Concern For Information Security Research Articles

The Impact of Cybercrime in Modern Generation Based on Systematic Literature Review Analysis

Cybercrime is a term for any illegal activity that uses a computer as its primary means of commission. Due to the pervasive presence of the internet, the modern generation faces unprecedented challenges posed by cybercrime. Cybercrime has brought a lot of impacts to individuals, societies, and institutions in contemporary times. Sadly, it has become one of the most worrying issues in the current world. This study was done to determine the impact of cybercrime in modern generation. This research employs a qualitative approach by conducting a systematic literature review utilizing the PRISMA method. Moreover, it incorporates the outcomes of prior studies by employing a screening process to identify and critically access each one, thereby reestablishing their significance with the current study. The results of the study found impacts of cybercrime in modern generation which are financial consequences, expanding security budget, social implications, information security concern, and psychological and emotional toll.

English

One of the major technologies in delivering infrastructure and data service requirements at low cost and with minimal effort is Cloud Computing (CC), which has been implemented in several aspects of the IT industry. Since the rapid growth of CC has been observed, there is still an information security concern that intruders completely attack. With the potential of being practised in various utilizations, blockchain can be implemented in several cloud service providers. Blockchain platform has basically performed a large computation quantity which doesn’t accomplish the practical purpose of building Proof of Work (PoW) with context awareness accord from decentralized participants. Long Short-Term Memory (LSTM)has been designed particularly for overcoming the long-term dependency issues faced by Recurrent Neural Networks (RNN). This paper focuses on a novel consensus mechanism by LSTM which consists of feedback connections in making a difference with several conventional feed-forward Neural Networks. The research directed computation spent to consensus towards RNN optimization for better cyber security in blockchain implemented in the cloud platform. However, the enormous amount of data involved in the blockchain has been trained through the LSTM model that supports serving learning proof through cell states which handle the network of current long-term memory. Therefore, Contextual Identity Management (CAIM) mechanism is adopted through the LSTM model in blockchain for various Cloud Service Provider(CSP) in unifying the contextual details with the process of identity management that generate the probable robust solution. This assists in creating better decisions with respect to policy, authentication, routing and authorization for recent interacted data. Moreover, the proposed LSTM model in blockchain has been compared with the existing cyber-secured model of blockchain to determine the efficiency of the cyber-secured model of blockchain in the cloud platform.

Explaining the digital divide in the European Union: the complementary role of information security concerns in the social process of internet appropriation

ABSTRACT Most theoretical and empirical explanations of the generation of digital divides have been integrated into the resources and appropriation theory, which proposes a sequential model reflecting a socially unequally distributed digital divide. The unequal social distribution is reflected in internet use that is sequentially influenced by motivations/attitudes, physical access, and digital skills. We extend the sequential model by exploring the complementary role of information security concerns in producing the digital divide. Using a predictive approach, we tested a comprehensive partial least squares-structural equation model with data from a European Union survey, finding that information security concern is another significant determiner of the digital divide. Heterogeneity in social internet appropriation can be summarized in social mechanisms explained by education and age among well-educated Europeans, and by country digital development among less well-educated Europeans. We conclude with a discussion of theoretical and policy implications of our findings.

Situational Contingencies in Susceptibility of Social Media to Phishing: A Temptation and Restraint Model

ABSTRACT User susceptibility to phishing messages on social media is a growing information security concern. Contingency factors that can influence this susceptibility and the theoretical mechanisms through which they operate need more scholarly attention. To bridge this gap, we present a temptation and restraint (TR) model (a specific manifestation of the dual–system theory) of social media phishing susceptibility, which explains it as an outcome of a struggle between users’ temptation toward engaging with a social media phishing message and their cognitive and behavioral restraint against it. The balance in this struggle is a function of various situational contingencies. First, via a Delphi study, we identify four key situational contingency factors in the context of social media that can influence this balance: (1) poor sleep quality, (2) social media ostracism, (3) source likability, and (4) fear appeals. Next, via five randomized controlled experiments using an ostensible social media paradigm with social media users, we show that the TR model explains (a) why and how users engage with social media phishing messages, and (b) when users are more or less susceptible to it based on key situational contingency factors. Our findings offer a nuanced perspective on social media phishing susceptibility, elucidate the fundamental roles of situational contingencies in the genesis of social media phishing victimization, and delineate important directions for future research in this area

Using Rational Choice Theory to Explore Factors Impacting Contact Tracing Application Adoption

ABSTRACT Effective contact tracing is an important tool in trying to control the spread of highly infectious diseases. Utilizing the theory of reasoned action and rational choice theory, this study explores factors impacting the adoption of mobile contact tracing application. Findings indicate that perceived benefits of usage and perceived costs of non-usage positively impact an individual’s attitude toward usage intention, while information security concern as perceived cost of usage has a negative effect.

