Security Training Research Articles

Integrative Approach in Training Future Border Guard Officers to Use Physical Force in Their Professional Activities

Objectives: This study aims to substantiate the use of an integrative approach in training future border guard officers to effectively use physical force in their professional activities, particularly considering the ongoing military aggression against Ukraine. Methods: A combination of theoretical methods (analysis, synthesis, comparison, generalization, and systematization) and empirical methods (questionnaires, interviews, observations, and pedagogical experiments) was employed to assess the current state of preparedness among future border guard officers. Results: The findings indicate that the majority of future border guard officers exhibit low to average levels of preparedness to use physical force. The implementation of an integrative training approach significantly improved the preparedness levels of the experimental group compared to the control group. Conclusion: The integrative approach, which combines physical, psychological, and legal training, is essential for enhancing the readiness of future border guard officers to use physical force effectively in their professional roles. Notably, this study introduces a novel framework for training that emphasizes the interdependence of these components, suggesting that a synergistic training model not only improves individual preparedness but also fosters a deeper understanding of the ethical and legal implications of using physical force. This holistic perspective is particularly relevant in the context of contemporary security challenges, providing a foundation for future research and practical applications in border security training programs.

Digital health data security practices among health professionals in low-resource settings: cross-sectional study in Amhara Region, Ethiopia

IntroductionProtecting digital health data from unauthorized access, alteration, and destruction is a crucial aspect of healthcare digitalization. Currently, digital security breaches are becoming more common. Healthcare data breaches have compromised over 50 million medical records per year. In Ethiopia, health digitization has grown gradually. However, there is a limitation of study in digital health security. Studying digital health data security helps individuals protect digital data as a baseline and contributes to developing a digital health security policy.ObjectiveTo assess the practice of healthcare professionals in digital health data security among specialized teaching referral hospitals in Amhara Region, Ethiopia.MethodA cross-sectional study design supplemented by a qualitative purposive sampling method was used to measure the digital data security practices of health professionals. The sample size was determined via single population proportion formula. A simple random sampling technique was used for the study participants. Then, self-administered questionnaires were administered. Multivariable logistic analysis was used to identify associated factors using STATA software. For the qualitative study, key informant interviews were used and analyzed using thematic analysis approach via open-code software.ResultsOut of the 423 health professionals, 95.0% were involved in the survey. The finding indicates digital health data security practice of health professionals working at specialized teaching hospitals were 45.0%, CI: (40, 50). Health professionals 41–45-year age group (AOR = 0.107), master’s degree (AOR = 2.45), postmaster’s degree (AOR = 3.87), time to visit the internet for more than two hours (AOR = 2.46), basic computer training (AOR = 2.77), training in digital data security (AOR = 2.14), and knowledge (AOR = 1.76) were associated with the practice of digital health data security. For the qualitative study, three teams were prepared. The findings indicate digital health data security can be improved through training, advanced knowledge and working with digital security.ConclusionThe practice of digital health data security in specialized teaching hospitals in the Amhara region was inadequate. Therefore, it can be improved through enhancing education status, increasing the time needed to visit the internet, providing computer training, and updating health professionals’ knowledge toward digital health data security.

Analysing Cyber Attacks and Cyber Security Vulnerabilities in the University Sector

Universities hold and process vast amounts of financial, user, and research data, which makes them prime targets for cybercriminals. In addition to the usual external threat actors, universities face a unique insider threat from students, who—alongside staff—may lack adequate cyber security training despite having access to various sensitive systems. This paper provides a focused assessment of the current cyber security threats facing UK universities, based on a comprehensive review of available information. A chronological timeline of notable cyber attacks against universities is produced, with incidents classified according to the CIA triad (Confidentiality, Integrity, Availability) and incident type. Several issues have been identified. Limited disclosure of attack details is a major concern, as full information is often withheld for security reasons, hindering institutions’ abilities to assess vulnerabilities thoroughly and respond effectively. Additionally, universities increasingly rely on third-party service providers for critical services, meaning that an attack on these external providers can directly impact university operations and data security. While SQL injection attacks, previously a significant issue, appear to have declined in frequency—perhaps reflecting improvements in defences—other threats continue to persist. Universities report lower levels of concern regarding DDoS attacks, potentially due to enhanced resilience and mitigation strategies; however, ransomware and phishing attacks remain prevalent. Insider threats, especially from students with varied IT skills, exacerbate these risks, as insiders may unknowingly or maliciously facilitate cyber attacks, posing ongoing challenges for university IT teams. This study recommends that universities leverage these insights, along with other available data, to refine their cyber security strategies. Developing targeted policies, strengthening training, and implementing international standards will allow universities to enhance their security posture and mitigate the complex and evolving threats they face.

