact of information security threats on small businesses during the Covid-19 pandemic

Information is a significant asset of any organization. The increased information demand by all parties has gained attention and raised security concerns – especially in this digital era where everyone depends heavily on the Internet. The Internet and online platforms expose valuable information to various information threats. These pervasive threats compromise information privacy, safety, and security. Legitimate people and criminals compete to access information. Criminals use innovative ways to gradually increase information security threats, especially in the small business sector with only a minimal budget for proactive security measures. Due to the scarcity of academic research on information security threats for small businesses, this study presents the impact of security threats on businesses during the global Covid-19 pandemic.
 A qualitative survey within the interpretive approach was used to gather data from 20 small businesses in Western Cape, South Africa, to fill this gap. The study used judgmental sampling to select research participants who are business owners. Data were analyzed using thematic analysis. The results indicated the knowledge gap relating to information threats, even though most businesses are familiar with the costly and negative impact of threats on business operations, resulting in business discontinuity. However, some small business sectors showed minimal awareness a6nd understanding of information security threats, their impact, and proactive mitigation strategies. The study concluded with recommendations to protect against information security threats.

Информационная безопасность России: способы укрепления посредством системы образования

Modern Russian society is experiencing a state of “zeroing out” of old, obsolete social, political, economic, socio-cultural constructs. This state of society is caused by parallel internal and external processes transforming it. The discourse of such a state of society formulates a request to preserve and strengthen the national security of the state as a whole. In the light of recent foreign policy events and changes in dispositions on the world stage, as well as the shift in the policy of Western states towards the promotion of widespread “de-russification”, one of the key elements of such security is information security. In the conditions of social reality, its cognitive and socio-psychological aspects acquire a qualitatively new status demanded by society. In this regard, the author formulates the need for a scientific and methodological approach to the problem of finding solutions in order to preserve, strengthen and increase information security in the context of not only physical, but also mental, as well as psycho-emotional preservation in the conditions of modern social reality. The paper actualizes the requirement to ensure information security through one of the system-forming social institutions. Education, which is functionally capable of performing both the role of a “mirror” of society and an instrument of its transformation, should play a priority role in strengthening Russia’s information security. In order to develop ways to preserve information security, it is proposed to categorize the main components of education as a process according to the principle of content and practical aspects. Further, the article presents relevant practice-oriented recommendations.

Organizational and team culture as antecedents of protection motivation among IT employees

The rapid development of technology and information systems has led to higher information security-related issues in an organization. The age of remote working (i.e., telecommuting) has further increased information security related incidents that need to be adequately addressed. This paper extends the protection motivation theory by drawing insights from organizational and institutional theory literature to examine how organizational culture and subcultures such as team culture impact information security compliance. The primary objective of this study is to understand the impact of the dimensions of organizational culture and team culture on employees' perceived threats and coping motivation associated with information security compliance. The study applied structural equation modeling to analyze survey responses of 341 IT employees in the United States. The result of the study indicates that both organization and team culture impacts employees' perception to appraise threat and coping, which in turn impacts behavioral intention to comply with information security policies. The findings of this study contribute to the information security compliance research by demonstrating the importance of developing an information security culture within an organization and its subgroups.

Quasi-3-D Au mushrooms with programmable morphology for high-capacity flexible plasmonic encoding

Plasmonic encoding composed of metallic nanostructures makes a great contribution to the practical application of information encryption. However, most reports have so far shown the preparation of single or binary plasmonic encoding patterns because of the technical difficulty of assembling multiplex nanostructures on a single platform, which cannot satisfy the requirements of high encoding capacity for increasing information security. Herein, we developed a strategy based on plasma etching combined with in-situ growth to fabricate patterned arrays of quasi-three-dimensional (3-D) plasmonic Au nano-mushrooms with controlled morphologies, and successfully realized ideal high-capacity plasmonic encoding by arranging Au nano-mushrooms on one platform. On this basis, such multiplex encoding patterns have been transferred to the flexible substrate to realize the triple-mode encryption of the Morse code of “FUNSOM”, indicating great prospects in the applications of information encryption and data storage.

A single-beam NIR laser-triggered full-color upconversion tuning of a Er/Tm:CsYb2F7@glass photothermal nanocomposite for optical security.

