Information Security Challenges Research Articles

Regulatory frameworks for securing electoral processes in Ukraine: managing information security challenges

The administrative and legal framework for managing the information security of electoral processes in Ukraine includes regulations, various measures and procedures that are primarily aimed at ensuring the reliability and security of the electoral process due to the negative impact of external information, manipulation and illegal interference. Cyberattacks, media manipulations, and imperfect legal frameworks in the electoral sphere can lead to the invalidation of election results and the loss of confidential information. The main purpose of the domestic legislation is to strengthen the relevant protection of information from cyber threats. The relevance of studying this issue is primarily related to the administrative and legal framework for managing the information security of electoral processes in the spectrum of modern technological capabilities and external influences connected with the digital sphere. The purpose of the academic paper is to determine the administrative and legal framework for managing the information security of electoral processes in Ukraine. The academic paper the problems caused by the violation of information security in the process of electoral activity have been revealed. The features of the administrative and legal framework for managing the information security of electoral processes have been established. The legal and regulatory framework for information security management during elections has been studied. The academic paper also emphasizes the inexpediency of holding elections during the period of martial law and identifies the causes and consequences.

Steganographic Techniques for High-Capacity Covert Communication in Images and Videos

Abstract: This paper investigates advanced steganographic techniques tailored for high-capacity covert communication within images and videos. Traditional approaches are limited by low embedding capacity and susceptibility to detection. To address these challenges, cutting-edge methods including adaptive embedding algorithms, content-aware techniques, and deep learningbased approaches are explored. The research emphasizes the importance of balancing embedding capacity, security, and perceptual quality. It also discusses steganalysis implications and strategies for mitigating detection risks. By reviewing existing literature, this paper offers insights into state-of-the-art steganography for covert communication. Understanding these methods enables the development of more robust and secure communication systems to meet evolving challenges in information security and privacy.

Az információbiztonság időszerű kérdései a magyarországi kkv-k körében

Összefoglalás. A tanulmány célja az információbiztonság vizsgálata a magyarországi kis- és középvállalkozások (kkv-k) körében. Tanulmányunk aktualitását az adja, hogy az Európai Unió Bizottsága által évente kiadott Digitális Gazdaság és Társadalom Indexe szerint a magyarországi kkv-kat alacsony adat- és információbiztonsági szint jellemzi. Kutatásunk során egyaránt alkalmaztunk kvalitatív és kvantitatív módszereket. Az előbbinél dokumentumelemzéssel megvizsgáltuk, hogy a hazai szakirodalom milyen fontosabb információbiztonsági kihívásokat azonosít, illetve interjúk segítségével feltérképeztük a kkv-k információbiztonsági gyakorlatait és kihívásait, az utóbbinál pedig egy online, nagymintás kérdőív révén vizsgáltuk a szektor vezetőinek információbiztonsággal kapcsolatos véleményét, fejlettségét. Summary. The aim of the study is to examine information security among small and medium-sized enterprises (SMEs) in Hungary. The relevance of our study is that, according to the Digital Economy and Society Index published annually by the Commission of the European Union, Hungarian SMEs are characterised by a low level of data and information security. In our research, we used both qualitative and quantitative methods. In the former, we conducted a document analysis to identify the main information security challenges identified in the domestic literature and mapped the information security practices and challenges of SMEs through interviews, while in the latter, we used an online, large-scale questionnaire to investigate the views and development of the sector’s managers on information security. The findings of our study are based on the responses of 150 SME managers and 31 IT professionals working in the sector. We divided our questionnaire into six sections: demographics, business profile, device usage, digital habits, information security awareness survey based on the international HAIS-Q, information security awareness in daily practice. In the present research we deviated somewhat from the international model, firstly because we had to adapt the model to the domestic requirements and our research objectives, and secondly because this model was only a part of our questionnaire. During the research we have clearly identified the need to develop and implement practice-oriented training programmes that can help managers and IT professionals in the domestic SME sector to develop their information security awareness and even to make the transition to Industry 4.0. Based on the responses to the interview questions, it can be concluded that, overall, SME managers and their organisations are increasingly starting to build cybersecurity solutions and information security measures around their organisation. There is still a need to develop and share information security good practices that can reach SMEs, as there is a need for training and exchange of experiences, but not all companies are fully committed to the issue, so the actual need for action and organisation is ultimately lagging behind. A small proportion of the organisations surveyed have been victims of a cybersecurity incident and a good proportion of SME managers believe that until an incident has happened to an employee or the organisation, they will not learn from it. Basically, there is a growing demand for increased security and the use of security tools and education in information security, but this is evolving as a slow process and not as fast as the world around us is changing, so it is questionable when an information security explosion will occur that may radically change the tools and attitudes of organisations.

