Cybersecurity Principles Research Articles

Design and Implementation of Tabletop Cybersecurity Simulation for Health Informatics Graduate Students.

Experiential learning through simulation allows students to apply didactic knowledge to real-world situations. Tabletop simulation allows for the exploration of a variety of topics, including cybersecurity in health care. Due to its low frequency, yet high-risk nature, simulation is a perfect educational modality to practice responding to a cybersecurity attack. As such, the authors designed and executed a tabletop cybersecurity simulation consisting of a prebriefing, four rounds of injects detailing potential cybersecurity breaches that students must address, and structured debriefings that included input from cybersecurity content experts. This simulation was performed in 2018, 2019, 2022, and 2023, during graduate Health Informatics (HI) students' residential visits. The simulation allowed opportunities for HI students to apply knowledge of cybersecurity principles to an unfolding tabletop simulation containing injects of scenarios they may encounter in the real world. Survey data were used to assess the students' perceptions of the simulation. Topics assessed included overall satisfaction, teamwork and communication, and length of the event. Additionally, in 2022 and 2023, data were collected on psychological safety and whether to include them in future HI residential visits. Eighty-eight graduate HI students took part in the cybersecurity simulation over four annual residential visits. Most students were satisfied with the event, found it valuable, and could see it impacting their future practice as informaticists. Additionally, students indicated high levels of psychological safety. Multiple students requested that additional simulations be incorporated into the curriculum. A tabletop cybersecurity simulation was utilized to allow HI students the ability to apply knowledge related to cybersecurity breaches to real-world examples. The simulation's best practices of prebriefing, psychological safety, and structured debriefing with expert feedback were emphasized in the simulation's design and implementation. Students found the simulation valuable and worth including in the curriculum.

Best practices in cybersecurity for green building management systems: Protecting sustainable infrastructure from cyber threats

This study explores the critical intersection of cybersecurity and sustainable infrastructure, with a focus on Green Building Management Systems (GBMS). Recognizing the increasing sophistication of cyber threats and the integration of digital technologies in sustainable buildings, this research aims to understand the challenges and prospects of cybersecurity within this context. Employing a systematic literature review and content analysis, the study examines peer-reviewed articles, conference proceedings, and industry reports from 2010 to 2024. The methodology facilitates a comprehensive understanding of the evolution, current practices, and future directions of cybersecurity measures in sustainable infrastructure. Key findings reveal that robust cybersecurity measures are foundational to protecting the digital and physical assets underpinning sustainable infrastructure. The study identifies core principles of cybersecurity, such as resilience and the integration of cybersecurity with sustainability efforts, as crucial for enhancing the security posture of GBMS. Looking ahead, the research anticipates a future where cybersecurity measures are seamlessly integrated into sustainable buildings, ensuring resilience against cyber threats while advancing sustainability goals. Strategic recommendations include adopting international standards, fostering interdisciplinary collaboration, investing in cybersecurity education, and leveraging emerging technologies. The study concludes that advancing research in cybersecurity technologies tailored for sustainable infrastructure is essential for navigating the complexities of cybersecurity in green building management.

Security Ontology in a Virtual University

Abstract In this paper we propose a cybersecurity ontology model designed for universities, aiming to facilitate the management and protection of sensitive data and information within the context of the growing cybersecurity threats. The proposed ontology includes four distinct hierarchical levels: the basic level, the conceptual level, the instance level and the relationships level. At the basic level, it defines essential terms and principles of cybersecurity, including concepts like vulnerability, threat, cyber-attack, security policies and security rules. At the conceptual level, the ontology categorizes information and cybersecurity systems, embracing domains such as data protection, authentication, authorization, and auditing. At the instance level, the ontology describes specific examples of information and cybersecurity systems used in universities, such as the library management system or the accounting management system. At the relationships level, the ontology establishes links between different categories of information and cybersecurity systems, as well as between these systems and the entities that use them, such as students, professors and administrative staff. By implementing this cybersecurity ontology, universities can improve the management and protection of their sensitive data and information, as well as respond more efficiently to cybersecurity threats.

