Information Security Model Research Articles

An IoT‐Based 5G Wireless Sensor Network Employs a Secure Routing Methodology Leveraging DCNN Processing

ABSTRACTThe security principles of the fifth generation (5G) are anticipated to include robust cryptography models, information security models, and machine learning (ML) powered Intrusion Detection Systems (IDS) specifically designed for Internet of Things (IoT) based wireless sensor networks (WSNs). Nevertheless, the existing security models fall short in addressing the dynamic network characteristics of WSNs. In this context, the suggested system introduces a secure and collaborative multi‐watchdog system through the implementation of deep convolutional neural network (DCNN) and distributed particle filtering evaluation scheme (DPFES). The proposed system utilizes deep learning (DL) techniques to create a dynamic multi‐watchdog system that safeguards each sensor node by monitoring its transmissions. Furthermore, the proposed approach includes secure data‐centric and node‐centric evaluation methods that are crucial for enhancing the security of 5G‐based IoT‐WSN networks. The network evaluation processes based on DL facilitate the creation of a secure multi‐watchdog system within dense IoT‐WSN environments. This system enables the deployment of active watchdog IDS agents as needed. The proposed approach includes various components such as a system dynamics model, cooperative watchdog model, Dual Line Minimum Connected Dominating Set (DL‐MCDS), and DL‐based event analysis procedures. From a technical perspective, the system is driven by the implementation of DPFES, which utilizes particle filtering frameworks to analyze network events and establish a secure 5G environment. The system has been successfully implemented, and its results have been compared with those of other similar works. The performance of the proposed cooperative multi‐watchdog system demonstrates a significant improvement of and compared to other techniques.

Engaging in cyber hygiene: the role of thoughtful decision-making and informational interventions.

The effectiveness of human-centric cybersecurity largely depends on end-users' adherence to security and privacy behaviors. Understanding and predicting variations in the adoption of these safeguards is crucial for both theoretical advancement and practical application. While existing frameworks are often adapted from health science literature, there is potential to enhance these models by incorporating criminological constructs relevant to online victimization. This study introduce rational choice theory of thoughtfully reflective decision-making (TRDM) into the information security domain. TRDM suggests that variations in cognitive decision-making capabilities influence behavioral outcomes, particularly in the context of security and privacy practices. The study employed a field experiment to test the applicability of TRDM in predicting end-users' engagement in security and privacy behaviors. Participants were exposed to security-related warnings, with the hypothesis that thoughtfully reflective decision-makers would be more likely to adopt robust protective behaviors. Data was collected on participants' responses to these security warnings, as well as their overall adherence to privacy and security practices. The findings support the theoretical framework: individuals exhibiting thoughtfully reflective decision-making tendencies demonstrated a higher likelihood of engaging in privacy and security behaviors. Specifically, participants with higher TRDM scores were more likely to adopt protective behaviors when warned of the consequences of non-compliance. These results indicate that cognitive decision-making capabilities significantly influence the likelihood of engaging in cybersecurity practices. The study challenges the prevailing one-size-fits-all approach to cybersecurity by highlighting the importance of individual differences in cognitive decision-making. Thoughtfully reflective decision-makers are better equipped to adopt preventive security measures, suggesting the need for more tailored interventions in cybersecurity education and risk assessment. This research contributes to the development of sophisticated risk assessment tools aimed at mitigating vulnerabilities and reducing users' susceptibility to digital threats. Incorporating TRDM into information security models provides a more nuanced understanding of user behavior, offering insights into how cognitive processes influence cybersecurity adherence.

A Model of Information Security and Competition

We study platforms’ incentives to invest in cybersecurity under ad-funded and subscription-funded business models.

Application of zero trust model in preventing medical errors.

Medical errors can occur in many areas of healthcare, including hospitals, clinics, and surgery centers. They can result in negative consequences for patients and their loved ones. Over the years, different methods have been used to reduce medical errors. Zero Trust is an information security model that denies access to applications and data by default. Other industries have successfully used Zero Trust Model (ZTM), and it has been shown to improve outcomes. This editorial analyzes how the ZTM can be introduced to prevent medical errors in healthcare settings. ZTM application in healthcare could potentially revolutionize patient safety by tightly controlling and monitoring access to sensitive patient data and critical systems. By enhancing security measures, the ZTM could address the paramount concerns of patient data privacy and safety in healthcare. The zero-trust approach offers a potential solution by identifying consistent causes of errors and providing viable solutions to prevent their recurrence. In the era of worsening ransomware attacks on healthcare systems, the ZTM could also have enormous implications in other cybersecurity aspects. With this manuscript, the authors advocate for the broader application of ZTM across other facets of healthcare cybersecurity.