The development of advanced luminescent materials is highly desirable for addressing the rising threat of forgery. However, it is challenging to achieve stable full-color upconversion (UC) tuning in the same matrix upon a single-beam light excitation so as to ensure that authentic items are irreproducible. Herein, hexagonal Er/Tm:CsYb2F7 nanocrystals (NCs) embedded inorganic glass via an in situ crystallization strategy is fabricated, which can emit blue, cyan, green, yellow, orange, red and near-infrared (NIR) UC emissions by simply modifying an incident 980 nm laser power. This UC tuning is attributed to the combination roles of the highly efficient laser-induced photothermal effect of the CsYb2F7 host and simultaneous emissions of Er and Tm activators. Importantly, the robust inorganic glass matrix endows Er/Tm:CsYb2F7 NCs with excellent water resistance and the ability to withstand high-power laser irradiation. Based on these unique characteristics, a proof-of-concept anti-counterfeiting experiment is designed. The results indicate that dynamic full-color UC luminescence patterns can be easily tuned by simply changing the power of the incident 980 nm laser. The present work not only confirms that the designed photothermal material can increase information security, but also provides a new idea for practical applications in the field of anti-counterfeiting.

Блокчейн-технології в управлінні комунікаціями інфраструктурних проектів

The subject of research in the article is the processes and technologies of communication management of infrastructural projects. The possibilities of using blockchain technology in the field of project management are considered. The goal of work: improving the information security of infrastructure projects. The risks of stakeholder communications will be reduced by increasing the security of data access and reducing the time for their processing, which in turn will provide more flexible project management. The tasks of the work: to analyze the current state of development of blockchain technology and conduct a comparative analysis of technology and modern generally accepted management methods, give examples of implementation, determine the advantages of blockchain technology in modern conditions; analyze the benefits of using smart contracts in communication management, apply the smart contract life cycle model in an infrastructure project. Research methods: systems analysis, design approach, structural modeling, instrument Geth, programming language Solidity. The following results were obtained. The main directions of development and implementation of blockchain technology are characterized, examples of the use of blockchain technology in various industries are collected and analyzed, the main advantages and disadvantages of the technology are identified, a comparative analysis of blockchain technology and classical project management methods is carried out, the possibilities of using blockchain technology in the field of project management are described, the main the possibility of implementing reasonable contracts, the advantages and disadvantages of reasonable contracts are identified, the advantages and disadvantages of the instrument of reasonable contracts are analyzed in comparison with the traditional approach. The smart contract life cycle model presents the creation stages, installation to the blockchain contract managing, and contract completion. Provided an example of the smart contract used for the complex financial project, which reduced the risk of project failures. Conclusion. The scientific novelty of the obtained results is in the improvement of the project management life cycle model through the further development of the smart contract model. This allows to increase information security, reduce possible risks and guarantee the implementation of an infrastructure project through the use of blockchain technology in comparison with classical project management methods.

Crisis Management Modeling of an Economic Object in Conditions Associated with Risks

The model of management of an economic object in a crisis is developed. Limitations and quality criteria are formed. General scheme of solving the task of minimax program crisis management at an enterprise is detected. The algorithm of the solution of the problem of crisis management of an enterprise taking into account the risks is offered. The main method for solving the problem is the method of detecting the reachable areas. Using this method, we work out the scenario of optimal crisis management in the presence of risks. The proposed algorithm allows to create effective numerous methods for implementing a computer simulation of solution of the problem of risk`s influencing. Simulated tools allow the reducing the risks at information system of crisis management of an enterprise. It opens the perspective of developing computer information systems for support of making effective crisis management decisions in the conditions of uncertainty and lack of information for increasing information security.

Analysis of design goals of cryptography algorithms based on different components

Cryptography algorithms are a fundamental part of a cryptographic system that is designed and implemented to increase information security. They are the center of attention of experts in the information technology domains. Although the cryptography algorithms are implemented to attainthe goals such as confidentially, integrity and authenticity of designing, but other matters that must be noticed by designers include speed, resource consumption, reliability, flexibility, usage type and so on. For the useful allocation of hardware, software, human resources, etc., it is important to identify the role of each of the factors influencing the design of cryptographic algorithms to invest in the development of cryptographic knowledge.This paper examines 1700 papers, documents and technical reports of international journals in the specific lengthy period (1978-2019), and the goal of the design and implementation of cryptography algorithms in a different period is extracted. Using a statistical population that consists of time and the number of documents in a long time and also avariety of data, leads this study to have a reliable result and attract the attention of designers.The results show that in recent years, attention tonew usage such as IoT and telemedicine, as well as lightweight cryptography, has increased to achieve the main goals.