A survey on techniques, methods and security approaches in big data healthcare

A huge percentage of people especially in developed countries spend a good chunk of their wealth in managing their health conditions. In order to adequately administer healthcare, governments and various organizations have embraced advanced technology for automating the health industry. In recent past, electronic health records have largely been managed by Enterprise Resource Planning and legacy systems. Big data framework steadily emerge as the underlying technology in healthcare, which offers solutions that limits capacity of others systems in terms of storage and reporting. Automation through cloud services supported by storage of structured and unstructured health data in heterogeneous environment has improved service delivery, efficiency, medication, diagnosis, reporting and storage in healthcare. The argument support the idea that big data healthcare still face information security concern, for instance patient image sharing, authentication of patient, botnet, correlation attacks, man-in-the-middle, Distributed Denial of Service (DDoS), blockchain payment gateway, time complexities of algorithms, despite numerous studies conducted by scholars in security management for big data in smart healthcare. Some security technique include digital image encryption, steganography, biometrics, rule-based policy, prescriptive analysis, blockchain contact tracing, cloud security, MapReduce, machine-learning algorithms, anonymizations among others. However, most of these security solutions and analysis performed on structured and semi-structured data as opposed to unstructured data. This may affect the output of medical reporting of patients’ condition particularly on wearable devices and other examinations such as computerized tomography (CT) Scans among others. A major concern is how to identify inherent security vulnerabilities in big healthcare, which generate images for transmission and storage. Therefore, this paper conducted a comparative survey of solutions that specifically safeguards structured and unstructured data using systems that run on big data frameworks. The literature highlights several security advancements in cryptography, machine learning, anonymization and protocols. Most of these security frameworks lacks implementation evidence. A number of studies did not provide comprehensive performance metrics (accuracy, error, recall, precision) of the models besides using a single algorithm without validated justification. Therefore, a critique on the contribution, performance and areas of improvements discussed and summarized in the paper.

SaaS or not: optimal versioning strategy of releasing enterprise software

PurposeWith the rapid development of cloud computing, most software firms face the significant choice of whether they should change the versioning strategy of enterprise software from releasing the on-premise version to the software-as-a-service (SaaS) version. Data being generated and hosted on SaaS vendors' servers brings multiple effects. It enables customers to enjoy the flexibility of accessing data and using the software remotely, named the “portability” effect. However, on the other hand, the cumulative data resources on the cloud also provide a clear target for external attacks, leading to the concern of information security. Considering these, the authors hope to offer insights for software firms by exploring the strategy selection problem.Design/methodology/approachTaking the portability effect and security risks of the SaaS licensing model into account, the authors develop a two-period model to figure out the market segmentation and identify the feasible conditions for employing three alternative strategies. Comparative statics analyses are conducted to explore the influencing mechanism of exogenous factors on strategy selection. The authors also discuss the strategy selection in the presence of the network effect and the security loss faced by users of on-premise software.FindingsOne significant finding is that the on-premise strategy can be excluded when the potential loss from security risks is small. Under this circumstance, the dual version strategy is optimal provided that the increase of customer valuation caused by portability effect is below a threshold. Otherwise, the SaaS strategy generates the highest profit. When the potential loss from security risks turns large, the on-premise strategy, the dual version strategy and the SaaS strategy are the optimal options in order as the portability effect on customer valuation gets stronger.Originality/valuePrevious literature has insufficiently addressed the versioning issue of enterprise software. In this paper, the distinctive features of the SaaS model are considered, and differentiated results compared with previous work are obtained. The research results provide guidelines for software firms in deciding their product releases in the future.

TUI Model for data privacy assessment in IoT networks

The development of the Internet of Things (IoT) has been at the forefront of progressing societal functionality. However, the addition of IoT devices in conventional information technology (IT) infrastructure has raised and prioritized the concern of information security and data privacy. The Common Vulnerability Scoring System (CVSS) is a framework for providing information to the public about the impact of vulnerabilities and exploits executed on a multitude of devices. While the CVSS addresses a plethora of conditions for vulnerabilities, it does not adequately make end-users aware of the impact data privacy can have on their devices. The primary objective of this research work is to extend the existing CVSS and propose a new model that acknowledges Transparency, Unlinkability, and Intervenability (TUI) to address the data privacy issues of IoT devices when scoring impacts of vulnerabilities. Our research has developed this model to provide a new sufficient score for analyzing the true impact of compromised data privacy. After the development of the new scoring for TUI, our research highlights case studies to emphasize the impact our TUI model will have on the CVSS. We strongly believe that our proposed model benefit both the individual users (consumers of IoT devices) and the industry to portray the possible vulnerabilities from a user standpoint as well as a manufacturer standpoint.