Exploration on human resource management and prediction model of data-driven information security in Internet of Things

The advent of the Internet of Things (IoT) has accelerated the pace of economic development across all sectors. However, it has also brought significant challenges to traditional human resource management, revealing an increasing number of problems and making it unable to meet the needs of contemporary enterprise management. The IoT has brought numerous conveniences to human society, but it has also led to security issues in communication networks. To ensure the security of these networks, it is necessary to integrate data-driven technologies to address this issue. In response to the current state of human resource management, this paper proposes the application of IoT technology in enterprise human resource management and combines it with radial basis function neural networks to construct a model for predicting enterprise human resource needs. The model was also experimentally analyzed. The results show that under this algorithm, the average prediction accuracy for the number of employees over five years is 90.2 %, and the average prediction accuracy for sales revenue is 93.9 %. These data indicate that the prediction accuracy of the model under this study's algorithm has significantly improved. This paper also conducted evaluation experiments on a wireless communication network security risk prediction model. The average prediction accuracy of four tests is 91.21 %, indicating that the model has high prediction accuracy. By introducing data-driven technology and IoT applications, this study provides new solutions for human resource management and communication network security, promoting technological innovation in the fields of traditional human resource management and information security management. The research not only improves the accuracy of the prediction models but also provides strong support for decision-making and risk management in related fields, demonstrating the great potential of big data and artificial intelligence technology in the future of enterprise management and security.

Employees’ information security awareness (ISA) in public organisations: insights from cross-cultural studies in Sweden, France, and Tunisia

ABSTRACT The dominance of national culture in organisational environments has been widely acknowledged. This study aims to explore the impact of national culture on information security awareness by examining cultural characteristics in the public sector. Drawing on Hofstede's model, a literature review was conducted to analyze existing knowledge and identify cultural traits in selected countries. Empirical data were collected through semi-structured interviews conducted in Sweden, France, and Tunisia. The data were analyzed using the Human Aspects of Information Security (HAIS) model, revealing distinct patterns and emphasising the role of culture in shaping behaviours. The findings underscore the importance of involving Swedish employees in the policy design process to effectively enhance information security awareness. For French employees, it was found that learning from past experiences and respecting hierarchical structures are crucial factors in raising awareness. Conversely, in Tunisia, information security initiatives should take into account the social and relational aspects to promote awareness effectively. These insights provide valuable guidance to managers in multinational organisations, enabling them to comprehend the underlying forces and dynamics in countries with similar characteristics.

Security literacy model for strategic, tactical, & operational management levels

ABSTRACT Security literacy can be viewed as being different, at different levels of management. This paper presents and explains a security literacy model from a managerial level perspective and how different security literacy methods (awareness, training, education) supports the model of the different information security needs of strategic (why), tactical (how), and operational (what) management. The model was developed from academic literature content. The model suggests that security goes beyond technical knowledge and instead involves critically thinking about what to do.

Information Security Maturity Model for Healthcare Organizations in the United States

This article provides a maturity model for information security for healthcare organizations in the United States. Healthcare organizations are faced with increasing threats to the security of their information systems. The maturity model identifies specific performance metrics, with relative importance measures, that can be used to enhance information security at healthcare organizations allowing them to focus scarce resources on mitigating the most important information security threat vectors. This generalizable, hierarchical decision model uses both qualitative and quantitative metrics based on objective goals. This model may be used as a baseline by which to measure individual organizational performance, to measure performance against other organizations, or to monitor changes in the information security environment over time.

Model of information security of the individual from the influence of sociological information

Model of information security of the individual from the influence of sociological information

Digital transformation dimensions for evaluating SMEs' readiness for big data analytics and artificial intelligence: A review

Assessing the readiness and maturity of small and medium enterprises (SMEs) is a foundation for implementing emerging technologies like big data analytics and artificial intelligence to drive their digital transformation endeavours. This study emphasises that readiness and maturity dimensions offer descriptive and prescriptive guidelines for gauging the current and desired levels of preparedness and maturity required to achieve desired digital transformation outcomes. However, prevailing readiness and maturity models overlook the diverse stages of advancement in big data analytics and artificial intelligence. This research explores the dimensions essential for assessing SMEs' readiness to adopt big data analytics and artificial intelligence. This paper identifies the key dimensions for evaluating SMEs' readiness and maturity across different categories of big data analytics and artificial intelligence by conducting a systematic literature review and employing cluster analysis. The study's principal findings underscore that SMEs' readiness for maturity is influenced prominently by strategic leadership and organisational culture, closely trailed by information technology, security, and business model transformation. Additionally, three pivotal dimensions encompass data analytics and governance, cost-benefit and risk management, and environmental factors. Consequently, proposing that evaluating digital readiness and maturity for SMEs should encompass these six dimensions, thoughtfully considering various prerequisites related to analytics and artificial intelligence.