Infusing Morabaraba game design to develop a cybersecurity awareness game (CyberMoraba)

Numerous studies have confirmed the effectiveness of Cybersecurity Awareness Games (CAGs) in enhancing the security posture of diverse organizations. As these organizations increasingly face the formidable challenge of cyberattacks, implementing serious CAGs to solve this issue has become a paramount concern. This article introduces an innovative approach to cybersecurity education by presenting a serious CAG. The game aims to effectively educate students about critical aspects of cybersecurity awareness engagingly and interactively. The study aimed to redefine cybersecurity awareness training by introducing an indigenous game design that intricately incorporates the traditional South African Morabaraba board game. While the effectiveness of non-indigenous games like "Capture The Flag (CTF)" in cybersecurity training is acknowledged, indigenous designs have been overlooked. This research creatively integrates Morabaraba's gameplay into cybersecurity training, adapting it into a competitive game where players adopt the roles of either defenders or attackers, with corresponding tokens/images symbolizing various cyber defense and attack strategies. Both the defenders and attackers in the game can elevate their awareness scores by strategically positioning defensive or attacking images on the game board. Subsequently, a judging entity assesses the players' moves and assigns scores based on the accuracy of the images placed. The game mirrors real-world scenarios, promoting strategic thinking and leveraging interactive gameplay for practical insights into cybersecurity awareness. Players demonstrate their cybersecurity knowledge through offensive and defensive strategies. A group of 40 students evaluated the game's effectiveness, highlighting its potential to create an engaging and competitive learning environment that imparts cybersecurity principles and practical application. The evaluation of the game mechanics demonstrated a remarkably positive outcome, with students expressing both enjoyment and an enhanced understanding of cybersecurity awareness.

A Secure Opportunistic Network with Efficient Routing for Enhanced Efficiency and Sustainability

The intersection of cybersecurity and opportunistic networks has ushered in a new era of innovation in the realm of wireless communications. In an increasingly interconnected world, where seamless data exchange is pivotal for both individual users and organizations, the need for efficient, reliable, and sustainable networking solutions has never been more pressing. Opportunistic networks, characterized by intermittent connectivity and dynamic network conditions, present unique challenges that necessitate innovative approaches for optimal performance and sustainability. This paper introduces a groundbreaking paradigm that integrates the principles of cybersecurity with opportunistic networks. At its core, this study presents a novel routing protocol meticulously designed to significantly outperform existing solutions concerning key metrics such as delivery probability, overhead ratio, and communication delay. Leveraging cybersecurity’s inherent strengths, our protocol not only fortifies the network’s security posture but also provides a foundation for enhancing efficiency and sustainability in opportunistic networks. The overarching goal of this paper is to address the inherent limitations of conventional opportunistic network protocols. By proposing an innovative routing protocol, we aim to optimize data delivery, minimize overhead, and reduce communication latency. These objectives are crucial for ensuring seamless and timely information exchange, especially in scenarios where traditional networking infrastructures fall short. By large-scale simulations, the new model proves its effectiveness in the different scenarios, especially in terms of message delivery probability, while ensuring reasonable overhead and latency.

Economic and Legal Principles of Cybersecurity as a Prerequisite for the Introduction of Special Economic Regimes

The article conducts a scientific and practical study of the economic and legal aspects of the State policy in the field of cybercrime and its impact on business development in a particular region, country, etc. It is determined that the massive spread of cybercrime, the lack of effective mechanisms for combating economic crimes, and the leveling of conceptual approaches to creating an effective mechanism for legal support of the business environment development have a negative impact on the investment environment in particular and on ensuring sustainable development of the State as a whole. The author analyzes the regulatory and legal documents which form the legal basis of the mechanism for combating cybercrime, both at the international and national levels. The author identifies the weaknesses of the national system of legal regulation of cybersecurity. The author points out the sufficiency and fragmented nature of legislative support for cybersecurity and counteraction to the growth of economic crimes.
 It is established that the significant vulnerability of Ukraine's information sphere is due to the excessive use of foreign-made material and technical means. It is emphasized that the international scale of the fight against cybercrime requires clarification and harmonization of national legislation in order to be able to cooperate with law enforcement agencies abroad. The article focuses on the low efficiency of Ukraine's current cybersecurity system and the urgent need to improve and optimize it. Achieving this will not only solve the problem of information space security, but also ensure the continuity and sustainability of Ukraine's economic development.
 It is determined that one of the priority areas of work in the field of creating optimal conditions for business is the fight against computer crimes in the economic sphere. Among the main tasks in this area of activity is to counteract the legalization of shadow income. The analysis of money laundering schemes shows that organized crime is very interested in using the capabilities of electronic payment systems which allow for instant money transfers with almost complete anonymity of counterparties.