Kajian Keamanan Sistem Informasi Akademik Menggunakan Framework COBIT 5

This study examines the security of academic information systems using the COBIT 5 Framework. Key issues are uncertainty in protecting student and staff data, the potential for cyberattack vulnerabilities, and non-compliance with international security standards. The goal is to evaluate the security level of the system and suggest improvement recommendations according to COBIT 5 principles. Research methods include Renstar IT policy analysis, system audits, and interviews with IT personnel and related academic communities. Data is analyzed quantitatively to identify weaknesses and opportunities for improvement. The COBIT 5 framework is used as a security assessment framework. The results highlight the need for improvement, including access management, activity monitoring, and continuous improvement plans. Using COBIT 5, substantial measures such as strengthening access controls and developing disaster recovery plans can be identified. The research emphasizes the importance of a structured approach in improving the security of academic information systems, with COBIT 5 as a useful tool. With the right measures, system security can be enhanced to protect the integrity, confidentiality, and availability of critical data for educational institutions. In conclusion, these measures demonstrate how important COBIT 5 implementation is in addressing information security challenges in academic environments.

Optimizing Attendance Data Security by Implementing Dynamic AES-128 Encryption

The protection of data security is crucial, particularly when dealing with the transmission of sensitive information through communication networks. This article explores the Advanced Encryption Standard 128-bit (AES-128) algorithm as an effective and secure cryptographic solution. The paper proposes the dynamic development of the AES-128 cryptography method by implementing a dynamic key to enhance the security of employee attendance data. The dynamic key involves changing the encryption key every minute, providing an additional security layer and reducing the risk of decryption by unauthorized parties. Test results indicate that the dynamic AES-128 encryption algorithm demonstrates optimal performance. The consecutive encryption and decryption speeds for sending attendance data are 14656.78 bit/s and 21898.21 bit/s, respectively. The consistent duration of the encryption and decryption processes, at 6.66ms and 2.44ms, along with an Avalanche Effect rate of 50.73% and an Entropy of 6.67 bit/symbol, emphasizes the algorithm’s efficiency and stability. This research not only reinforces the desired level of security but also outperforms several previous studies. Analyzed performance data indicates that this method is not only efficient but also stable in maintaining data security, addressing significant variations in data length. Thus, the implementation of dynamic AES-128 cryptography in attendance systems provides a significant advantage in addressing information security challenges in the current digital era.

What are developers talking about information security? A large-scale study using semantic analysis of Q&A posts.

Digitalization and rapid technological improvement in the present day bring numerous benefits, but they also raise the complexity and diversity of cyber security risks, putting critical information security issues on the agenda. Growing issues and worries about information security endanger not only the security of individuals and organizations but also global social and economic stability. This study investigates the issues and challenges regarding information security by analyzing all the postings on ISSE (Information Security Stack Exchange), a Q&A website focused on information security. In order to identify the primary topics addressed in postings shared on the ISSE platform, we employed a probabilistic topic modeling method called latent Dirichlet allocation (LDA), which is generative in nature and relies on unsupervised machine learning processes. Through this investigation, a total of 38 topics were identified, demonstrating the present state of information security issues and challenges. Considering these topics, a comprehensive taxonomy of seven categories was devised to address information security issues, taking into account their backgrounds and perspectives. Subsequently, we conducted an examination of the prevalence and complexity of the matters at hand. In addition, we have defined the prevailing technologies utilized in the realm of information security, including tasks, certifications, standards, methods, tools, threats, and defenses. We have provided a number of implications for different stakeholders, including academics, developers, educators, and practitioners, who are working towards advancing the field of information security.

Modern approaches to information security: analysis of intrusion detection, firewalls and auditing in the context of organizational data protection

Today’s business environment presents organizations with growing information security challenges. The threats posed by cyber-attacks and the leakage of sensitive information require effective and innovative approaches to data protection. This paper explores a combination of tools and techniques, including intrusion detection system (IDS), firewalls, and information security auditing, as key elements of organizational data protection. The paper provides a detailed overview of each of these components and discusses their roles in information security. For an intrusion detection system, its ability to detect and respond to different types of attacks in real time is investigated. For firewalls, consider how they restrict access to network resources and regulate traffic. Finally, information security audits act as a means of assessing the effectiveness of security measures and identifying weaknesses. Statistical data and best practices are presented to support our recommendations. This article discusses the integration of these systems in a comprehensive information security strategy and provides tips for maximizing data protection in today’s digital world.