MEASUREMENT ERRORS AFFECTING THE CHARACTERISTICS OF MULTI-POSITION SYSTEMS, AND WAYS TO REDUCE THEM

Modern wide development of science and technology causes the growth of information needs in all branches of human development. At present, there are all opportunities to increase information security by combining sources of information into a single system. At the same time, when merging, specific difficulties and features emerge, which together make it difficult to implement the proposed solutions. The paper considers the peculiarity of combining different types of radar stations into a single information system. Errors of measurements of separate parameters and their influence on system characteristics are considered. Options for solving the problems that have arisen are proposed.

Mediating effects of information security awareness

Facebook users are often affected by privacy violations, many of which could be avoided by making adequate use of and periodically reviewing their privacy settings. However, despite frequent reports of privacy-related news and events, many users fail to periodically review these settings. In doing so, they remain vulnerable to privacy violations and perpetuate the cycle of privacy victimization. Given that an individual's personality influences their behavior it is important to understand which personality traits are more likely to adopt privacy-protective behavior as a function of increased information security awareness. Using select constructs from the theory of planned behavior (TPB), we evaluate the mediating role played by information security awareness in certain users’ intentions to review their Facebook privacy settings. In particular how information security awareness mediates the relationships between each of the Big Five personality traits and their intention to review these settings. To perform the evaluation, we analyzed 594 survey responses using partial least squares path modeling (PLS-SEM). Our results indicate that information security awareness does act as a mediator, but only for some of the personality traits. In particular we found information security awareness to act as an indirect mediator between openness and intention to review privacy settings. This indicates that as users high in openness increase their awareness of privacy-related threats (via privacy news and events), so their intention to review privacy settings increases. We also found information security awareness to mediate the relationship between conscientiousness and intention to review privacy settings – albeit in a complementary manner. No mediating evidence was found for extraversion, neuroticism, and agreeableness.

Paper Information Recording and Security Protection Using Invisible Ink and Artificial Intelligence.

Conventional paper information protection mainly relies on stimuli-responsive functional materials that can display color or luminescence under external stimuli; however, this method is rather predictable and can be easily cracked. In this work, a paper information protection scheme combining fluorescent invisible ink and artificial intelligence was proposed. The ink was prepared by dissolving carbon nanoparticles in water, which has a high quantum yield and outstanding light stability and salt stability, thus ensuring the integrity of information in complex environments. A five-layer convolutional neural network (one of the two mainstream architectures in today's artificial intelligence fields) was specially trained based on ultraviolet light excited symbols printed by invisible ink. Using this scheme, the correct information could only be read with the specially trained neural network after ultraviolet (UV) irradiation. Without this trained neural network or UV irradiation, misleading messages will be presented. Moreover, it was possible to design unpredictable and highly complex password books to further increase information security. This smart strategy provides new opportunities for high-level paper information encryption and also proposes new ideas for the applications of carbon nanoparticles and artificial intelligence.

The Effect of Organizational Information Security Climate on Information Security Policy Compliance: The Mediating Effect of Social Bonding towards Healthcare Nurses

The advancement of information communication technology in healthcare institutions has increased information security breaches. Scholars and industry practitioners have reported that most security breaches are due to negligence towards organizational information security policy compliance (ISPC) by healthcare employees such as nurses. There is, however, a lack of understanding of the factors that ensure ISPC among nurses, especially in developing countries such as Malaysia. This paper develops and examines a research framework that draws upon the factors of organizational climate of information security (OCIS) and social bond theory to enhance ISPC among nurses. A questionnaire was adopted in which responses were obtained from 241 nurses employed in 30 hospitals in Malaysia. The findings from the study demonstrated that the ISPC among nurses is enhanced through OCIS factors. The influence on ISPC was even more significant when examined by the mediating effect of the social bond. It implies that influential OCIS factors reinforce social bonds among nurses and eventually increase the ISPC. For information security practitioners, the study findings emphasize the prevalence of socio-active information security culture in healthcare organizations to enhance ISP compliance among nurses.