Perceived Information Security Research Articles

How Does the Internet Impact the Public’s Perception of Information Security Risk?

Clarifying the relationship between internet use and public information security risk perception helps us gain a better understanding of the factors influencing public risk perception. However, the relationship is still under-explored. This paper empirically examines the relationship between internet use and information security risk perception based on data from the 2021 Chinese Social Survey. It was found that whether to use the internet and the frequency of use are both significantly positively correlated with the perception of information security risk. On this basis, the mechanism by which internet use affects public information security risk perceptions is verified from the perspective of interpersonal trust. The mechanism analysis found that interpersonal trust exerts an indirect effect between internet use and perceived information security risk. The findings of this study provide new insights for our further understanding of how internet use affects residents’ perceptions of security risk.

A Study on Contributing Factors of IT Outsourcing Satisfaction Financial Service Industry in Hong Kong

This paper aims to identify the critical success factors in Hong Kong Financial Service Industry IT outsourcing satisfaction and propose possible satisfaction rate boosts. A hybrid methodology (qualitative and quantitative) was adopted to analyze the variables and their relationship thoroughly. The six members focus group was formed to discuss IT outsourcing, and the survey was conducted to collect 447 valid responses for data analysis. The six critical success factors were Perceived Information Security Risk, Quality of Service Provider, Contract Management, Internal Contract Experience, Communication and Regulatory Policy, identified to support satisfaction of Hong Kong FSI IT outsourcing after conducting the analysis. Three recommendations are proposed to improve IT outsourcing satisfaction based on the findings of critical success factors: (1) A Build-up of Vendor Evaluation Framework, (2) Enhancement for Knowledge Management, and (3) Enhance Performance Monitoring. The snowball sampling method might have introduced biased information. In future research, a more extensive research scale would be required to understand the whole population, which would be more appropriate for the industry to understand the need and construct any policy. This paper is a holistic approach to identifying factors that affect Hong Kong FSI IT outsourcing satisfaction. In addition, practical recommendations were proposed to improve those factors, thereby increasing the satisfaction rate of IT outsourcing.

Information security risks and sharing behavior on OSN: the impact of data collection awareness

PurposeThis study aims to ascertain the impact of data collecting awareness on perceived information security concerns and information-sharing behavior on social networking sites.Design/methodology/approachBased on communication privacy management theory, the study forecasted the relationship between information-sharing behavior and awareness of data collecting purposes, data collection tactics and perceived security risk using structural equation modeling analysis and one-way ANOVA. The sample size of 521 young social media users in Vietnam, ages 18 to 34, was made up of 26.7% men and 73.3% women. When constructing the questionnaire survey method with lone source respondents, the individual’s unique awareness and experiences with using online social networks (OSNs) were taken into account.FindingsThe results of the investigation demonstrate a significant relationship between information-sharing and awareness of data collecting, perceptions of information security threats and behavior. Social media users have used OSN privacy settings and paid attention to the sharing restriction because they are concerned about data harvesting.Research limitations/implicationsThis study was conducted among young Vietnamese social media users, reflecting specific characteristics prevalent in the Vietnamese environment, and hence may be invalid in other nations’ circumstances.Practical implicationsSocial media platform providers should improve user connectivity by implementing transparent privacy policies that allow users to choose how their data are used; have clear privacy statements and specific policies governing the use of social media users’ data that respect users’ consent to use their data; and thoroughly communicate how they collect and use user data while promptly detecting any potential vulnerabilities within their systems.Originality/valueThe authors ascertain that the material presented in this manuscript will not infringe upon any statutory copyright and that the manuscript will not be submitted elsewhere while under Journal of Information, Communication and Ethics in Society review.

