Cybersecurity Research Articles

Digital Economy Reformulation and Economic Competitiveness of Smart Cities: An Application of Soft Systems Methodology

Smart cities have become a new trend in urban development worldwide, and digital economy plays a crucial role. Therefore, this study aimed to create a novel formulation of digital economy that contributes to improving competitiveness of smart cities and provides practical guidance on digital economy strategies. A Soft System Methodology (SSM)–based action that utilizes the concept of systems was used to investigate conceptual models from different perspectives, from conceptual thinking to real-world–based action. Moreover, Indonesia was selected as a case study due to its extensive implementation of smart cities over the past five years, with over 250 cities participating in the program. The study successfully identified five scopes of digital economy, namely digital technology, digital service, shared economy and platform, digitalized economy, and financial services. It also identified six crucial criteria of economic competitiveness, namely human resources, product offerings, innovation capability, economic productivity, ease of business and investment, as well as financial capital. In conclusion, local cities and regencies' governments need to accelerate digital economy by creating supporting policies, making collaboration, effective digital marketing, improving digital literacy, guaranteeing cyber security, as well as protecting consumers and data privacy.

Policy and Infrastructure for Data Privacy and Data Protection in South Indian States: Issues and Prospects

In the 21st century, data privacy, data protection and cybersecurity have become challenging issues with increasing cases of data breaches and data disasters. Data privacy has emerged as one of the challenging issues after numerous cases of data breaches and manipulations in many departments, agencies, bodies and organisations in every country. A well-designed data framework may enable not just secure data privacy/protection but also enable users’ control over data through a protective and safe system to share data across organisations, leading to individual empowerment and well-being. In India, privacy still remains a complex area, which has affected data safety and protection. A number of government websites clearly mention that data will not be shared with anyone until and unless for the purpose enshrined so far. In India, there have been various policies, guidelines, strategies and initiatives for cybersecurity, data privacy, data protection and data measures, including the Digital Personal Data Protection Act, 2023; the National Cyber Security Policy, 2013; the Information Technology Act 2000; the Information Technology (Amendment) Act, 2008; the Information Technology Rules, 2011 and so on. This article tries to examine policies/regulations for data privacy, data protection and data safety in South Indian states.

The Role of AUKUS in Australia’s Military Capacity Building Strategy

This paper explores the role of AUKUS in enhancing Australia's military capacity amid evolving Indo-Pacific geopolitics. The AUKUS partnership between Australia, the UK, and the US aims to increase Australia's defense capabilities, focusing on nuclear-powered submarines, cyber security, AI, and underwater warfare. The analysis shows how AUKUS addresses Australia's military challenges by offering advanced technology and strategic support. The SSN-AUKUS submarines symbolize a major advancement in Australia's naval capabilities. The partnership also promises economic and social benefits, including job creation and infrastructure development. However, the study also notes potential drawbacks, such as increased regional tensions and the risk of an arms race, highlighting the need for balanced diplomatic effort.

Enhanced Cloud Computing Security Based on Single to Multi Cloud Systems

Enhanced Cloud Computing Security Based on Single to Multi Cloud Systems

Digitalization and Cyber Security Policies in Uzbekıstan's Institutions and Sectors in One Belt One Road Project

The diffusion of information and communication technologies (ICT) into a rapidly growing area of global trade has contributed significantly to the gains made by companies and governments. Increasing consumption at the international level and the desire for faster and more reliable delivery of goods have led to the emergence of new sectors. In this context, states, other government agencies, and the private sector have sought to enhance their bilateral relations and investments and establish strategic partnerships to develop new fast, and reliable trade networks. While actions and activities in cyberspace and digital spaces have provided significant convenience and opportunities, they have also led to significant security concerns. The purpose of this study is to examine and evaluate the contribution of the One Belt, One Road (OBOR) initiative to the digitalization of Uzbekistan and the policies pursued by Uzbekistan in this regard, and to investigate the effects of public and private sector institutional cooperation in the One Belt, One Road project. The content analysis method was applied, one of the qualitative research methods. The study was also strengthened with the SWOT analysis method. By comparing relevant documents and sources on the subject, the aim of the study was concluded. The studies carried out to increase Uzbekistan's cyber capacity, the importance of maintaining strong cyber security policies through technology transfer, the challenges and legal regulations, institutional and sectoral cooperation, and their effects are the problem statements within the outline of the purpose of the study.

