Information Security Performance Research Articles

Fostering security-related citizenship through the employee-supervisor relationship: An examination of supervisor security embodiment

Organizational information security performance is increasingly dependent on employees’ security-related citizenship behaviors that stretch beyond the scope of formal organizational prescription and control. Unfortunately, cultivating enactment of these valued behaviors has proven challenging for many companies. The literature has recognized workplace relationships as important determinants of behavioral security outcomes and extra-role security behaviors (ERBs) in particular. Taken further, an employee's relationship with the immediate supervisor is recognized as one of the most influential relational factors shaping a variety of workplace behaviors, including those related to security. Consistent with these notions, scholars have called for making the employee-supervisor relationship a more central component of behavioral security research and practice. Currently however, beyond recognition of this relationship's importance, the knowledge base is unclear about how it shapes ERB enactment. Because employees view supervisors as both organizational agents and as individuals in their own rights, this relationship has the potential to drive productive or counterproductive security behaviors, depending on how aligned the supervisor's security values are with those of the organization. Yet, the security literature has given surprisingly little consideration to the notion that employees can differ in the extent to which they perceive supervisors as embodying organizational information security values. Responding to this gap, the current study examines how employee-supervisor relations and perceived security-related value alignment between supervisors and the broader organization shape employees’ commitment to organizational information security and ultimately, ERB enactment. Grounded in the social identity theory of leadership (SITL), a research model is developed that positions high-quality employee-supervisor exchange as a direct antecedent of affective commitment to organizational information security, which then serves as a central intrinsic motivational mechanism driving ERB enactment. Further, rooted in SITL's principles on leader prototypicality and supervisor organizational embodiment, employee-perceived value alignment between the immediate supervisor and the organization as a whole—referred to here as supervisor security embodiment (SSE)—is introduced as a critical boundary condition influencing the extent to which employee-supervisor relations drive commitment. Results from model testing empirically demonstrate the value of SSE in explicating how this important relationship shapes workplace ERB enactment, through its influence on affective commitment to organizational information security performance.

Dynamic encryption method for MQTT communication

Internet of vehicles (IoV) system is mixed-criticality, and different functions have different requirements for information security and real-time performance. Thesis aims to design a comprehensive dynamic encryption algorithm to ensure the function of the IoV system while taking into account the security level required by different critical functions. The algorithm can flexibly coordinate the security requirements between different functions, improve the efficiency and reliability of the system to the greatest extent, and ensure information security. In order to verify the performance of the algorithm, thesis uses Pycharm platform to carry out simulation experiments through python programming and verifies the feasibility of the algorithm.

정보보호최고책임자의 겸직과 정보보호 성과: 정보보호 공시 데이터를 중심으로

정보보호최고책임자의 겸직과 정보보호 성과: 정보보호 공시 데이터를 중심으로

Information Security and Risk Control Model Based on Plan-Do-Check-Action for Digital Libraries

To continuously and effectively control the potential risk factors of digital libraries, further improve the quality of digital library usage, ensure the smooth operation and information security of digital libraries, a security and risk factor control model for digital libraries based on the Plan-Do-Check-Action is constructed. A digital library security and risk identification model based on improved support vector machines is constructed. Based on the obtained risk identification results, a Plan-Do-Check-Action management model is implemented for information security in digital libraries. The R2L dataset in the network attack dataset is used for training and testing model performance. Then the proposed method is applied to two different digital libraries. The average accuracy of the risk identification model proposed in the research is 96.46%. The risk error of each level is maintained within 0.4%, which is within an acceptable range. The proposed method has a high recognition effect. It can be used to identify common security and risk issues encountered in digital libraries, and improve the information security performance.

Multi-biometric fusion for enhanced human authentication in information security

In the digital age, information security has taken on greater importance, necessitating the development of strong and trustworthy human authentication techniques. Traditional single-factor authentication schemes, such passwords or PINs, are prone to a number of security flaws. Multi-biometric fusion approaches have become a possible remedy to these restrictions. In comparison to other fusion techniques, feature level fusion is a very popular technique. Features are taken from every biometric attribute in this fusion. Then, the retrieved features are concatenated to create a high dimension final feature vector. In this study, we present a novel method for feature-level fusion employing optimal feature level fusion. The essential features are chosen and identified using a Binary chimp optimized adaptive kernel support vector machine (BCO-AKSVM). According to f1-score (99 %), recall (98 %), accuracy (97 %), precision (88 %), and time computation (1000 ms), the experimental results of the suggested method are analyzed. When compared to current methods, it can show that the proposed BCO-AKSVM achieves the highest performance of information security in human biometric authentication. Multi-biometric fusion is anticipated to play a significant role as technology develops in maintaining secure access control and safeguarding sensitive information in numerous sectors.