The role of perceived risk and information security on customers' acceptance of service robots in the hotel industry

This study proposed and tested a theoretical framework that investigated the influences of perceived risk and information security on hotel customers’ intention to use service robots. In addition, the impacts of self-efficacy, innovativeness, and facilitating conditions on perceived risk and information security were examined. Structural equation modeling (SEM) was used to test the proposed model by utilizing data collected from eleven countries including the United States, United Kingdom, Turkey, Spain, Romania, Japan, Israel, India, Greece, Canada, and Brazil. The study results demonstrated that perceived risk had a negative impact on customers’ intention to use service robots while information security had a positive impact. In addition, the study results indicated that self-efficacy negatively influenced perceived risk, and positively influenced perceived information security; and innovativeness and facilitating condition positively influenced information security. The study findings offer several important contributions to the hospitality robotics technology adoption literature and present valuable implications for hospitality practitioners and service robot vendors.

4D- dynamical system and convolution codes based colored image encryption scheme: information security perception

4D- dynamical system and convolution codes based colored image encryption scheme: information security perception

Perceived Barriers to Business-to-Government (B2G) E-Commerce Adoption

There are several studies that assess the influence of factors on citizens' intention to adopt e-government services in various contexts. However, there is a lack of research that examines the perceived barriers to B2G e-commerce adoption and develops an understanding of cause and effect group variables among them. This research is the first of its kind to extensively review the relevant literature in e-commerce adoption and assess the selected key factors which are equally relevant in the B2G e-commerce adoption. The authors apply a unique multi-criteria decision-making technique called DEMATEL to understand the nature of the barriers and collect data from eight experts having experience in B2G procurement in the public sector and government organizations. The data findings revealed that out of nine selected variables, five (i.e., lack of IT infrastructure [B1], lack of expertise and technical skills [B2], high cost of technology [B3], perceived information security risk [B5], and lack of awareness of government issues and legal policies [B6]) belonged to the ‘cause group' whereas the remaining four (i.e., organisational resistance to change [B4], lack of top management support [B7], low perceived operational benefits [B8], and unwillingness to adopt B2G e-commerce services [B9]) were found to be part of ‘effect group'. The theoretical and practical implications of the current study may enhance the understanding of B2G e-commerce adoption.

User Perceptions of Information Security: Evidence from Takoradi Technical University

This study related to the importance of information and information technology in today's global business. The global nature of information systems also exposes them to threats which make them prone to security breaches. Information risks are several internal and external, making it almost impossible for only information security professionals to handle. This therefore reinforces the need to involve end-users in by educating them to be aware of threats, and their role in curbing those threats. Related information security literature was reviewed to establish the business problem theoretically. Using focus group discussions and open-ended interview guide, data was collected from non-security employees from Takoradi Polytechnic. The data provided understanding of the employees' present security needs, employees perception of information security, employees' personal security initiative, and level of information security awareness. The key findings in the study suggested that, currently some arrangements have been made to ensure information security; however, there is the need for more non-computer-based arrangements such as physical security, training and data backup systems. Further, because some respondents did not perceive the current security arrangement to be adequate, they took personal initiatives like using passwords, using formal communication channels for obtaining information which falls outside their domain or function, and seldom reporting any perceived security threats. These personal initiatives seemed to be the basis for the employees' self-rating of their level of information security awareness, not some training they had acquired.
 
 Received: 8 September 2022 / Accepted: 29 October 2022 / Published: 5 November 2022

Sosyal Ağ Platformlarının Bilgi Politikalarına İlişkin Gizlilik Algısı: Kullanıcı Bilgi Davranışının Değerlendirilmesi

Today personal and corporate use of messaging applications, which are among the basic elements of social networking platforms, has become a vital necessity. This situation has increased the desire of relevant organizations to implement security policies on widely used messaging applications, which are completely suitable for their own strategies. Such changes in information security policies increase concerns about individual and corporate privacy, and as a result of this situation, users turn to different applications as a reaction to these changes. In this study, the WhatsApp application, which has the most users both in the world and in Turkey, was examined and the privacy issues that users should pay attention to in messaging applications were revealed. In the study, the effects of changes planned to be made by WhatsApp were evaluated with two different approaches to protecting personal data and ensuring information security. In this context, it was found that the information behaviors of users related to the perception of information security are not compatible with the potential risks and threats. At the end of the study, measures and preferences that can be taken to protect data against the risks and threats of messaging applications are presented.