The Impact of Knowledge of the Issue of Identification and Authentication on the Information Security of Adolescents in the Virtual Space

Information security in the context of digital literacy is a digital skill that enables safe and purposeful movement through virtual space. Due to rapid and unstoppable technological progress, multiplying opportunities and pushing the boundaries of digital technology and the Internet, the interest of the state and institutions within the state is to raise digital competencies of citizens, with special emphasis on children and youth as the most vulnerable groups of Internet users. The age limit and frequency of use of the Internet by young generations has been moved back a year due to the COVID-19 pandemic, and the concern for information security of young people is increasingly emphasized. If, and to what extent, knowledge of the issue of identification and authentication affects the information security of high school students aged 16 to 19 in the virtual space, the research question addressed by the authors of this paper was to determine which student behaviors pose a potential danger compromising their information security by establishing a correlation between the variables that determine student behavior and the variables used to examine their level of security in a virtual environment. The research was conducted using a questionnaire on a sample of high school students in the Republic of Croatia, the results of which showed that some students practice behaviors that are potentially dangerous, make them vulnerable and easy targets of cyber predators and attackers, which is why there is cause for concern and a need for a additional education of children of primary and secondary school age in the field of information security in the form of the introduction of the subject Digital Literacy. Based on the results, a model for assessing the level of digital literacy of adolescents that affect information literacy can be designed, but also further related research in the field of information literacy of children and youth can be conducted.

Promoting Information-Resource Sharing within the Enterprise: A Perspective of Blockchain Consensus Perception

The prevalence of information technology (IT) and information systems (IS) provides opportunities for enterprises to sustain open innovation. However, information silos that appeared with IS use have made IS inconvenient and thus impeded enterprises’ open innovation. The present study, therefore, aims to resolve this issue by helping understand how to encourage information-resource sharing within the enterprise. We first proposed a new concept—consensus perception—based on the blockchain characteristics and advantages derived from prior studies, and then developed a conceptual model based on the consensus perception and principal–agent theory. Second, we used this conceptual model to investigate whether blockchain technology (BT) can be used to promote information-resource sharing. The results showed that information security concern, perceived rewards, and openness have direct influences on information-resource sharing intention and that trust has indirect effects. The findings provide useful theoretical and practical contributions to sustain enterprises’ open innovation by adopting BT to solve the information-resource sharing issues.

Kepedulian Keamanan Informasi di Pemerintahan: Praktik Manajemen dan Dampaknya

Currently the organization is facing challenges due to the Covid19 pandemic which has caused changes in work patterns for all members of the organization. The priority of management is to give more attention to information security, especially for members and government organizations in general. Various information security practices have been carried out, but there are obstacles that occur such as the lack of awareness of information security, work behavior, work culture and the lack of human resources available and this can have a negative impact on the level of information security concern in the organization. Information security practices carried out by management do not always have an impact on changes in the behavior of organizational members. From the data obtained, there are many information security practices that may have been implemented by management. But do members of the organization care about the practice. Therefore, it is important to conduct research with the aim of knowing the practice of information security concern that has been carried out by management whether it has an impact on organizational members, especially the organization itself. This study used qualitative and quantitative interpretive approaches as a data collection process in three government organizations. Qualitative is used to obtain data from management and processed using the SAP-LAP model through interviews. Then an online survey was conducted with members of the organization to determine the impact of implementing information security care practices on the organization. The results show that organizational members have a high level of concern for the management's information security practices.

A superlative image encryption technique based on bit plane using key-based electronic code book