Human Resource Information Systems Information Security and Organizational Performance of Commercial State Corporations in Kenya

The purpose of this study was to establish the influence of HRIS information security on the organisational performance of commercial state corporations in Kenya. A Cross-sectional descriptive research design was used. The population was drawn from 55 Commercial State Corporations in Kenya. The units of observation were the managing directors or chief executive officers, directors of human resources, and deputy directors of human resources. The study used qualitative and quantitative methods to collect primary and secondary data. Data were collected from 110 respondents. Questionnaires and interviews were used to collect data for the study, supplemented by secondary sources. SPSS version 23.0 was used to analyse data using descriptive analysis, factor analysis, Pearson correlation, analysis of variance (ANOVA), and regression. The correlation and regression results revealed that HRIS Information Security had a positive and significant relationship with Kenya's Organizational Performance of Commercial State Corporations. The null hypothesis indicating no significant relationship between HRIS Information Security and Organisational performance of Commercial State Corporations in Kenya was rejected. From the study findings, it was recommended that organisations should keep a record of who is in charge of implementing the security agenda across the board and let all employees know about it. Information security policies, organisational internet usage policies, software management policies, and security expectations that align with the functions' tasks should all be explained to and covered in the training for employees

Mechanically strong, flexible, and flame-retardant Ti3C2Tx MXene-coated aramid paper with superior electromagnetic interference shielding and electrical heating performance

Undesirable electromagnetic interference (EMI) created by modern electronic devices has detrimental effects on the performance of high-precision electronic devices, information security, and human health. Therefore, lightweight, flexible, robust, and easy-to-fabricate EMI shielding materials with integrated functions are highly desirable to combat electromagnetic pollution. Herein, we report a scalable and facile strategy to prepare a flexible Ti3C2Tx MXene-coated aramid paper (MAP) with high-efficiency EMI shielding and excellent electrical heating performance. The intertwined network by aramid fibers endows the aramid paper (AP) with superior mechanical properties. After selectively single/dual coating with MXene onto AP, the MAP maintains a superior tensile strength of 73.6 MPa and enormous folding endurance of 4156 times. Owing to the exceptional electrical conductivity of MXene, the MAP with a relatively low MXene content (∼9.0 wt%) exhibits excellent overall performance with an EMI shielding effectiveness (SE) of 38 dB and SE/t of 422.2 dB mm−1. It’s noteworthy that the EMI SE of the MAP remains almost unchanged (37.4 dB) even after experiencing 5,000 repeated bending cycles. Additionally, the MAP shows satisfactory Joule electric-heating capability (a heating temperature rise of 130 °C at a low driving voltage of 5 V) and excellent flame-retardancy. This work provides a feasible strategy for large-scale production of flexible EMI shielding paper with multifunctional properties for future wearable facilities.

Balancing software and training requirements for information security

Information security is one of the key areas of consideration to assure reliable and dependable information systems (IS). Achieving an appropriate level of IS security requires concurrent consideration of the technical aspects of IS and the human aspects related to the end users of IS. These aspects can be described in the form of information security requirements. We propose an approach that helps select and balance information security software requirements (iSSR) and information security training requirements (iSTR) according to the information security performance of end users. The approach was tested in an experiment involving 128 IS professionals. The results showed that using the proposed approach helps IS professionals with limited experience in information security make significantly better decisions regarding iSSR and iSTR.

Data collection and information security analysis in sports teaching system based on intelligent sensor

With the rapid development of intelligent sensor technology and the application of scenarios, the video images of moving targets collected by intelligent terminal devices can be obtained in sports teaching scenarios, and then through preprocessing, target tracking and behavior analysis, the analysis report is finally generated to achieve the effect of sports training. However, in the process of processing, the edge information of the video image is damaged, the color deviation exists, and when tracking the moving target, the final result will be affected by the deformation and partial occlusion of the target. In view of the above problems, the original bilateral filtering algorithm is changed to the multi-scale Retinex algorithm in the preprocessing to ensure that the video image is clearer and more complete and can be effectively protected. At the same time, for the target tracking algorithm, the Camshift algorithm which takes the color histogram as the tracking target and records the distribution probability is used. So that the results will not be affected by the deformation and partial occlusion of the target. The final experimental results show that the improved pre-processing algorithm and target tracking algorithm have smaller errors in operation, better protection of the edge information of video images, reduced the time consumption of the target tracking unit to be detected, and also improved its anti-jamming stability. In the future development, the image processing algorithm should have a better operation path, further reduce the running time, improve the value of UCIQE and peak signal to noise ratio, and track multiple targets at the same time with the smallest error, capture the moment to reach the single frame level, and also become better for teaching. In the system design, information security performance is compared with vulnerability identification to evaluate the security level of physical education teaching system.