SUPER ENKRIPSI ALGORITMA ROUTE CIPHER DAN ALGORITMA VARIABLY MODIFIED PERMUTATION COMPOSITION (VMPC) UNTUK PENGAMAN FILE CITRA

Securing image files is a crucial aspect in addressing information security challenges. Super encryption is an approach that combines various cryptographic algorithms to enhance data security. In this research, we implement Super Encryption by combining two algorithms, namely Route Cipher and VMPC (Variably Modified Permutation Composition). Firstly, we employ the Route Cipher to encrypt image files by rearranging the pixels in the image using a specific mapping scheme. Subsequently, we apply VMPC, a key-symmetric encryption algorithm, to encrypt the previously modified image. The use of VMPC as the second layer aims to provide additional security by incorporating efficient and secure key-symmetric encryption. The results of this research demonstrate that the combination of Route Cipher and VMPC provides strong security for image files. This method introduces a high level of complexity for attackers attempting to decrypt the image without the correct key. Moreover, this Super Encryption offers higher confidentiality and resilience against attacks on image files compared to using a single encryption algorithm.

Cybersecurity Challenges In The Era Of Digital Transformation A Comprehensive Analysis Of Information Systems

Increased digitalization in business transformation has provided significant benefits, but has also created new challenges for information security. This research aims to analyze the cyber security challenges faced in the era of digital transformation, with a focus on Information Systems. The research method used is a comprehensive analysis of literature and case studies to gain an in-depth understanding of these issues. In this research, we found that there are a number of significant challenges related to cyber security in implementing digital transformation, including malware attacks, phishing, insufficient network security, and privacy violations. Causal analysis concluded that insufficient training and security awareness, as well as weak design in information systems, were the main risk factors. The implication of this research is the need for proactive steps in implementing strong security practices in information systems, including adequate training for employees, careful security monitoring, and early warning of security threats. In addition, the importance of collaboration between organizations, governments and related entities in facing increasingly global threats was also highlighted.

Synthetic data

The rise of data-driven businesses poses a number of significant challenges for contemporary organisations. These include legal and ethical considerations arising from the use of personal data, the growing challenges of information security, and the difficulty managing the volume of data generated in business transactions of different kinds. The exponential growth of data continues unabated with global data volumes reaching 181 zettabytes by 2025, and with 90% of the world’s data generated in the last two years alone. This massive growth can be mainly attributed to data gathered by Internet of Things (IoT) and related sensory devices, in addition to data generated through the human use of digital tools and applications. Given this abundance of real-world data, in what context could synthetic data be necessary? This paper highlights the growing organisational use of synthetic data and explores where and how it can be optimally used. It examines the ethical aspects of synthetic data usage, the need to garner public perception and acceptance, and the key aspects of traceability, accountability and risk mitigation.

Factors Contributing to a Land Value Information System to Become a Solution for the Shortage of Property Transaction Evidence in Sri Lanka: Property Valuers’ Perception

In developing markets, obtaining comparable evidence for real estate valuations is often challenging. Land Value Information Systems that aim to gather, store, handle, retrieve, and perform land-related data for lawful, organizational, and institutional decision-making processes, have been used in developed countries to address this issue. However, Sri Lanka lacks a comprehensive land value information system. Thus, this study aimed to examine the factors that contribute land value information systems to become a potential solution in addressing lack of property transaction data, focusing on the perception of property valuers in Sri Lanka. A structured questionnaire, unstructured interviews and discussions were used with 30 professional real estate valuers in both qualitative and quantitative methods, revealing a positive attitude towards adopting the system. The advantages of such systems were aligned with time saving, accessibility to up-to-date data, convenience, etc., while concerns included disrupting the valuation industry’s monopoly and information security challenges. The contributing factors were identified under three main categories, technological factors, organizational factors and people factors. Study findings revealed that technological factors were ranked high as most impactful for the successfulness of a land value information system. While technological and organisational factors were deemed achievable during implementation, the study suggests additional efforts, such as establishing a help desk, conducting training programmes to address people-related factors.