To contend with the growing concern of information security, firms are espousing cryptography for protection. To comprehend this need, the paper proposes a block cipher that ensures confidentiality and secrecy for secure data communication network. A high-quality cryptographic process ensures high entropy, high key sensitivity, ability to resist known plaintext and chosen-plaintext attack, high speed of execution, high key space, high randomness and resistance towards differential attack. In projected work, encryption mechanism is comprises of multiple processes and each process is devised key dependent utilizing diverse keys to ensure high key sensitivity and vast resistance power towards differential attack. The keys are generated using contemporary encryption process- the quantum chaotic map due to its high randomness and non periodicity, which includes confusion and diffusion processes. For the confusion process, Electronic Code Book (ECB), Initial Permutation (IP), Bit plane scrambling, and Inter bit plane scrambling are employed. The ECB and IP, being matching processes are chosen for high speed of execution. Bit level permutation unlike byte level is applied to reinforce randomness, in conjunction with variable number of rounds as per the security key. For diffusion process, the folding technique is used along eight directions, exploiting different keys. To reveal the efficacy of the proposed methodology, it is compared with the existing renowned methods on the basis of Cryptanalysis, Perceptibility analysis, Statistical analysis, etc. It is asserted that results such as differential attack, cryptanalysis, and key space analysis are reasonably enhanced than others while entropy and speed of execution are at equivalence with other techniques.

A Framework of APT Detection Based on Packets Analysis and Host Destination

So far, APT (Advanced Persistent Threats) is a constant concern for information security. Despite that, many approaches have been used in order to detect APT attacks, such as change controlling, sandboxing and network traffic analysis. However, success of 100% couldn’t be achieved. Current studies have illustrated that APTs adopt many complex techniques to evade all detection types. This paper describes and analyzes APT problems by analyzing the most common techniques, tools and pathways used by attackers. In addition, it highlights the weaknesses and strengths of the existing security solutions that have been used since the threat was identified in 2006 until 2019. Furthermore, this research proposes a new framework that can be used to repel this threat based on APT activity with network traffic through packets analysis and host destination.

Forewarned is forearmed

PurposeInternet of Things (IoT) interconnects many heterogeneous devices to each other, collecting and processing large volumes of data for decision making without human intervention. However, the information security concern it brings has attracted quite a lot of attention, and, at this stage, the smart step would be to analyze the security issues of IoT platform and get to the state of readiness before embarking upon this attractive technology. The purpose of this paper is to address these issues.Design/methodology/approachIoT risk assessment through the application of the analytical hierarchy process (AHP), a favorite multi-criteria decision making technique, is proposed. The IoT risks are prioritized and ranked at different layers, before which a well-defined IoT risk taxonomy is defined comprising of 25 risks across six layers of the IoT model for developing control and mitigation plans for information security of IoT.FindingsPeople and processes layer, network layer and applications layer are the top three critical layers with risks like the lack of awareness, malware injection, malicious code injection, denial of service and inefficient policies for IoT practice get the highest priority and rank. Pareto analysis of the overall risk factors revealed that the top ten factors contribute to 80 percent of the risks perceived by information security experts.Research limitations/implicationsThe study focuses only on certain predefined constructs or layers of the IoT model traced from legacy studies. It is essential to re-look these constructs on a timely basis to prolong the results’ validity. The study’s empirical scope is confined only to the risk perception of select IoT experts and does not encompass a broader segment of the IoT ecosystem. Therefore, the risks assessment may not be sweeping to a bigger audience.Practical implicationsThe study implications are two-fold: one it consolidates the earlier siloed works to intensify the need for risk assessment in the IoT domain, and second the study brings yet another contextual avenue of extending the application AHP and Pareto principle combination. The paper also draws specific critical organizational interventions about IoT risks. A comprehensive approach to prioritizing and ranking IoT risks are present in this research paper.Originality/valueThe contribution of this study to the benchmarking of IoT risk assessment is two-fold. One, a comprehensive risk assessment taxonomy is proposed, and two, the risks are prioritized and ranked to give a convincing reference for the organizations while making information security plans for IoT technology.

Which Aspects of Big Data Usage is Creating Information Security Concern?

The present research study proposed some of the big data usage perspective for testing either they have role in creating information security concern or not. The researchers first dig out some of the theoretical support for filling the gap regarding big data and information security bridge that was previously noted in the literature. The present researches approached big data analytics manager in the Pakistani banking industries for validating the proposed model. The Data was analyzed by using SPSS Andrews approach due to the nature of the research study. The findings revealed that proposed perspective including perceived benefits, cloud storage and online behavior monitoring should be test in the future studies by proposing their indirect affect in the creation of information security issue. The study brings new aspect in the literature of management regarding big data usage practices.

A Review on Information Security

In now days the concept of the Information risks and Security is becoming a fast-moving discipline. In now days thesystems are assembled on different machines belongsto the same principals with the different interests, information of different machines are now becoming as important to depend on technical design. The information security not only provides the ‘security’ topics such as data loss prevention, bugs, data breaches, spam, and phishing, but also in many other areas such as system dependability (person-to-person design and efforts by testers and programmer)t, and policy (the rights of management). Main aim of this research program has been starting to think over more general security questions (such as law-enforcement strategy, performance), and also the interface between security and the computer sciences. Most commonly and recently the more concern of information security is due to various Information risk. This paper provides you the overview about how we secure our data and our information from unauthorized personsand from hackers. For the practice the various organization will choose many method to overcome the problem of information risk. The promise of this research program is to aware you about the information related risks and how to cope with that.