Efforts to Enhance Australia's Cyber Security by Developing of a Partnership with Indonesia in the Field of Cyber Diplomacy

This article examines the Australian government's endeavors to enhance cybersecurity by means of cyber diplomacy with Indonesia. This article utilizes qualitative descriptive methodologies. The data sources utilized encompass scholarly publications, books, research reports, and electronic media pertaining to the research topic. This article will examine the use of Australia's cyber diplomacy with Indonesia by utilizing the principles of cybersecurity and cyber diplomacy to enhance the robustness of cybersecurity. Australia engages in cyber diplomacy with Indonesia to enhance cybersecurity, based on the principle of international cooperation in this field. Australia implements a capacity building strategy, aligned with its 2017 International Cyber Engagement Strategy policy, to fortify Indonesia's cybersecurity. This endeavor will also contribute to the enhancement of Australia's own cybersecurity, given the interconnected nature of cyber threats. Australia's efforts to enhance Indonesia's capabilities are implemented through various collaborative initiatives, specifically the Cyber Policy Dialogue and Cyber Bootcamp programs. Examining this research is intriguing because to the involvement of Australia and Indonesia in cyber warfare, as well as their recent efforts to re-establish cyber-related diplomacy.

Cybersecurity Framework for Ensuring Confidentiality, Integrity, and Availability of University Management Systems in Bangladesh.

In an increasingly interconnected and technologically advanced world, the efficient operation of University Management Systems (UMS) is essential for the proper functioning of educational institutions. However, with the rapid digitization of processes, the risk of cyber threats targeting these systems has also grown significantly. This research presents a comprehensive Cybersecurity Framework tailored to the context of Bangladesh, aimed at ensuring the confidentiality, integrity, and availability of University Management Systems. The proposed framework is designed to address the unique challenges and requirements faced by universities in Bangladesh, considering factors such as the evolving threat landscape, resource constraints, and regulatory environment. Drawing upon established cybersecurity principles and best practices, the framework encompasses a multi-layered approach that encompasses preventive, detective, and responsive measures. Key components of the framework include the identification and assessment of potential vulnerabilities within UMS, the implementation of robust access controls and encryption mechanisms, continuous monitoring and threat detection, incident response planning, and user awareness training. The framework's adaptability allows universities to tailor its components to their specific organizational structures and risk profiles, thus promoting a proactive and dynamic approach to cybersecurity. The research further evaluates the effectiveness of the proposed framework through a combination of quantitative and qualitative methods, including system assessments, penetration testing, and stakeholder surveys. Results demonstrate the framework's ability to enhance the security posture of UMS in Bangladesh, contributing to the preservation of sensitive data, the prevention of unauthorized access, and the sustained availability of critical services.

Cybersecurity and Cyber Defense Insights: The Complementary Conceptual model of Cyber resilience

Cybersecurity planning within a complex system and applying its principles aims to achieve system resilience in cyberspace. The purpose of a complex system is to carry out a mission as a set of abilities and preferences concerning the internal and external circumstances of the system. Achieving cyber resistance requires organizational, human, material, and financial resources to implement measures, activities, and procedures to reduce residual (remaining) security risk. This part of the security risk must be accepted within the system since it is impossible to achieve its further reduction. The research in this paper analyzes ways and means to achieve cyber resistance in the conditions of today's growing security risks. This research aims to create a new model of cyber resistance, which includes cyber and information security. This also considers that the methods of separating previously unseen threats and attacks of the past day are unknown today in a large number of business cases. To confront the challenges, there is a need to create "knowledge about ignorance" and the development of cyber capabilities based on the principles of cyber security and defense.

