Risk Of Unauthorized Access Research Articles

Assessing Strategies to Overcome Barriers for Drone Usage in Last-Mile Logistics: A Novel Hybrid Fuzzy MCDM Model

Effective last-mile (LM) delivery is critical to the efficient functioning of supply chains. In addition to speed and the cost of delivery, environmental and social sustainability are increasingly important factors in last-mile logistics (LML), especially in urban areas. Sustainable solutions such as drones attract special attention from researchers due to their high potential. The future of drone logistics is uncertain due to many barriers. This study analyzes, evaluates and ranks barriers to identify those that most significantly hinder broader drone adoption in LML, and proposes and ranks strategies to overcome them. This type of issue requires the involvement of multiple stakeholders with conflicting goals and interests. Therefore, the study employs a novel hybrid multi-criteria decision-making (MCDM) model that combines fuzzy Delphi-based fuzzy factor relationship (Fuzzy D-FARE) and fuzzy comprehensive distance-based ranking (Fuzzy COBRA) methods. The results indicate that the main obstacle to drone implementation in LM is the lack of aviation regulations. The risks of unauthorized access, data misuse, privacy breaches, and data security represent significant challenges. They are followed by ambiguously defined or burdensome requirements for insurance and liability for drone owners. The main contributions of this study are the establishment of a novel hybrid model, identification and ranking of barriers for broader application of drones in LML, and strategies for overcoming them.

METHODS OF PROTECTING PERSONAL INFORMATION IN INFORMATION SYSTEMS

In today's digital society, the protection of personal information becomes an extremely important task. With the development of information technologies and the growth of volumes of data processed by information systems, the risk of unauthorized access, theft and misuse of confidential data increases. The purpose of the work is the analysis of enterprises to identify factors affecting information security, as well as the development and theoretical substantiation of methods of depersonalization and de-personalization of personal data, which allow to ensure their confidentiality, as well as rules for organizing the processing of depersonalized data. This topic is relevant for information security specialists, software developers, as well as for organizations that operate large volumes of personal data, in order to ensure an adequate level of information protection and minimize the risks of cyber threats. The analysis of the methods of organizing the processing and protection of personal data showed that the proposed methods and the protection systems created on their basis require significant resources for implementation, have a strong dependence on the type of data and high redundancy in practical application for working with small data sets. Therefore, in a number of cases, it is advisable to apply methods that remove requirements for the confidentiality of personal data, which significantly reduces the costs of protection. The paper considers one of the effective and promising approaches to the protection of personal data in information systems - depersonalization. The methodology and rules for processing depersonalized personal data with the involvement of external operators have been developed, which allows protection of personal data both at the level of the operator and at the level of the user. The proposed method is particularly effective when using data centers and cloud computing technology to process personal data of various low-budget organizations.

Essentialities of Cloud Accounting Information System on The Operational Efficiency of Firms In Nigeria

Novel accounting technology such as cloud accounting information system has taken the Centre stage in its presumed capacity to provide relevance online accounting and auditing solutions that are accessible from anywhere through the cloud service providers. It is no doubt that keeping pace with this accounting technology has comes with apprehension from target audiences, that have created apathy in the deployment of cloud accounting by some companies in Nigerian, due to some speculative drawbacks such as high security breaches, high cost of IT services, risk of unauthorized access and viruses among others. It is in this light, that the study firstly examined the essentialities of cloud accounting information system on the operational efficiency of firms in Nigeria and secondly evaluated if there are significant differences in the perception of respondents in deployment of cloud accounting on corporate exigencies in Nigeria. The survey research design was adopted to collect data from 385 respondents in 32 companies cutting across four sectors in Nigeria. The Chi-square and Analysis of Variance were used for the test of hypotheses and it was discovered that cloud accounting significantly enhances the operational efficiency of firms in Nigeria, while there were no significant difference in the perception of respondents in deployment of cloud accounting leading to increase in the risk of unauthorized access, weak or no access control and high cost of IT services etc. In all, the benefits of the deployment of cloud accounting outweighs the exposures and it was recommended among others that organizations should endeavour to implement substantial security measures to protect IT infrastructure through effective internal control architecture