Formation of the culture of information security of Russian citizens: evolutionary periodization

The subject of the theoretical analysis presented in the article is the periodization of the formation of the culture of information security in Russia, carried out using the method of cultural evolutionary analysis. The fulfillment of this task precedes the subsequent development of a cultural paradigm, a structural and functional model and practical methods for improving the information security of Russian citizens. The adoption by the Russian Government on December 22, 2022 of the Concept of Formation and Development of the Culture of Information Security of the Citizens of the Russian Federation confirms the relevance of this topic. The culturological analysis of the existing concepts of developing a culture of information security (based on the materials of theoretical, research and scientific-practical works of re-cent years) has shown the limitations of a narrow specialization (technical, regulatory, organizational, psychological, pedagogical, etc.). It is concluded that a profile systematic approach of culturology is in demand, which is the specifics of the list and combinations of various elements, disciplines and stages of the formation of a professional culture of information security in different sectors and in the general civil sphere. The evolutionary analysis allows us to identify five stages of the historical development of digital computer and telecommunication network technologies, starting from the creation in the late 1940s to the modern universal distribution — «digital transformation». It is revealed that the use of these technologies initially requires the formation of an appropriate user culture, including ensuring safety. The development and complication of technologies, areas and methods of their application is accompanied by the evolution of threats and risks that require the development of directions and content of information security culture, both professional and civil. The result of the theoretical analysis is the conclusion that cultural studies is a specialized scientific discipline for the selection and determination of the ratios of technical and socio-cultural components, the sequence of stages and tools for the formation and development of various types of information security culture. The development of a paradigm, a dynamic system culturological model of information security allows us to scientifically comprehend the features and correlation of professional, specialized and mass civil security culture of the use of computer and telecommunication network technologies. It is also concluded that the conceptual and cate-gorical apparatus and methodology of cultural studies provide a more adequate development of effective practical techniques and other tools for the development of the culture of information security of Russian citizens.

Information security of hospital computer network based on SAE deep neural network

Abstract As the pace of hospital informatization construction continues to accelerate, information network technologies are being used more and more extensively in the medical industry. These advanced technologies make medical businesses more and more dependent on industry information and data, which brings about network system security issues that cannot be ignored. To strengthen the daily operation and management of hospitals, ensure the stable operation of computer systems, and do a good job in protecting the security of hospital computer system network information, this paper designs a risk assessment method for hospital computer network information security based on SAE deep neural network and analyzes the main factors affecting the security of hospital computer system network information. The experimental results prove that the proposed method can effectively improve the reliability of the evaluation results and ensure the accuracy of the evaluation results. According to the obtained information security model, it can effectively guide the construction and application of hospital computer network information systems, optimize the system network, and promote the development of hospital informatization.