Factors affecting information security compliance intention of military officer

The purpose of this study is to analyze the factors that influence the information security compliance intention of Korean military officers. For this purpose, a research model was constructed focusing on information security compliance attitude and perceived control, which are the main variables of the theory of planned behavior. In addition, security sensitivity, organization trust, information security work impediment, and sanction, were selected as independent variables. The research model was analyzed through a survey targeting Korean army officers, and the results are as follows. First, security sensitivity, organization trust, and sanctions had a significant effect on information security compliance attitude. However, the effect of information security work impediment had not been identified. Second, it was analyzed that security sensitivity and organization trust had a positive effect on perceived information security compliance control, but the effect of information security work impediment and sanction had not been verified. Third, it was confirmed that the information security compliance attitude and perceived control affect the information security compliance intention, which reconfirmed the results of previous studies. This study is meaningful in that it can improve the information security level of the military organization by suggesting a way to manage these factors.

Using the ARCS model to improve undergraduates’ perceived information security protection motivation and behavior

The ARCS (attention, relevance, confidence, and satisfaction) model was used to design an information security (InfoSec) course, and its effects on students' perceived InfoSec protection motivation and their InfoSec behavior were explored. A quasi-experimental design was adopted in this research. The participants were 147 undergraduates who took liberal arts courses in a university in southern Taiwan. There were 68 students in the experimental group and 79 in the control group. The specific teaching strategies of the ARCS model based on the Protection Motivation Theory were used to explore students' learning outcomes. The results of the study revealed that after attending the course that applied the ARCS model, the experimental group students outperformed their counterparts in terms of perceived InfoSec protection motivation (perceived severity, vulnerability, response efficacy, self-efficacy, and response costs). Meanwhile, the experimental group students’ self-report frequencies of problematic InfoSec behavior were lower than those of the control group students. These findings imply that InfoSec education using the ARCS model in the liberal arts education courses of universities has potential.

Perception of Information Security in the Process of Distance Learning During the COVID-19 Pandemic on the Example of University Teachers’ Experiences

The COVID-19 pandemic has greatly affected every area of our lives. One of them was education, which had to undergo a huge transformation in a very short time. Overnight, the computer replaced the blackboard and became the only tool of communication between a student and a teacher. Teachers had to completely change the tools used in the teaching process and enter a completely new and, for many of them completely unknown, working environment. Online learning has replaced traditional teaching. A computer with Internet access has become a basic work tool for people who have so far used it mainly for recreational purposes. Teachers were thrown in at the deep end, for most of themit was the first time they had encountered platforms for remote communication.As the workspace has changed, learners and teachers have begun to move much more frequently into the world of the Internet, which harbors many dangers of which quite a few people were previously unaware. For this reason, the authors decided to investigate the problem of information security in e-learning. This paper attempts to collect the experiences and assess the awareness of university teachers about information security threats while teaching during the COVID-19 pandemic. The research results presented in this paper showed that the level of awareness of the risks, that may affect academic teachers in the distance learning process, is very low. Additionally, no appropriate procedures for safe distance learning have been developed. The communication security area was practically completely overlooked during the COVID-19 educational revolution.

A Trust-Based Model for the Adoption of Smart City Technologies in Australian Regional Cities

This paper explores the role of stakeholders’ trust in the adoption of smart city technologies, leading to the identification of the critical determinants for adopting smart city technologies in Australian regional cities. A comprehensive review of the related literature has been conducted. Such a review leads to the development of a trust-based research model for investigating the importance of trust in technology and its adoption. This model is then tested and validated with the use of a structural equation modeling technique on the survey data collected from ICT professionals in Australian regional cities. The study results show that perceived usefulness, perceived external pressure and perceived information security influence trust in smart city technologies. Further analysis highlights the significant relationship between stakeholders’ trust and their intention to adopt smart city technologies. This study is unique, as it is one of a few studies that focus on exploring stakeholders’ trust in the adoption of smart city technologies from the perspective of ICT professionals in Australia. The study results can be used by the government agencies to formulate appropriate policies to enhance the use of smart city technologies in the active pursuit of smart city development in Australia.