영업비밀보호에 관한 형사법적 보호방안

In the rapidly evolving high-tech industry, the significance of safeguarding trade secrets is growing exponentially as the risk of unauthorized access and information breaches continues to escalate. A “trade secret” is information, including a method of manufacture, method of sale, technical or business information useful in the conduct of business, which is not publicly known, is the subject of reasonable efforts to maintain its secrecy, and has independent economic value. The Unfair Competition Prevention and Trade Secret Protection Act in Korea serves to shield these trade secrets from infringement. Nonetheless, the current penalty structure outlined in the Unfair Competition Prevention and Trade Secret Protection Act faces several shortcomings. In practical terms, the offense of breaching professional trust has been widely employed to facilitate criminal sanctions against trade secret violations. However, this excessive reliance on the breach of professional trust crime has resulted in a lack of clarity regarding the elements stipulated in the Unfair Competition Prevention and Trade Secret Protection Act. To effectively penalize accomplices involved in trade secret infringements and those attempting to unlawfully obtain trade secrets, a comprehensive and well-grounded approach must be adopted. This necessitates considering attempts, preparations, and conspiracies as integral components of the Unfair Competition Prevention and Trade Secret Protection Act.

A five-safes approach to a secure and scalable genomics data repository

Genomic researchers increasingly utilize commercial cloud service providers (CSPs) to manage data and analytics needs. CSPs allow researchers to grow Information Technology (IT) infrastructure on demand to overcome bottlenecks when combining large datasets. However, without adequate security controls, the risk of unauthorized access may be higher for data stored on the cloud. Additionally, regulators are mandating data access patterns and specific security protocols for the storage and use of genomic data. While CSP provides tools for security and regulatory compliance, building the necessary controls required for cloud solutions is not trivial. Research Assets Provisioning and Tracking Online Repository (RAPTOR) by the Genome Institute of Singapore is a cloud-native genomics data repository and analytics platform that implements a "five-safes" framework to provide security and governance controls to data contributors and users, leveraging CSP for sharing and analysis of genomic datasets without the risk of security breaches or running afoul of regulations.

LEGAL REGULATION OF MOST DANGEROUS MICROORGANISMS STRAINS HANDLING

The statutory basis of Ukraine on the treatment of strains of most dangerous microorganisms has been analyzed, and the terminology important for further understanding of the issue has been clarified. The aim of the paper is to study the state of legal regulation in Ukraine of relations in the field of treatment of strains of especially dangerous microorganisms, to pro- vide analysis of the current legislation of Ukraine in this area, as well as the practice of its application. Theoretical bases of legal support of legitimation of activity in this sphere, including that for the purpose of protection of biological safety have been established. The necessity of legal regulation of participants of relations concerning treatment of strains of especially dangerous microorganisms activity has been substantiated. The current state of legal regulation of relations in the field of strain management requires, given the intersectoral nature of the isssue, consideration of the creation of a single intersectoral authority for the supervision of hazardous biological objects. Such a authority may not only be a licensing authority, but also responsible for the introduction of a register of owners of hazardous biological objects that are not economic entities (for example, individuals – owners of collections of such biological objects).

Identifying smartphone users based on how they interact with their phones

The continuous advancement in the Internet of Things technology allows people to connect anywhere at any time, thus showing great potential in technology like smart devices (including smartphones and wearable devices). However, there is a possible risk of unauthorized access to these devices and technologies. Unfortunately, frequently used authentication schemes for protecting smart devices (such as passwords, PINs, and pattern locks) are vulnerable to many attacks. USB tokens and hardware keys have a risk of being lost. Biometric verification schemes are insecure as well as they are susceptible to spoofing attacks. Maturity in sensor chips and machine learning algorithms provides a better solution for authentication problems based on behavioral biometrics, which aims to identify the behavioral traits that a user possesses, such as hand movements and waving patterns. Therefore, this research study aims to provide a solution for passive and continuous authentication of smartphone users by analyzing their activity patterns when interacting with their phones. The motivation is to learn the physical interactions of a smartphone owner for distinguishing him/her from other users to avoid any unauthorized access to the device. Extensive experiments were conducted to test the performance of the proposed scheme using random forests, support vector machine, and Bayes net. The best average recognition accuracy of 74.97% is achieved with the random forests classifier, which shows the significance of recognizing smartphone users based on their interaction with the phones.