To secure an e‐commerce system using epidemic mathematical modeling with neural network

SummarySecuring an e‐commerce system using epidemic mathematical modeling with neural networks involves adapting epidemiological principles to combat the spread of misinformation. Just like how epidemiologists track the spread of diseases through populations, we can track the dissemination of fake news through online platforms. By modeling how fake news spreads, we gain insights into its propagation patterns, enabling us to develop more effective countermeasures. Neural networks, with their ability to learn from data, play a crucial role in this process by analyzing vast amounts of information to identify and mitigate the impact of fake news. One potential disadvantage of using epidemic mathematical modeling with neural networks to secure e‐commerce systems is the complexity of the approach. The epidemic‐based recurrent long short‐term memory (E‐RLSTM) technique addresses the complexity and evolving nature of fake news propagation by leveraging the strengths of recurrent neural networks (RNNs), specifically long short‐term memory (LSTM) units, within an epidemic modeling framework. One advantage of using epidemic mathematical modeling with neural networks to secure e‐commerce systems is its proactive nature. One significant finding in employing this approach is the ability to uncover hidden connections and correlations within the data. E‐RLSTM stands out by capturing temporal dynamics and integrating epidemic parameters into its LSTM architecture, ensuring robustness and adaptability in detecting and combating fake news within e‐commerce systems, outperforming other techniques in accuracy and performance. Description of the NSL‐KDD dataset offers easy access to a valuable repository for benchmarking cyber security. Contained within are more than 120,000 authentic samples of cyber‐attacks across 41 distinct categories, providing an excellent environment for testing intrusion detection systems.

SpecRep: Adversary Emulation Based on Attack Objective Specification in Heterogeneous Infrastructures.

Cybercriminals have become an imperative threat because they target the most valuable resource on earth, data. Organizations prepare against cyber attacks by creating Cyber Security Incident Response Teams (CSIRTs) that use various technologies to monitor and detect threats and to help perform forensics on machines and networks. Testing the limits of defense technologies and the skill of a CSIRT can be performed through adversary emulation performed by so-called "red teams". The red team's work is primarily manual and requires high skill. We propose SpecRep, a system to ease the testing of the detection capabilities of defenses in complex, heterogeneous infrastructures. SpecRep uses previously known attack specifications to construct attack scenarios based on attacker objectives instead of the traditional attack graphs or a list of actions. We create a metalanguage to describe objectives to be achieved in an attack together with a compiler that can build multiple attack scenarios that achieve the objectives. We use text processing tools aided by large language models to extract information from freely available white papers and convert them to plausible attack specifications that can then be emulated by SpecRep. We show how our system can emulate attacks against a smart home, a large enterprise, and an industrial control system.

Non-Deterministic and Risk Based Security Services

This paper presents a comprehensive framework to address these challenges. Understanding various social engineering tactics is crucial for effective prevention and detection. Trust based models in entities enable many business objectives that may include speed to market, scalability, decentralization etc However, they also increase the attack surface due to "loose boundaries" between enforcement points or corresponding resource authorization servers and the service orchestration layer. The control points of enforcement are generally static across a spectrum of threat vectors such as Identity, Fraud, Authentication, Authorization, Cyber security and physical security etc. in this paper we propose a "Trust based security framework aka " Interdiction Services" that fundamentally is non-deterministic and risk based. This paper presents a converged security framework towards a comprehensive prevention and detection controls mechanism. The paper proposes a converged security framework that allows various parties from fraud, cyber, and physical security to collaborate but operate independently through a common framework of Interdiction Services.