Should we wear a velvet glove to enforce Information security policies in higher education?

ABSTRACT The United States higher education is facing a unique challenge in information security management due to its distinctive characteristics, such as decentralised structure, academic freedom, and shared governance. These characteristics sharply distinguish higher education from traditional corporations. Gradually, this is beginning to pose a challenge for higher education institutions to adopt the appropriate information technology governance framework, which, for traditional corporations, mostly addresses security governance and leadership in a top-down manner. To address this issue, we examine the effect of perceived information security management approaches on perceived security practices. Our results show that the perceived flexible-oriented approach of information security management is more effective to use in implementing security controls in high education institutions. This seems to contradict most of the findings in the literature that suggest that a control-oriented approach is more effective in enforcing information security policies. Research contributions and implications are discussed, accordingly.

“SME executives’ perceptions and the information security preparedness model”

Purpose Information security has increasingly been in the headlines as data breaches continue to occur at alarming rates. This paper aims to propose an Information Security Preparedness Model that was developed to examine how SME executives’ perceptions of security importance, implementation challenges and external influences impact their awareness and commitment to security preparedness. Design/methodology/approach Funded by the Department of Justice, a national survey of SME executives’ perceptions of information security preparedness was conducted. Using PLS-SEM, the survey responses were used to test the proposed Information Security Preparedness Model. Findings The results indicate that as perceptions of security importance and external influences increase, SME executives’ awareness and commitment to information security also increases. In addition, as implementation challenges increase, awareness and commitment to information security decreases. Finally, as security importance and awareness and commitment to information security increases, executives’ perception of security preparedness also increases. Research limitations/implications Executive perceptions of information security were measured and not the actual level of security. Further research that examines the agreement between executive perceptions and the true state of information security within the organization is warranted. Originality/value Prior information security studies using Roger’s (1975, 1983) Protection Motivation Theory have produced mixed results. This paper develops and tests the Information Security Preparedness Model to more fully explain SME executive’s perceptions of information security.

디지털리터러시 교육이 개인 정보 보안 인식에 미치는 영향 연구

디지털리터러시 교육이 개인 정보 보안 인식에 미치는 영향 연구

Research on Urban Traffic Signal Control Systems Based on Cyber Physical Systems

In this paper, we present a traffic cyber physical system for urban road traffic signal control, which is referred to as UTSC-CPS. With this proposed system, managers and researchers can realize the construction and simulation of various types of traffic scenarios, the rapid development, and optimization of new control strategies and can apply effective control strategies to actual traffic management. The advantages of this new system include the following. Firstly, the fusion architecture of private cloud computing and edge computing is proposed for the first time, which effectively improves the performance of software and hardware of the urban road traffic signal control system and realizes information security perception and protection in cloud and equipment, respectively, within the fusion framework; secondly, using the concept of parallel system, the depth of real-time traffic control subsystem and real-time simulation subsystem is realized. Thirdly, the idea of virtual scene basic engine and strategy agent engine is put forward in the system design, which separates data from control strategy by designing a general control strategy API and helps researchers focus on control algorithm itself without paying attention to detection data and basic data. Finally, considering China, the system designs a general control strategy API to separate data from control strategy. Most of the popular communication protocols between signal controllers and detectors are private protocols. The standard protocol conversion middleware is skillfully designed, which decouples the field equipment from the system software and achieves the universality and reliability of the control strategy. To further demonstrate the advantages of the new system, we have carried out a one-year practical test in Weifang City, Shandong Province, China. The system has been proved in terms of stability, security, scalability, practicability and rapid practice, and verification of the new control strategy. At the same time, it proves the superiority of the simulation subsystem in the performance and simulation scale by comparing the different-scale road networks of Shunyi District in Beijing and Weifang City in Shandong Province. Further tests were conducted using real intersections, and the results were equally valid.