Secured Data Storage in Cloud Using Homomorphic Encryption

Cloud data storage is a model of data storage where data in its digital form is stored in logical pools across the physical storage which is distributed across multiple servers usually in diverse locations. The full physical environment is owned and managed by an organization called Cloud Service Provider (CSP). In this type of storage, the data is distributed and owned by third party, and there is risk of unauthorized access. This makes security, reliability, confidentiality and privacy of data more important when storage in cloud is thought of. Although there are methods available for providing security, much work is not done with emphasis on dynamic nature of the data. Hence securing the data while updating becomes important. In this paper, a method that ensures confidentiality of data stored in cloud using homomorphic encryption is presented. The paper also provides a technique to ensure confidentiality during data updates in cloud. The presented method includes byte level automorphism for ensuring data integrity and confidentiality. The tabulated experimental results show that the proposed method provides more secure frame work for ensuring confidentiality and integrity of data in cloud.

Secured Data Storage in Cloud Using Homomorphic Encryption

Cloud data storage is a model of data storage where data in its digital form is stored in logical pools across the physical storage which is distributed across multiple servers usually in diverse locations. The full physical environment is owned and managed by an organization called Cloud Service Provider (CSP). In this type of storage, the data is distributed and owned by third party, and there is risk of unauthorized access. This makes security, reliability, confidentiality and privacy of data more important when storage in cloud is thought of. Although there are methods available for providing security, much work is not done with emphasis on dynamic nature of the data. Hence securing the data while updating becomes important. In this paper, a method that ensures confidentiality of data stored in cloud using homomorphic encryption is presented. The paper also provides a technique to ensure confidentiality during data updates in cloud. The presented method includes byte level automorphism for ensuring data integrity and confidentiality. The tabulated experimental results show that the proposed method provides more secure frame work for ensuring confidentiality and integrity of data in cloud.

Identity Concealment When Uploading Pictures of Patients in a Tele-Medicine System

Tele-medicine systems run the risk of unauthorized access to medical records, and there is greater possibility for the unlawful sharing of sensitive patient information, including children, and possibly showing their private parts. Aside from violating their right to privacy, such practices discourage patients from subjecting themselves to tele-medicine. The authors thus present an automatic identity concealment system for pictures, the way it is designed in the GetBetter tele-medicine system developed under a WHO/TDR grant. Based on open-source face- and eye-detection algorithms, identity concealment is executed by blurring the eye region of a detected face using pixel shuffling. This method is shown to be not only effective in concealing the identity of the patient, but also in preserving the exact distribution of pixel values in the image. This is useful when subsequent image processing techniques are employed, such as when identifying the type of lesions based on images of the skin.

Theft Preventive Measures for Interconnected Personal Computer Devices as Proactive Physical Security of Data

This article is concerned with the arising problems and implications of physical security and privacy of personal and control data on portable computer devices, especially smartphones. The authors consider various classifications of portable computer devices, isolate smartphones as a most common device, and study types of user behavior regarding the involved security risks of unauthorized access to the data stored both locally and remotely with accent of physical data access via device theft. Based on provided categorization the researchers discuss the factors and criteria suitable to generalize user patterns and evaluate the corresponding vulnerability level against specified statistics. The considered statistical criteria can be formulated as a mathematical model of relative risks and implemented as a service or an application to be used for improving user awareness on current threats to his personal data and respective interconnected personal portable devices.

Novel Variants of a Histogram Shift-Based Reversible Watermarking Technique for Medical Images to Improve Hiding Capacity.

In telemedicine systems, critical medical data is shared on a public communication channel. This increases the risk of unauthorised access to patient's information. This underlines the importance of secrecy and authentication for the medical data. This paper presents two innovative variations of classical histogram shift methods to increase the hiding capacity. The first technique divides the image into nonoverlapping blocks and embeds the watermark individually using the histogram method. The second method separates the region of interest and embeds the watermark only in the region of noninterest. This approach preserves the medical information intact. This method finds its use in critical medical cases. The high PSNR (above 45 dB) obtained for both techniques indicates imperceptibility of the approaches. Experimental results illustrate superiority of the proposed approaches when compared with other methods based on histogram shifting techniques. These techniques improve embedding capacity by 5–15% depending on the image type, without affecting the quality of the watermarked image. Both techniques also enable lossless reconstruction of the watermark and the host medical image. A higher embedding capacity makes the proposed approaches attractive for medical image watermarking applications without compromising the quality of the image.