BIoTS-Path: Certification Transmission of Supply Chains Based on Blockchain–Internet of Things Architectures by Validating the Information Path

A food traceability system (FTS) can record information about processes along a production chain to determine their safety and quality. Under the Internet of Things (IoT) concept, the communication technologies that support FTSs act as platforms for mass access to information with limited security. However, the integrity of the collected data is not immune to security attacks. This paper proposes a point-to-point information transmission path with no edges or access boundaries (no intermediaries) to transmit data with integrity. This route is possible thanks to the architectural articulation of a hardware device (sensor BIoTS) at the perception layer, with the Blockchain architecture at the application layer. This pairing makes an ecosystem with the ability to trace and certify in parallel the products, the supply chain processes, and the data recorded in it possible. The design of the security testing ecosystem is based on the theoretical and technical principles of cybersecurity. It is executed through mathematical models that define the probability of attacks’ success against the transmitted data’s integrity. The security tests performed allow for establishing that this BIoTS information transmission route is unlikely to suffer from transmission vulnerabilities and that it is not prone to security attacks against integrity. This work paves the way toward fully integrating Blockchain technology in dedicated IoT architectures.

Current challenges and the future of legal protection of personal data: under the influence of digitalization development

Current challenges and the future of legal protection of personal data: under the influence of digitalization development

A Cyber Security and Digital Transactions to Educated the Micro, Small and Medium Business Community

The rapid growth in the digital economy has brought countless benefits, especially in the micro, small, and medium enterprise (MSME) community. However, along with these opportunities, serious threats also emerge in the form of increasingly sophisticated cybercrime. This article aims to explain the important role of cyber security in digital transactions and how it can be used as an educational tool for the MSME community. The importance of understanding cyber threats and cyber security practices in a rapidly changing digital era cannot be underestimated. This article discusses the various types of cyber threats that MSMEs may face, such as phishing, malware, and ransomware attacks, as well as the financial and reputational impact these attacks can have. Additionally, this article highlights the cyber security principles that MSMEs must follow to protect their data and digital transactions. Apart from explaining threats, this article also promotes the role of education in increasing MSME awareness and understanding of cyber security. We present practical recommendations on how MSMEs can educate themselves and their team members on cybersecurity best practices. Additionally, this article discusses available resources, such as online training and security tools that can help MSMEs protect their businesses from cyber threats. With a better understanding of cyber security and best practices in digital transactions, the MSME community can reduce the risk of data and financial loss, and build a stronger foundation for sustainable growth in the digital economy era. This article provides useful guidance for the MSME community looking to strengthen their defenses against cyber threats and harness the unlimited potential of secure digital transactions.

DEFENSE IS THE BEST OFFENSE: THE EVOLVING ROLE OF CYBERSECURITY BLUE TEAMS AND THE IMPACT OF SOAR TECHNOLOGIES

ABSTRACT The article delves into the intricacies, tools, approaches, and tactics utilized by Cybersecurity Blue Teams, as well as the essential planning practices that lay the foundation for successful operations. The effectiveness of Blue Team operations relies on the proficiency of the Blue Team members, who possess an all-encompassing understanding of cybersecurity principles, technologies, and best practices. Moreover, the article accentuates the tactical implementation of cyber defense mechanisms, such as honeypots, honeynets, and decoy systems, to augment an organization’s capacity to detect and react to emerging threats. A key aspect of the article is the exploration of how Security Orchestration, Automation, and Response (SOAR) technologies support Blue Teams in enhancing their capabilities. SOAR technologies streamline and automate the response process, enabling Blue Teams to quickly identify, investigate, and remediate threats, thereby reducing the time taken to react and strengthening overall security posture. The article also stresses the significance of continuous improvement and adaptation of strategies and techniques in response to the ever-changing threat landscape and emerging technologies. In addition, the article underlines the cooperative and iterative nature of Blue Teaming operations, ensuring that organizations can efficiently adapt to and alleviate the risks posed by a perpetually evolving cyber environment. By scrupulously documenting and examining instances where the Blue Team effectively thwarts the Red Team’s efforts, organizations can cultivate a comprehensive understanding of their security posture and make informed decisions to bolster their defenses. As cyber threats continuously evolve, the role of Cybersecurity Blue Teams is becoming increasingly vital, and organizations that embrace this proactive approach, supported by advanced technologies such as SOAR, will be better prepared to safeguard their critical assets and resist the unyielding barrage of cyber threats.