Towards Social Network Sites Acceptance in e-Learning System: Students Perspective at Palestine Technical University-Kadoorie

This study aims to examine social network sites acceptance in an e-Learning system and to propose a model encompassing determining factors that affect students’ intentions to use social network sites in the e-Learning system. The proposed model was built based on the Technology Acceptance Model (TAM), perceived enjoyment, social influences, and perceived information security from the literature review. The quantitative method of data collection using a questionnaire survey is used in the current study. The data analysed using a structural equation modeling (SEM) approach through partial least square (PLS) software version 3. The results indicated that perceived ease of use, perceived usefulness, perceived enjoyment, social influences, and perceived information security has a significant and positive impact on student’s acceptance of social network sites in an e-Learning system at Palestine Technical University-Kadoorie. Theoretical and practical implications discussed.

Formation of Consumers’ Perceived Information Security: Examining the Transfer of Trust in Online Retailers

Set in the backdrop of ever escalating data breach incidents, this paper investigates the seeming paradox between elevated consumer information security concerns reported in surveys and lax consumer security behavior exhibited online. Results from our experiment show that when asked about their information security perceptions, consumers evaluate the issue of information security based on the elaboration likelihood model. As a result, they express concerns. However, when consumers are actually shopping online, they do not separately evaluate the issue of information security. Instead, they mostly transfer their trust in an online retailer to the trusting belief that their information will be secure. This is one of the main reasons why, counter to their elevated security concerns expressed in surveys, consumers engage in lax security practices when they conduct business online.

Violators versus non-violators of information security measures in organizations—A study of distinguishing factors

ABSTRACTThe present study analyzes the elements that differentiate violators from non-violators of information security measures. Various elements are derived from established theories and models such as general deterrence theory, theory of planned behavior, theory of reasoned action, protection motivation theory, and social cognitive theory. To examine these factors, the data are gathered through an online study conducted in a Midwestern University, USA. The data are collected using questionnaires, and after scrutiny, 195 questionnaires are selected for final analysis. This data are analyzed using second-level statistical techniques, such as chi-square analysis and ANOVA. Results reveal that violators and non-violators of information security measures differ significantly with respect to many factors. These factors include perceived privacy, subjective norms, perceived information security policy (ISP) scope, perceived severity of penalty, perceived celerity of penalty, management support, organizational security culture, and perceived organizational IT capability. The non-significant factors are trust and work load. Implications for practitioners and researchers are provided.

Patients\u2019 perception of the information security management in health centers: the role of organizational and human factors

BackgroundResearchers paid little attention to understanding the association of organizational and human factors with patients’ perceived security in the context of health organizations. This study aims to address numerous gaps in this context. Patients’ perceptions about employees’ training on security issues, monitoring on security issues, ethics, physical & technical protection and trust in hospitals were identified as organizational and human factors.MethodsAfter the development of 12 hypotheses, a quantitative, cross-sectional, self-administered survey method was applied to collect data in 9 hospitals in Iran. After the collection of 382 usable questionnaires, the partial least square structural modeling was applied to examine the hypotheses and it was found that 11 hypotheses were empirically supported.ResultsThe results suggest that patients’ trust in hospitals can significantly predict their perceived security but no significant associations were found between patients’ physical protection mechanisms in the hospital and their perceived information security in a hospital. We also found that patients’ perceptions about the physical protection mechanism of a hospital can significantly predict their trust in hospitals which is a novel finding by this research.ConclusionsThe findings imply that hospitals should formulate policies to improve patients’ perception about such factors, which ultimately lead to their perceived security.