PR-КОМУНІКАЦІЇ ВОЄННОГО ЧАСУ: МЕТА, МОДЕЛІ, НАПРЯМИ

<p><strong><em>The purpose</em></strong><em> of the article is to study the goals, models, and directions of wartime PR communications that have been existing in the information space of Ukraine in the period since February 24, 2022, to the current time and reflecting the presence of public relations of various state and non-governmental institutions and organizations. </em></p><p><strong><em>Research methodology.</em></strong><em> To find out the main goal, models, and directions of wartime PR communications in the information space of Ukraine as a reflection of public relations of state and non-governmental institutions and organizations, the following methods were used: analysis, description, classification and generalization.</em></p><p><em> <strong>Results.</strong> The article focuses on the role of the most effective and most relevant models of PR communication with target audiences during military operations in Ukraine.</em></p><p><em>It is emphasized that all models of PR communication, which were once formed by J. Gruning and T. Hunt (press agency model, public information model, bilateral asymmetrical model, and bilateral symmetrical model) are relevant and effective during the crisis caused by the war in Ukraine. Their use is a condition for preserving the unity of the nation, a condition for transparent relations between the government and society, between business and society, between civil society institutions and all state and non-governmental structures and citizens of Ukraine. These models help to identify certain phenomena in the practice of public relations, the basis of which is communication as a dynamic process of information exchange.</em></p><p><em>It is noted that PR communications become the tool that allows the creation of a unified field of interconnected information, which is supported by feedback necessary for the survival of the country. </em></p><p><em>The concept of public relations as an effective social and communication technology, which provides dialogue forms of interaction between different social groups during such a crisis situation as military aggression, is revealed. The role of PR communication in the shaping of information and psychological security of a state's citizens in wartime is defined. The conditions for using PR models during the specified crisis are outlined.</em></p><p><strong><em>Novelty.</em></strong><em> The scientific novelty of the study consists in determining the main goal, models and directions of wartime PR communications that have been existing in the information space of Ukraine in the period since February 24, 2022, to the current time and reflecting the presence of public relations of various state and non-state institutions and organizations. </em></p><p><strong><em>Practical meaning.</em></strong><em> The practical significance of the research results lies in the possibility of their use during the preparation of public relations educational programs, the training of specialists in the field of public relations, and the development of educational and scientific courses on the specified problem.</em></p><p><strong><em>Key words:</em></strong><em> PR, information space, PR communication, models of PR communication, state institutions, non-governmental institutions, information and psychological security.</em></p>

Risk management model for information security

A risk management model makes it possible to explore the organizational factors and risk management practices that affect or delay the achievement of the objectives that are considered strategic. The purpose of managing risks is to develop a detailed analysis of the organization, its operations, assets, processes and their existing interrelationships in order to establish a complete list of risks, which implies identifying, analyzing and providing alternative treatment to risks. actual and potential. Therefore, a risk management model obtains too much importance when focusing on the needs of the organization in a specific way, since it is not only about copying norms or policies of one organization to mitigate the risks of another, but each of these has different scenarios or contexts.

The Need for the Development of a Constitutional and Legal Model for Ensuring the Information Security of Minors

Based on the analysis of the main risks of the information environment for minors, the authors substantiate the need to form a constitutional and legal model for ensuring the information security of minors. The authors represent their understanding of the concepts of “threat,” “challenge,” “danger,” which are close in a categorical series with the concept of “risk,” is presented, and propose their definitions of the concepts of “information security,” “security worldview.” The main goals for ensuring the information security of minors are both security and the creation and maintenance of the most favorable conditions for the adaptation of a minor to the information environment of modern society, which contributes to his personal development, improvement of spiritual, moral, intellectual, creative abilities and self-realization, subject to minimization (and exclusion) of possible risks and threats to life, health and its comprehensive development. The elemental composition of the constitutional and legal model of information security of the child is presented, the formation of which is associated with the national model for the protection of the rights and freedoms of minors. The right to information security of minors comes from the meaning and spirit of the Constitution, as it ensures the implementation of other constitutional rights and freedoms of minors.

Анализ стандартов обеспечения информационной безопасности

The purpose of the work is to systematize the available knowledge about information security models presented in standards and scientific research to solve the problem of labor intensity: analysis and selection of an information security model relevant to the information infrastructure of the enterprise; and assessment of the current level of information security of the enterprise. When in identifying and analyzing the information security models used, standards, regulatory legal acts and scientific research in the field of information security are considered within the framework of this work. The systematization of knowledge about information security models was carried out with the help of analysis of standards, scientific research, normative legal acts on information security; identifying common properties of information security models; grouping criteria and evidence confirming the implementation of information security measures by common signs; identifying ways to automate the assessment of the current level of information security. In the course of the work: the main criteria of the information security model were identified; a list of certificates was formed that allow monitoring the implementation of information security measures; common features of criteria, certificates sufficient for grouping were revealed; types of certificates were identified; an algorithm for assessing the current level of information security of an enterprise was formed; methods of automatization of collecting information about models of information security used by an enterprise and evidence of the implementation of information security measures were identified . This work systematizes knowledge about the existing models and allows analyzing the criteria of information security without a need to study all the standards and scientific papers considered in this work, which reduces the labor intensity of the analysis and selection of an information security model relevant to the information infrastructure of an enterprise. The results of this work will be applied to identify the possibility of automating the assessment of the current level of information security of an enterprise.