THREATS AND RISKS OF THE USE OF ARTIFICIAL INTELLIGENCE

The article analyzes the advantages of using Artificial Intelligence (AI) in various fields and the risks of impact on the performance of information security and cyber security tasks, as integral components of national security. It was determined that the development of AI has become a key priority for many countries, and at the same time, questions have arisen regarding the safety of this technology and the consequences of its use. The expansion of the scope of application of AI to critical infrastructure objects, the difficulty of verifying the information resources and solutions created by these systems, the threat of a dangerous impact of the results of their operation on the safety of people, society and the state leads to the emergence of risks associated with the use of AI. The lack of transparent methods for checking the conclusions and recommendations of the proposed SSI is a source of uncertainty regarding their accuracy and practical value. This effectively means that SSI can be part of a set of information warfare measures aimed at spreading dubious unverified information and common fakes. The use of artificial intelligence technology can improve the level of computer security. The paper considers the mechanism of risk assessment from the use of AI in various industries and methods of their processing. Proposed approaches to the use of artificial intelligence systems for identification and assessment of risks that arise as a result of the use of artificial intelligence systems. Artificial intelligence plays a key role in ensuring national security, and its application in various industries contributes to improving efficiency, however, there is an urgent need to develop risk assessment mechanisms for the use of artificial intelligence systems.

RETRACTED ARTICLE: Applying blockchain technology in the corporate bond model for default risk assessment under the marketization principle

This work expects to solve the problem that the traditional corporate bond model for default risk assessment has low accuracy and poor data collection and storage robustness. Firstly, this work uses the mature Kealhofer, McQuown, and Vasicek (KMV) model to evaluate the default risk of corporate bonds. Secondly, Blockchain (BC) technology's Information Security (SEC) performance in default risk assessment is studied. Finally, it analyzes the default disposal mechanism of Chinese bond corporates. The Wind database is selected to verify the proposed model. The results show that the proposed BC-based corporate bond model for default risk assessment has a good fitting effect and can meet practical needs. The BC-based data encryption only needs 14.1 ms to obtain a key from an 821-bytes public key. The encryption time and decryption time of the Number Theory Research Unit (NTRU) system are 7.9 ms and 2.9 ms, respectively. Therefore, BC technology shows good performance in data encryption and can improve ISEC. According to the KMV model, corporate bonds have certain default risks. The Distance to Default (DtD) of corporate bonds is 20.8% lower than that of companies. Thus, corporates have higher default risk. Therefore, methods are needed to reduce the default risk and improve the earnings. The finding provides important technical support for effectively reducing the default risk of bond corporates in China and ensuring the healthy development of bond markets.

Wearable Sensors for Vital Signs Measurement: A Survey

With the outbreak of coronavirus disease-2019 (COVID-19) worldwide, developments in the medical field have aroused concerns within society. As science and technology develop, wearable medical sensors have become the main means of medical data acquisition. To analyze the intelligent development status of wearable medical sensors, the current work classifies and prospects the application status and functions of wireless communication wearable medical sensors, based on human physiological data acquisition in the medical field. By understanding its working principles, data acquisition modes and action modes, the work chiefly analyzes the application of wearable medical sensors in vascular infarction, respiratory intensity, body temperature, blood oxygen concentration, and sleep detection, and reflects the key role of wearable medical sensors in human physiological data acquisition. Further exploration and prospecting are made by investigating the improvement of information security performance of wearable medical sensors, the improvement of biological adaptability and biodegradability of new materials, and the integration of wearable medical sensors and intelligence-assisted rehabilitation. The research expects to provide a reference for the intelligent development of wearable medical sensors and real-time monitoring of human health in the follow-up medical field.