Navigating Cybersecurity: Environment’s Impact on Standards Adoption and Board Involvement

ABSTRACT This study investigates cybersecurity governance dynamics within organizations, investigating the influence of supply chains, environmental factors, and stakeholder engagement. Utilizing the UK’s Cyber Security Longitudinal Survey and employing artificial neural networks and k-means cluster analysis, we explore how organizational practices and external pressures shape cybersecurity strategies. Our findings show the managerial and political dimensions of improving organizational cybersecurity, highlighting the critical role of environmental influences alongside incident perception and self-efficacy. The research shows the necessity for organizations to remain receptive to external influences and identifies supply chains as critical factor in shaping cybersecurity practices, advocating for comprehensive security protocols. We demonstrate that guidance from governing bodies is essential for aligning with industry standards. The findings suggest a range of strategies, from implementing standards to encouraging board-level integration of cybersecurity, facilitated by a combination of coercive, normative, and mimetic pressures exerted by various agents, including governments, stakeholders, and the supply chain.

A Preliminary Concept on Cybersecurity Skill Training Framework for a Capture-the-Flag Game using 5-Step Gamification Approach

This paper discusses about how to design a teaching and learning (T&L) framework for cyber security using game at higher education in Malaysia. The paper begins with literature review of key concepts and issues associated with Capture the Flag (CTF) and cybersecurity education framework, which led to the process of defining the CTF game to support the research aims. A version of CTF game was created using an open-source engine through Technology Pedagogy and Content Knowledge (TPACK) framework and five-step gamification approach, which was aligned to the course structure of cyber security courses offered in two institutions of higher education in Malaysia. The intended learning outcomes of the course were mapped into the CTF game features. The constructive alignment and the CTF game were then verified by subject matter experts. Pre and post-test are conducted to study the difference in students’ performance. Mixed-mode research approach with quasi experiment will be used to study the difference among the treatment group. Data collection and analysis require supplement from follow-up interviews in order to complete the analysis of this T&L framework.

Strengthening India’s Cybersecurity and Data Privacy Landscape: A Comprehensive Overview

This article chronicles India’s cybersecurity and data privacy journey, from the inception of the Information Technology Act in 2000 to the latest Digital Personal Data Protection Act of 2023. Examining key legislative developments, committee formations and judicial interventions, it highlights India’s commitment to fortifying its cybersecurity framework. The topic is analysed in a substantially analytical and qualitative manner, primarily based on literature, both primary and secondary. It is descriptive and puts forth a case explanation of cyber security in banking. In the face of escalating challenges in the digital era, the article contributes to the discourse by addressing prevalent threats like deep fakes, existing frameworks and innovative strategies for securing digital assets. Emphasising the critical interplay of technology, governance and the legal framework, the article underscores the imperative of robust cybersecurity measures to safeguard citizens’ and government interests.

How to Better Qualify ICT Graduates to Support Digital Education: A contribution from CALOHEE Tuning project qualifications framework

The Information and Communications Technology subject area is a broad multidisciplinary field of academic research and professional practice covering many topics ranging from electronics to system and network administration, to software development, cyber security, VR, AR, IoT and AI. Due to its nature, it cooperates closely with diverse areas, most notably eLearning and digital education. As contemporary educational institutions undergo a digital transformation, by which its processes are reengineered to take most of the possibilities offered by the emerging technologies, the contribution of the ICT field has become transversal and consequently of critical importance. The term ICT which refers to this wide multidisciplinary field differentiates from IT, which applies specifically to the management and use of computer systems to store, retrieve, transmit, and manipulate data. The continuous expansion of the field to new territories of practice such as education is requiring additional knowledge, skills and wider competences acquisition. In addition, high volatility of the job market creates the need for very adaptable professional profiles. As a result, there is a pressure from the job market for shorter and more job-oriented programmes, but also for competence frameworks which may serve as references for quality higher education and training. In this paper we present the Tuning Quality Reference Framework (QRF) for ICT which was developed as part of the CALOHEE Erasmus+ funded project. A multidisciplinary team with experts from 12 different countries (Portugal, Lithuania, Germany, Italy, Spain, Austria, Belgium, Greece, Turkey, Finland, Ireland and Romania) took part in the task. The QRF is built in a way to flexibly address all the mentioned complexity and continuously emerging new requirements including educational institutions and non-formal education organisations. The approach used also supports innovation in learning, teaching and assessment practices in ICT degrees, fostering open and digital education.