The Constitutionalization of information security in Russian Law: improving the theoretical model

Research discusses one of the constitutional amendments of 2020. In accordance with the new version of paragraph “m” of Part 1 of Article 71 of the Constitution of the Russian Federation, the exclusive powers of the Russian Federation include issues of ensuring the security of the individual, society and the state when applying information technologies, and digital data turnover. The consolidation of the problem of information security at the constitutional level determines the need for a partial modernization of its theoretical model. Modification and revision of some of its components will lead to higher effectiveness of constitutional regulation and improve the quality of application of industry legislation in the field of information technology and information protection. The purpose of the research is to investigate the main directions of enhancing the theoretical model of information security in terms of constitutional changes. The employed research methods are formal-legal, logical, system, statistical, structural-functional, modeling, and forecasting. The outcome of the study can be outlined as follows. The research clarifies the concept of information security, proposes to generalize the range of basic subjects of public relations related to information security, expand their rights and obligations, highlight the constitutional and sectoral legal regimes of information protection, and strengthen responsibility for offenses in the information sphere. In conclusion the study argues that updating the theoretical model of information security of the Russian Federation should be carried out in the following key areas: firstly, developing information security targets expressed in strategic and program documents of the state; secondly, clarifying classification of information security threats; thirdly, expanding legal regulation density; fourth, strengthening the law-enforcement mechanisms of information security; fifth, establising and maintening optimal balance between legal, technical and ethical regulation of information technologies, primarily digital technologies; and finally, definiing acceptable and unacceptable boundaries of application of information technology and digital data in people's lives.

THE METHOD OF ASSESSING THE VALUE OF INFORMATION

Context. The task of assessing the value of the institution’s information as one of the objects of protection of the information security model is considered.
 Objective. The goal of the work is the creation of a method of assessing the value of information, which takes into account the time of the final aging of information.
 Method. The results of the analysis of methods for evaluating the value of information showed that modern approaches are conventionally divided into two directions. In the first direction, the value of information is calculated as the amount of information in bytes. In the second direction, the value of information is calculated in monetary terms. It is shown that modern approaches do not take into account the influence of time on the value of information. A method of assessing the value of information is proposed, which takes into account such characteristics as the term of final aging of information, the level of its access restriction, importance, and form of ownership. The value of information is presented as a quantitative measure that determines the degree of its usefulness for the owner. It is proposed to calculate the value of the initial value of information during its creation or acquisition by calculating the normalized weight of the coefficients according to the formula of the arithmetic mean. It was shown that the current value of information has a functional dependence on the time of existence of information and the time of its final aging.
 Results. The results of the experiment confirm that the value of information has a nonlinear functional dependence on the time of final aging of information.
 Conclusions. The conducted experiments confirmed the efficiency of the proposed method of evaluating the value of information and allow recommending it for use in practice to protect the institution’s information. Prospects for further research may include the creation of a methodology for assessing the value of an institution’s information, taking into account the aging of information and subsequent adjustment of measures to protect it.

A Trust Management System for the Nigerian Cyber-health Community

Trust is a basic requirement for the acceptance and adoption of new services related to health care, and therefore, vital in ensuring that the integrity of shared patient information among multi-care providers is preserved and that no one has tampered with it. The cyber-health community in Nigeria is in its infant stage with health care systems and services being mostly fragmented, disjointed, and heterogeneous with strong local autonomy and distributed among several healthcare givers platforms. There is the need for a trust management structure for guaranteed privacy and confidentiality to mitigate vulnerabilities to privacy thefts. In this paper, we developed an efficient Trust Management System that hybridized Real-Time Integrity Check (RTIC) and Dynamic Trust Negotiation (DTN) premised on the Confidentiality, Integrity, and Availability (CIA) model of information security. This was achieved through the design and implementation of an indigenous and generic architectural framework and model for a secured Trust Management System with the use of the advanced encryption standard (AES-256) algorithm for securing health records during transmission. The developed system achieved Reliabity score, Accuracy and Availability of 0.97, 91.30% and 96.52% respectively.

Mathematical model of personal information security under the influence of media information

As mass media continue to play an increasingly important role in our daily lives, people face an increasing number of security risks associated with the consumption of media information. To better understand the factors that contribute to individual security in this context, the paper proposes a mathematical model that examines the relationship between the number of security breaches, the amount of media information consumed, the level of security measures taken by an individual, and the level of media literacy an individual possesses. The equations that represent these relationships are presented, and possible values for the model parameters are suggested. The model provides a framework for analyzing and improving individual safety in the context of media consumption, and has the potential to be used in practical applications such as designing effective safety awareness campaigns and designing safer media technologies.