User characteristics that influence judgment of social engineering attacks in social networks

Social engineering is a growing source of information security concern. Exploits appear to evolve, with increasing levels of sophistication, in order to target multiple victims. Despite increased concern with this risk, there has been little research activity focused upon social engineering in the potentially rich hunting ground of social networks. In this setting, factors that influence users’ proficiency in threat detection need to be understood if we are to build a profile of susceptible users, develop suitable advice and training programs, and generally help address this issue for those individuals most likely to become targets of social engineering in social networks. To this end, the present study proposes and validates a user-centric framework based on four perspectives: socio-psychological, habitual, socio-emotional, and perceptual. Previous research tends to rely on selected aspects of these perspectives and has not combined them into a single model for a more cohesive understanding of user’s susceptibility.

핀테크 사용에 대한 정보프라이버시 염려와 이용자 저항에 대한 연구: 조절초점성향과의 상호작용 효과 고찰

ABSTRACT Recently, there is a growing interest in Fintech which is a bus iness based on using IT to provide financial services. At the early stage of diffusion of Fintech, one of the issues raised i s the concern for information security. This study examines actual users' information privacy concern and user resistance to Finte ch services. We also investigates the effects of social influen ce and mobile Internet literacy on information privacy concern and user resistance. In particular, this research verifies the interaction effect between regulatory focus and information privacy concern to influence user resistance. Based on the findings, the resul ts of this study provide strategic implications for firms which at tempt to reduce user resistance to Fintech services and prolife rate Fintech usage. Keywords: Fintech, Information Privacy Concern, User Resistance, Regulatory Focus I.서 론 * 인터넷의 발달로 인한 각 산업영역의 융복합화 현상은 관련 산업을 활성화시켜왔다. 특히 최근에는 보수성이 강한 금융 분야와 개방성이 특징인 IT서비스 Received(10. 01. 2015), Modified(11. 02. 2015), Accepted(11. 02. 2015)†주저자, arlee12@naver.com‡교신저자,

LPPS: A Distributed Cache Pushing BasedK-Anonymity Location Privacy Preserving Scheme

Recent years have witnessed the rapid growth of location-based services (LBSs) for mobile social network applications. To enable location-based services, mobile users are required to report their location information to the LBS servers and receive answers of location-based queries. Location privacy leak happens when such servers are compromised, which has been a primary concern for information security. To address this issue, we propose the Location Privacy Preservation Scheme (LPPS) based on distributed cache pushing. Unlike existing solutions, LPPS deploys distributed cache proxies to cover users mostly visited locations and proactively push cache content to mobile users, which can reduce the risk of leaking users’ location information. The proposed LPPS includes three major process. First, we propose an algorithm to find the optimal deployment of proxies to cover popular locations. Second, we present cache strategies for location-based queries based on the Markov chain model and propose update and replacement strategies for cache content maintenance. Third, we introduce a privacy protection scheme which is proved to achievek-anonymity guarantee for location-based services. Extensive experiments illustrate that the proposed LPPS achieves decent service coverage ratio and cache hit ratio with lower communication overhead compared to existing solutions.

ECC-Based Multi-Document Fail-Stop Signature Encryption Scheme

Although digital information development brings greater convenience to people’s everyday lives via information technology in recent advancements, digital information content is incredibly easy to be eavesdropped, counterfeited, and distorted to alter genuine knowledge after it is digitized to produce fake ones. How to ensure that the information cannot be subjected to be intercepted, comprised or tampered with is a major concern of information security. In other words, the authenticity, integrity, non-repudiation and confidentiality of the electronically transmitted data must be maintained from sender to receiver. Like other security practices, a ＂digital signature＂ has been extensively used in many secure protocols and can fulfill the aforementioned requirements. This paper presents an improved ＂failstop signature＂ (FSS) approach which uses ＂elliptic curve cryptography＂ (ECC) to provide higher security and better performance for ＂multi-document＂ authentication. With the signature design of encryption function, users not only can employ the avalanche effect of unsystematic properties to chaotically generate mutual secure cipher keys against the counterfeiting problems, but also apply advantage of the size of the key required for encryption and ＂digital signatures＂ to rapidly perform digital transmission of the document-ciphertext message in diverse network environments.