Employees’ Attitude as the Determinant of Their Information Security Performance in Information Network Security Agency

This study was aimed to assess the relationship between employees’ attitude and information security (InfoSec) performance in the Ethiopian, INSA context. Employees ‘attitude was treated as the independent variable and the InfoSec performance was treated as a dependent variable of the study. Correlational research design was employed. Using a stratified random sampling technique 320 participants were sampled. AIS and ISP scales were used to collect the data. Based on the suitability of the data and research questions, percent, frequency, independent t-test, one-way ANOVA, Pearson Correlation, and regression data analysis methods were performed. Accordingly, the present study revealed the following findings. First, employees InfoSec performance significantly differed by their sex and educational levels. Second, attitude significantly related to and predicted the employees’ InfoSec performance. Based on the findings of the study some recommendations are forwarded for different stakeholders. Keywords: Attitude, InfoSec Performance, confidentiality, integrity, availability DOI: 10.7176/CEIS/13-2-04 Publication date: March 31 st 2022

An Information Security Performance Measurement Tool for Senior Managers: Balanced Scorecard Integration for Security Governance and Control Frameworks

An Information Security Performance Measurement Tool for Senior Managers: Balanced Scorecard Integration for Security Governance and Control Frameworks

THE USE OF NEURAL NETWORK IN DEFENSE AUDIT NONLINEAR DYNAMIC PROCESSING UNDER THE BACKGROUND OF BIG DATA

The purpose is to further explore the application effect of the neural network algorithm in defense audit and improve the user information security performance. Based on the relevant theoretical basis of neural network in machine learning, the back propagation neural network (BPNN) algorithm model is constructed and optimized. Moreover, by comparing with the classification and prediction effect of the decision tree method, the application effect of BPNN is further clarified. Through statistical analysis, a total of six risk users are screened out. The test data are classified into non-risk user group and risk user group to study the prediction of classification. The specific results are as follows. The prediction accuracy of non-risk group is 99% by using the BPNN algorithm and that is improved to 99.5% by using the optimized BPNN; for risk group, the prediction accuracy of BPNN is only 50% and that of optimized BPNN is 83.3%. Meanwhile, the prediction error rate of the BPNN algorithm is significantly lower than that of the decision tree algorithm, which further verifies the good application effect of the BPNN algorithm. This study can provide scientific and effective reference for the follow-up research of defense audit.

Employees’ Attitude as the Determinant of Their Information Security Performance in Information Network Security Agency

Employees’ Attitude as the Determinant of Their Information Security Performance in Information Network Security Agency

Personality Difference Associated with the Information Security Performance of Employees’ in the Information Network Security Agency (INSA)

Now a day information security (InfoSec) is a prime focus and critical aspect of all organizations as well as individual users. The major purpose of this study was to assess the association between employees’ personality difference and InfoSec performance in the Ethiopian, INSA context. Accordingly, the five-factor personality difference (OCEAN) was treated as the independent variable, while the InfoSec performance was treated as a dependent variable. Based on the quantitative approach, a correlational research design was employed. A total of 320 participants were selected using a stratified random sampling technique. The BFFI and ISP scales were administered to collect the quantitative data. The Independent t-test, one-way ANOVA, Pearson Correlation, and hierarchical multiple regression data analysis methods were performed to address the research questions. Accordingly, the present study revealed the following findings. Firstly, employees InfoSec performance significantly differed by their sex, level of education, job positions, and length of InfoSec training taken. Secondly, age, work experience, and personality difference were significantly related to the employees InfoSec performance. Thirdly, employees' personality difference significantly predicted their InfoSec performance both independently and jointly. Generally, personnel recruiters, employers, trainers, and interventionists were recommended to consider their candidates' background characteristics and personality difference when they deliver their services. Keywords: Personality Difference; Information Security (InfoSec) Performance DOI: 10.7176/RHSS/12-1-01 Publication date: January 31 st 2022

Assessing information security performance of enterprise internal financial sharing in cloud computing environment using analytic hierarchy process

Assessing information security performance of enterprise internal financial sharing in cloud computing environment using analytic hierarchy process

Assessing information security performance of enterprise internal financial sharing in cloud computing environment using analytic hierarchy process

Assessing information security performance of enterprise internal financial sharing in cloud computing environment using analytic hierarchy process

The Impact of Organizational Practices on the Information Security Management Performance

Information explosion and pressures are leading organizations to invest heavily in information security to ensure that information technology decisions align with business goals and manage risks. Limited studies have been done using small- and-medium-sized enterprises (SMEs) in the manufacturing sector. Furthermore, a small number of parameters have been used in the previous studies. This research aims to examine and analyze the effect of security organizational practices on information security management performance with many parameters. A model has been developed together with hypotheses to evaluate the impact of organizational practices on information security management performance. The data is collected from 171 UK employees at manufacturing SMEs that had already implemented security policies. The structure equation model is employed via the SPSS Amos 22 tool for the evaluation of results. Our results state that security training, knowledge sharing, security education, and security visibility significantly impact information security performance. In addition, this study highlights a significant impact of both security training and knowledge sharing on trust in the organization. Business leaders and decision-makers can reference the proposed model and the corresponding study results to develop favourable tactics to achieve their goals regarding information security management.