Advanced multi-step security scheme using PCA for RFID system and its FPGA implementation

Security of stored data within a RFID tag and the data transmission process is important to both the designer and the user. The application of RFID in various domains is increasing owing to its ease of use, flexibility, low cost and enormous advantages of quick accessing and data transfer technology. Those deployments have a risk of unauthorised access to sensitive biometric or financial information through the tag communication. In this paper, programmable cellular automata (PCA) have been used to achieve a multi-step security for an RFID system. The proposed scheme has high level of security, as it provides step by step encryption with different keys and PCA rules for each part. The complexity of the circuit is reduced significantly by reducing the hardware size and power dissipation to a minimum level. The processor for reader and tag frame generator has been developed and implemented using Xilinx ISE14.3 simulation tools and Kintex™-7 FPGA board.

Wireless Network Security: The Mobile Agent Approach

The broadcast nature of wireless network makes traditional link-layer attacks readily available to anyone within the range of the network. User authentication is best safeguard against the risk of unauthorized access to the wireless networks. The present 802.1× authentication scheme has some flaws, making mutual authentication impossible and open to man-in-the-middle attacks. These characteristics make traditional cryptographic mechanism provide weak security for the wireless environment. We have proposed the use of mobile agents to provide dependable Internet services delivery to users, this will guarantee secure authentication in wireless networks and we examine the feasibility of our solution and propose a model for wireless network security.

Mnemonic Passwords Practices in Corporate Sites in Nigerian

Current technological drive towards paperless mode of operations, which provides faster delivery of corporate and banking services to a wider range of customers, has resulted in the problem of identity theft which is becoming a growing problem in Nigeria. There is the risk of unauthorized access, fraud and inappropriate disclosure of sensitive data. Human resources and malicious applications steal user identity, potentially resulting in a direct loss of highly sensitive information and hard currency to affected victims. To protect sensitive information, commercial and corporate sites extensively employ the use of textual passwords, which when used over an encrypted connection is vulnerable to attacks. To counter some of these attacks, many corporate sites instruct users to make use of mnemonic passwords without carefully considering the implications. This paper describes an empirical investigation performed to determine the factors influencing users mnemonic passwords practices, to analyze the strength of regular passwords and to evaluate the effectiveness of mnemonic passwords. Findings revealed that users’ context, which allows the deployment of mnemonic strategies for password memorization, is prosaic in nature and susceptible to human attackers and automated tools. Commercial and corporate sites will need these findings in order to adopt effective authentication strategies for logging customers into their sites.

Data Security Measures in the IT Service Industry: A Balance between Knowledge & Action

That knowledge is power is fast becoming a cliche within the intelligentsia. Such power however, depends largely on how knowledge itself is exchanged and used, which says a lot about the tools of its transmission, exchange, and storage. Information and communication technology (ICT) plays a significant role in this respect. As a networked tool, it enables efficient exchanges of video, audio and text data beyond geographical and time constraints. Since this data is exchanged over the worldwide web (www), it can be accessible by anyone in the world using the internet. The risk of unauthorised access, interception, modification, or even theft of confidential information, leading to financial losses in information dependant competitive institutions is therefore high. Improving efficiencies through ICT therefore, comes with security responsibilities. The problem however is that most organizations tend to focus on task-enhancing efficiencies and neglect security. Possibly due to limited awareness about security, underestimating the problem, concerns about security costs, or through plain negligence. The activity theory of Engestrm and the activity analysis development framework of Mursu et al are used as analytical lenses to the cybercrime challenge in this paper. A practical case study of Company X, an IT service provider in Malawi is then used to understand the extent to which organisations that offer electronic data solutions prioritise security in their operations. It is found that even better informed organisations fall short in taking adequate data security measures. A recommendation for all organisations is that they should not only have a clear policy, but also ensure that it is routinely and consistently implemented throughout the operations if information capital is to be secured. A framework towards a holistic approach to thinking about, and in addressing cybercrime is suggested, and recommended in the paper.