Real-time Cyber-Physical Security Solution Leveraging an Integrated Learning-Based Approach

Cyber-Physical Systems (CPS) has emerged as a paradigm that connects cyber and physical worlds, which provides unprecedented opportunities to realize intelligent applications such as smart home, smart cities, and smart manufacturing. However, CPS faces a great number of information security challenges (e.g., attacks) due to the integration of CPS as well as the human behaviors and interactions. Therefore, accurate and real-time attack detection and identification are essential to ensure information security and reliability of CPS. In this paper, we propose a novel integrated learning method that accurately detects an attack of a CPS system and then identifies the attack type in real time. Specifically, we consider a One-Class Support Vector Machine (OCSVM) model that only relies on the data from the normal state for training to achieve a real-time and effective detection of a CPS system state (i.e., normal or under-attack). If the system is detected to be under-attack, we then develop a Pairwise Self-supervised Long Short-Term Memory (PSLSTM) approach to identify the attack type, which aims to accurately distinguish the known attack types and discover unknown new attacks. Lastly, experimental results show the proposed method achieves promising performances compared with conventional and state-of-the-art learning-based benchmarks.

Information security and privacy challenges of cloud computing for government adoption: a systematic review

Information security and privacy challenges of cloud computing for government adoption: a systematic review

Blockchain-based e-commerce supply chain logistics management model innovation in the context of big data analysis

Abstract Facing the triple challenges of information opacity, inefficiency, and security in e-commerce supply chain logistics, this study turns to blockchain technology for solutions. Blockchain’s decentralization, transparency, and security features present fresh avenues for overcoming these obstacles. By harnessing the Adaboost algorithm, we optimize logistics data processing to bolster decision-making efficiency. Moreover, using game theory, we analyze how information sharing strategies among enterprises affect logistics management, advocating for a paradigm shift towards cooperative logistics modes. Implementing blockchain technology in our study led to a significant leap in logistics transparency and efficiency, with experimental data revealing a 20% decrease in logistics costs and a 30% enhancement in efficiency. These findings affirm the role of blockchain as a catalyst for innovation in e-commerce supply chain logistics, promoting a more efficient and secure information-sharing ecosystem.

Insider Threat Detection: Exploring User Event Behavior Analytics and Machine Learning in Security Reviews

With the exponential increase in technology use, insider threats are also growing in scale and importance, becoming one of the biggest challenges for government and corporate information security. Recent research shows that insider threats are more costly than external threats, making it critical for organizations to protect their information security. Effective insider threat detection requires the use of the latest models and technologies. Although a large number of insider threats have been discovered, the field is still limited by many issues, such as data imbalance, false positives, and a lack of accurate data, which require further research. This survey investigates the existing approaches and technologies for insider threat detection. It finds and summarizes relevant studies from different databases, followed by a detailed comparison. It also examines the types of data used and the machine learning models employed to detect these threats. It discusses the challenges researchers face in detecting insider threats and future trends in the field.

Information Security and Telecommunications Prospects of Machine-Learning-Based Methods in Chaotic Systems

In the dynamic landscape of information security and telecommunications, this paper delves into the multifaceted realm of machine-learning-based methods, with a particular focus on their application in chaotic systems. An informative introduction sets the way for a thorough examination of the major benefits provided by reservoir computing (RC) and machine learning (ML) in telecommunications. The first segment of this study scrutinizes the role of machine learning in fortifying information security. With the ever-evolving nature of cyber threats, understanding the nuances of ML becomes imperative. The article highlights key advancements and features in ML that contribute to bolstering data security, providing a nuanced perspective on its efficacy in addressing the intricate challenges posed by contemporary paradigms for information security. Moving forward, the discussion expands to reservoir computing and its implications in telecommunications. Reservoir computing, with its unique approach to processing information through dynamic systems, has emerged as a promising technique. The article dissects its applications in the telecommunications sector, shedding light on how reservoir computing augments information processing and transmission efficiency within complex networks. A pivotal aspect of this paper is the exploration of the double-reservoir solution — a cutting-edge approach that combines the strengths of reservoir computing for enhanced performance. This innovative solution is dissected in detail, uncovering its prospects and the challenges it presents. The incorporation of double-reservoir solutions into chaotic systems represents a paradigm shift in the optimization of system dynamics and represents a major advancement in tackling important telecommunications difficulties. Yet not just this paper offers insights into this solution, it fairly describes possible challenges with implementation of such a model. It is to be taken into consideration, hence there is no ‘perfect’ solution for such a complex problem. This paper provides a comprehensive view of machine-learning-based solutions for information security and telecommunications challenges. By unraveling the capabilities of both machine learning and reservoir computing, it unlocks avenues for further research and development in harnessing these technologies to fortify the foundations of secure and efficient telecommunications in the face of constantly developing threats. The insights presented herein lay the groundwork for future innovations, urging researchers and practitioners to delve deeper into the synergy of machine learning and chaotic systems for transformative advancements in these critical domains.