Application of Artificial Intelligence Technologies in Security of Cyber-Physical Systems

Cybersecurity questions of cyber-physical systems (CPS) have become ever more vital in recent times. Advances in technology and digitization have posed new weaknesses in CPS and cyber attackers take advantage of it. Viruses, malware, and sophisticated forms of cyberattacks have become a dangerous reality for critical infrastructure CPS. Lately, artificial intelligence (AI) technology has been extensively applied in the struggle against cyber threats in CPS. AI may improve system security by providing tools to quickly detect cyberthreats and automatically resolve them. Digitization of critical infrastructures (energy distribution networks, smart systems, oil and gas industry, water infrastructure, etc.) has increased their efficient management and at the same time, the number of cyber attackers on sensors, actuators, network and control equipment has also increased. Cyber security of critical objects can be ensured through AI. This article explores the theoretical foundations, application fields, and AI conceptual models. It analyzes the benefits and shortcomings of applying AI technologies to the security of the abovementioned systems. Mechanisms for detecting cyber threats in cyber-physical systems with the help of AI and predicting and preventing security threats are proposed.

Securing Digital Identities: The Synergy of Information Technology Security, Trust, and Privacy

Securing Digital Identities: The Synergy of Information Technology Security, Trust, and Privacy

India’s Framework for Cyber Security since 2014 and its Significance for Armed Forces

The character of warfare changes with the change in its nature. In the last two decades, cyberattacks have expanded in their dimensions with the advent of digital networking in the military sector. Cyber security occupies a significant position in the Indian armed forces because of the increasing threat of cyberattacks from hostile neighbouring countries, particularly China and Pakistan. Cyber threat undermines military preparedness and warfighting capabilities by infiltrating critical weapon systems, vital infrastructure, crucial communication networks, and Intelligence, Surveillance, and reconnaissance (ISR) systems. India is now concentrating on framing its cyber security policy to mitigate the cyber threat and enhance the cyber capabilities of its armed forces. With its cyber security policy, India aspires to make digital armed forces. The present research article will focus on the efforts the Indian government has taken since 2014 to neutralize cyberattacks and the policies it has framed to ensure cyber security. The article will also analyze the significance of the government efforts on the armed forces in the direction of defensive cyber policy.

Influence of Digital Financial Literacy on Investment Behaviour of Nepali Investors

This study investigates the influence of digital financial literacy on individual investment behaviour of Nepali investors. In order to explore the influences of digital financial literacy on individual investment behaviour, causal-comparative research design was used and responses from 358 investors were collected through a survey questionnaire. The convenience sampling method ensured statistical reliability and diversity in perspectives. Questionnaires were distributed through various platforms, ensuring anonymity and confidentiality. Descriptive statistics, regression, reliability and correlation were some of the tools used for a thorough study of the data. These methods enabled non-parametric testing and multiple regressions by providing a quantitative comprehension of the variables. The research establishes that digital financial literacy significantly influences investment behaviour in Nepal. The statistical correlation matrix and regression analysis, with an R Square of 0.589, highlight the interconnectedness of digital financial proficiency, financial literacy, financial goal management and individual investment behaviour. Investment behaviour is significantly influenced by financial literacy, digital financial literacy and financial goal management, having the p-value less than 0.05. However, cyber security and awareness did not show a significant relationship with investment behaviour. Policymakers in Nepal are focusing on enhancing digital financial literacy to empower individuals and cultivate a financially literate society. Financial institutions and educators should leverage digital platforms to enhance financial education and prepare individuals for informed investment decisions in Nepal’s evolving stock market landscape. Examining the digital financial literacy of Nepali investors can help in making more informed decisions regarding investments by looking at structures, comparing findings with those from other developing nations and assessing the effects of educational efforts.