OFFENSE FOR DEFENSE: THE ART AND SCIENCE OF CYBERSECURITY RED TEAMING

The article delves into the methodologies, tools, techniques, and strategies employed in Red Teaming, as well as the planning practices that underpin successful engagements. The success of Red Teaming engagements depends on the expertise of the Red Teamers, who possess a comprehensive understanding of cybersecurity principles, technologies, and best practices. Furthermore, the article highlights the strategic application of cyber deception techniques, such as honeypots, honeynets, and decoy systems, to enhance an organization’s ability to identify and respond to emerging threats. The article also emphasizes the importance of the continuous improvement and adaptation of strategies and techniques in response to evolving threats and emerging technologies. In addition, the article underscores the collaborative and iterative approach of Red Teaming engagements, which ensures that organizations can effectively adapt to and mitigate the risks posed by an ever-evolving threat landscape. By meticulously documenting and analyzing instances where the Blue Team successfully intercepts the Red Team’s efforts, organizations can develop a comprehensive understanding of their security posture and make informed decisions to enhance their defenses. With the constant evolution of cyber threats, Red Teaming is becoming increasingly important, and organizations that embrace it will be better equipped to protect their critical assets and defend against the relentless onslaught of cyber threats.

Концептуальні положення забезпечення кібербезпеки енергетичної галузі України

The spheres of cybersecurity (ensuring cybersecurity), as well as the functioning and protection of critical infrastructure and its objects in Ukraine, are defined by the Cybersecurity Strategy of Ukraine (2016), the laws of Ukraine "On the Basic Principles of Cybersecurity of Ukraine" (2017) and "About Critical Infrastructure" (2021). The formation and implementation of state policy in the mentioned spheres, and planning and execution of related measures by cybersecurity entities and critical infrastructure facilities take place at the regulatory, organizational, and technical levels. The work is devoted to the analysis of the state of regulatory provision of information security, cybersecurity, cyber protection, the creation and functioning of the national system of critical infrastructure in Ukraine, the practice of applying the provisions of the relevant regulatory and administrative documents by the subjects of cybersecurity, as well as the development of the main conceptual provisions of cybersecurity, which systematize the use of forces (means) and the implementation of security measures at the regulatory, organizational and technical levels, in energy (fuel and energy) sector of the state’s critical infrastructure for 3 years and determining the principles of forming priority approaches and measures to increase the level of cybersecurity of the energy industry.

Can I Really Protect My Broadcast Plant From a Cybersecurity Attack?

Internet Protocol (IP) networks are fundamental building blocks of the broadcast technical plant. Integration with the legacy broadcast infrastructure can range from minimal system control functions to an end-to-end IP-based content transport facility. Regardless of the level of integration, cybersecurity cannot be ignored to ensure a reliable, secure, and protected system. Industry cybersecurity principles are commonly based on a complex framework of principles from the National Institute of Standards and Technology (NIST). The NIST Framework is often a complex and daunting task to implement within a broadcast facility. An effective cybersecurity program begins with the design of the network. This article provides an understanding of practical implementable cybersecurity precautions based on the NIST Framework for the broadcast station. Specific topics to be addressed will include an overall understanding of cybersecurity principles and a step-by-step infrastructure implementation guide for the broadcast facility whether large or small. The guide will be focused on a secure network design approach, the use of Ethernet switch security capabilities, the use of packet filtering and firewalls, and an understanding of implementing common cybersecurity threat mitigation techniques.