Educational Management Strategies to Address Information Security Challenges in the Use of Social Media in Learning Environments

With the advancement of information technology, social media has become an integral part of daily life, including in the field of education. However, the use of social media in the learning environment is not exempt from information security challenges that can impact the effectiveness and sustainability of the learning process. This research aims to examine educational management strategies to address information security challenges in the use of social media in learning environments. The study employed an extensive review of existing literature through qualitative analysis to gain a comprehensive insight into the subject, covering the period from 2017 to 2023. The study's findings indicate that, in addressing the complexity of information security challenges related to the use of social media in learning environments, a holistic educational management approach is necessary. Awareness of risks, the development of clear policies, the selection of secure technologies, external collaboration, and continuous monitoring are key factors in creating a safe and innovative learning environment.

Research on Internet Technology Innovation and Information Security Challenges in New Vehicle Energy Sector

With the rapid proliferation and advancement of new energy vehicles, Internet technology has garnered significant attention and application in this field. This study focuses on innovations in Internet technology in the domain of new automotive energy and the associated information security challenges. The innovations in Internet technology relevant to new energy vehicles, including Telematics, intelligent driving, and remote control, are initially explored. Subsequently, the information security challenges brought about by these innovations are analyzed, encompassing various aspects such as data privacy breaches, remote attacks, and malware infections. The significance of information security in the development of new energy vehicles is emphasized. Solutions and suggestions, including the strengthening of encryption technology, the establishment of a robust security framework, and the enhancement of user education and awareness, are put forward. In conclusion, the current state of research on Internet technology innovation and information security challenges is summarized, and it is suggested that future research should delve deeper into the trajectory of Internet technology development in the field of new energy vehicles, along with the attendant information security challenges, to provide theoretical and practical support for promoting the healthy development and secure application of the new energy vehicle industry.

COBIT 2019 INFORMATION SECURITY FOCUS AREA IMPLEMENTATION FOR REINSURCO DIGITAL TRANSFORMATION

As information technology (IT) advancement evolves in Indonesia's insurance sector, organizations like ReinsurCo must accelerate their digital transformation (DT) to remain competitively viable. Although DT paves the way for new business models and operational improvements, the implementation often fails due to poor IT governance. Under the supervision of the State-Owned Enterprises Agency (SOE) and the Financial Services Authority (FSA), ReinsurCo must comply with regulations stating that SOEs must independently assess IT maturity to ensure information security. This research utilizes the five stages of Design Science Research (DSR): problem explication, requirement specification, design and development, demonstration, and evaluation. Data was collected through semi-structured interviews and both internal and external document triangulation. The data were then analyzed using the COBIT 2019 Information Security framework, implementing design factors prioritizing information technology governance and management (ITGM) objectives: APO13 Managed Security, DSS05 Managed Security Services, and BAI06 Managed IT Changes. Further analysis and identification were conducted to discover gaps against the seven component capabilities. These identified gaps were mapped into people, process, and technology aspects, which led to the creation of essential improvement recommendations. These recommendations were compiled into an implementation roadmap that can serve as a priority guide for ReinsurCo. This research is expected to provide a knowledge base for prioritizing information security management in supporting DT by implementing the COBIT 2019 Information Security framework. In a practical context, it aids ReinsurCo in controlling its strategic plans to face information security challenges. Furthermore, this study also offers extensive benefits to the insurance industry.

User authentication and access control to blockchain-based forensic log data

For dispute resolution in daily life, tamper-proof data storage and retrieval of log data are important with the incorporation of trustworthy access control for the related users and devices, while giving access to confidential data to the relevant users and maintaining data persistency are two major challenges in information security. This research uses blockchain data structure to maintain data persistency. On the other hand, we propose protocols for the authentication of users (persons and devices) to edge server and edge server to main server. Our proposed framework also provides access to forensic users according to their relevant roles and privilege attributes. For the access control of forensic users, a hybrid attribute and role-based access control (ARBAC) module added with the framework. The proposed framework is composed of an immutable blockchain-based data storage with endpoint authentication and attribute role-based user access control system. We simulate authentication protocols of the framework in AVISPA. Our result analysis shows that several security issues can efficiently be dealt with by the proposed framework.