Exploring Machine Learning Algorithms for Cyber Attacks’ Classification

Cyber security is like a race between defensive and offensive capabilities. Day by day the attacks are increasing consequently the preventive mechanisms are also raising. The technological evolution must address the cyber security problem effectively. Cyber security is always the cutting-edge technology to which Machine learning added potentiality. Machine learning plays a crucial role cyber-attacks in various dimensions. The recent advancements in usage of Machine learning towards cyber security preventive and detective measures clearly indicates that the Cyber security certainly accelerates. But at the same time the threat framework also takes the advent of innovative machine learning models. In this paper we are intended to explore various machine learning algorithms to classify cyber-attacks, which are very useful in designing efficient threat defensive models

An Examination of Cyber Security Solutions in Public and Private IaaS Infrastructures

The digital transformation is a dynamic process that unfolds within the data and information cycle, aimed at maximizing the efficiency businesses derive from data and information. For the structuring and sustenance of this process require information processing resources, typically sourced from cloud computing infrastructures. In this context, the aim of this study is to scrutinize the cyber security measures provided by both public and private IaaS infrastructures, aiding businesses in their selection process for digital transformation. To address the objectives of this research, a mixed-methods approach was adopted, integrating both qualitative and quantitative research techniques. The study is structured around two primary research questions. The first research question (RQ1) seeks to delineate the cyber security measures in Amazon AWS EC2, Google Cloud CE, and Proxmox VE IaaS (Internet as a Service) infrastructures. The second research question (RQ2) aims to identify the similarities and differences in cyber security measures across these infrastructures. Additionally, to verify the findings derived from (RQ1) ensure the credibility of the study, and to experimentally examine cyber security measures within these infrastructures, the study adopts an experimental research method from quantitative analysis techniques and the hypothesis (H0) " The findings obtained as a result of RQ1 are confirmed in AWS EC2 and Google Cloud CE IaaS infrastructures" is tested. As a result of the experimental research, hypothesis H0 was accepted. A review of existing literature, there has been encountered no research that concurrently examines, compares, and experimentally verifies the cybersecurity measures across both public and private IaaS infrastructures. Therefore, this study can be considered to make an original contribution to the existing body of knowledge by addressing an important gap in the literature on the comparative and experimental evaluation of cyber security practices in public and private IaaS infrastructures.

Digital competency – Perspectives of teacher students and primary teachers

Digital transformation is regarded as the foremost priority for public governance reform across all sectors, encompassing the education domain, which has been undergoing its own digital transformation journey spanning from primary to higher education levels. Drawing from five elements of digital competency (DC) derived from conceptual references to competency, professional proficiency, digital technology, and digital transformation frameworks, opinions on these elements were sought from primary teachers and teacher students. The findings reveal disparities in the digital competency levels among teacher students relative to the demands, with notable concerns surrounding digital assessment, security, and safety in cyberspace. It is emphasized that additional emphasis should be placed on integrating digital competency domains into training programs, as digital competencies represent a deficiency in the criteria for teachers, which should be explicitly addressed in program learning outcomes (PLOs). Moreover, the increasing significance of digital competency underscores the necessity for its seamless integration into training programs catering to primary education teacher students. Further research is warranted to explore various aspects of this topic, including its scope, comparative analysis with teacher training in other sectors, and the perspectives of primary school principals.

Security Vulnerabilities of Wlan Protocols: A Review

This study reviews a significant number of known attacks with the security methods that are currently available for wireless local area networks (WLANs). After a thorough review of more than a dozen literature on the security issues affecting WLANs, it was found that the architecture of the WLAN itself has a vulnerability that hackers can exploit, especially the wired equivalent privacy (WEP) protocol. WLAN attacks are a combination of human and technology behavior. Human network compromise is still a serious danger to wireless technology, although new encryption technologies are being developed to counteract threats, they are not enough to address the issues at hand because hackers are constantly coming up with inventive ways to breach networks and undermine the standards. Therefore, it is advised to integrate more sophisticated and pervasive multidimensional AI algorithms at different wireless protocol layers as well as through certified ethical hacking experimentation standards in order to improve detection capabilities, identify unauthorized entry through their behaviors, and safeguard wireless connections and data. Also, Cyber security professionals should take note of this report and be proactive in their search for a sophisticated solution to the current issue.