“Generic and unusable”1: Understanding employee perceptions of cybersecurity training and measuring advice fatigue

Security Education Training and Awareness (SETA) programs often fail to reduce organisational cyber risk, and this is linked to the way that employees perceive and appraise such programs. Rather than improving employee awareness, a poorly implemented SETA program may cause fatigue and result in risky cyber behaviours. This paper describes two studies aimed respectively at examining how SETA programs can lead to fatigue and development of a measure of SETA Advice-Related Cybersecurity Fatigue. In Study 1, a repertory grid technique was used to examine employee responses to a series of SETA videos. A total of 24 in-depth semi-structured interviews were conducted with individuals from a variety of industries. Key themes related to the content, style, and design, of cybersecurity training videos, but also employees’ perceived characteristics of the intended audience and broader preconceptions of cybersecurity principles. In Study 2, we developed the Cybersecurity Advice Fatigue Scale (CAFS) Scale, a self-report measure of the fatigue which results from poor cybersecurity advice. A principal component analysis of CAFS scores for 457 working adults revealed a five-factor structure that broadly aligns with the themes identified by the qualitative analyses of Study 1. The results of both studies highlight that employees make inferences about the corporate motivation behind the SETA program, and this influences their receptivity to the content. From an applied perspective, cybersecurity practitioners can use the CAFS to identify features of their cybersecurity training programs which should be improved to enhance the program's efficacy.

A Lurking Threat: Counselor Practices to Guard Against Cyber Threats

As a result of shifts in global power, the growth of cyber capabilities worldwide, and the impact of COVID-19 on the increasing use of technology in varied workplaces, the potential for threat and disruption to mental health facilities is expected to increase. Counselors and their clients are vulnerable to these threats any time they share data online with each other, with third-party payers, and with allied health professionals. In fact, any private information stored digitally is potentially at risk for exploitation or theft. This current environment highlights the need for an intentional process and approach that can help mental health counselors understand their digital assets and vulnerabilities in order to anticipate and protect against potential cyber threats. This type of process can be facilitated through the application of cyber intelligence and cybersecurity principles to online counseling services in order to address ethical and legal obligations of counselors and to assuage client fears about potential privacy breaches. When counselors keep client data safe, Health Information Portability and Accountability Act and Family Educational Rights and Privacy Act violations are less likely to occur in a variety of settings where clients may be seen. An overview of the need for cybersecurity, a framework for bolstering cybersecurity, and specific guidelines for counselors are provided.

CYBER SECURITY AND PERSONAL RIGHTS UNDER THE LEGISLATION OF UKRAINE

The aim of the article is to study the issue of achieving a balance between information protection in the cybersecurity system and freedom of expression in accordance with the position of the UN and the case law of the European Court of Human Rights. Research methods include the analysis of legislation on cybersecurity, generalization of legal information and cybersecurity practices. As a result, it was found out that in Ukraine the basic legal act on cyber security is the Law “On the basic principles of cyber security of Ukraine”. The preamble of this Law defines the legal and organizational basis for protection of vital interests of citizens, society and state, national interests of Ukraine in cyberspace, main goals, directions and principles of state policy in cybersecurity, authorities of state bodies, enterprises, institutions, organizations, individuals and citizens in this field, the basic principles of coordination of their activities to ensure cybersecurity. Ukraine has ratified the Council of Europe Convention on Cybercrime of 23 November 2001. The Convention states that the fight against cybercrime is dictated, in particular, by the need to protect legitimate interests in the use and development of information technology. In particular, the Convention identifies the following types of cybercrime: offenses against the confidentiality, integrity and availability of computer data and systems; computer-related offenses; offenses related to child pornography; offenses related to copyright and related rights infringement. Finally, legal regulation of cybersecurity in Ukraine is based on the requirements of striking a balance between information protection and freedom of expression, the position of the UN and the case law of the European Court of Human Rights.

Criminal law and forensic support in the fight against cybercrime

The article analyses legislation and scientific work on combating cybercrime based on the use of a set of general and special methods, methodological principles and approaches of legal science. It is concluded that with the introduction of the term “cybercrime” in the criminal law of Ukraine, the use of the term “cybercrime” becomes relevant, which should be understood as a socially dangerous crime in cyberspace, a responsibility that is provided for by the Ukrainian law on criminal responsibility and that is also recognized as a criminal offense by international treaties that regulate the matter. Emphasis is placed on the desirability of making appropriate terminological changes in the Law of Ukraine “On the Basic Principles of Cyber Security” and other regulations, as well as taking other systemic measures at the conceptual and organizational level, to identify the main cybersecurity threats and formulate measures to prevent and investigate them, determine a single body for the operational management of all entities whose task is to ensure the cybersecurity, create a system of technological means of the national cybersecurity system and establish closer international cooperation.