A study of human factors toward compliance with organization’s information security policy

ABSTRACT While organizations increasingly rely on information technology for competitive advantage, safeguarding sensitive data hinges on more than just technical safeguards. Alarmingly, employee actions account for a growing percentage of information security breaches, highlighting the critical role of human factors. Building upon the understanding that human resources are key to maintaining organizational security, this study investigates the relationship between five key human factors security culture, awareness, training, risk perception, and reinforcement and employee compliance with information security policies. Through quantitative research, we propose and validate a conceptual framework demonstrating a significant positive association between these human factors and compliant behavior. Our findings emphasize the profound influence of security culture as a primary driver of secure practices within organizations. These insights offer practical guidance for organizations to move beyond a technology centric approach and prioritize a human centric security strategy that integrates these factors into policy design, training programs, and organizational culture.

КАДРОВЕ ЗАБЕЗПЕЧЕННЯ СОЦІАЛЬНО-ЕКОНОМІЧНОЇ БЕЗПЕКИ ПІДПРИЄМСТВА

The article examines the role of personnel support in the economic security system of an enterprise, emphasizing its importance in protecting businesses from various threats and risks. The main components of the economic security system are analyzed, highlighting the interaction of personnel support with other elements that form a comprehensive security management system. Particular attention is paid to personnel policy as a strategic direction of human resource management, defining the key principles and approaches to working with employees, as well as the factors influencing its formation.The article presents a personnel support model that includes key components such as goals, tasks, functions, and principles of personnel management to ensure economic security. The functions of personnel support are outlined, including risk assessment, personnel strategy development, employee supervision, security training, staff motivation, conflict investigation, confidential information management, and psychological state monitoring.It is noted that effective personnel support helps to reduce risks associated with the human factor and is a crucial element in ensuring enterprise stability and security. The article emphasizes the importance of the interconnection between personnel support and personnel policy in achieving the strategic goals of an enterprise and maintaining its competitiveness.

Nothing Like the Real Thing! A Randomized Field Experiment of Quasi-Mixed Reality Gamified Phishing Training

In recent years, organizations have been incorporating gamification elements and techniques into security compliance training, and research has shown positive outcomes resulting from using gamification in security compliance training. However, research has focused on training using game elements within one-time (or periodic) dedicated training sessions, where training occurs outside an employee's regular work context. Consequently, even if gamified, this ''away from the actual job'' approach may limit the ability to readily draw on earlier training and stay vigilant against phishing attacks once he/she returns to normal job duties. Contrasted with the approach used in prior research, this study proposes mixing gamified security training with the reality of day-to-day work activities, which we call quasi-mixed reality in gamified security training. Specifically, the security training proposed in this study is a several-week-long program that takes place in employees' regular work context while they perform their everyday job tasks. In a randomized field experiment, we find that employees who were randomly assigned to experience quasi-mixed reality in gamified phishing training performed better in detecting and avoiding phishing attacks than those who were assigned to a control group. In addition, we propose and articulate mindfulness of phishing as a psychological mechanism and develop a path model based on mindfulness of phishing to provide insights into how the quasi-mixed reality gamified phishing training improves employee behavior regarding phishing detection and avoidance.

Distributed Database Architectures for Federated Medical Training

Federated Learning (FL) has emerged as a promising approach for collaborative medical model training while preserving patient privacy. This research proposes the integration of FL with distributed database architectures to enable secure and efficient medical model training across diverse healthcare institutions. The approach addresses challenges such as real-time data synchronization, data heterogeneity, and low-latency model updates. Key innovations include hybrid SQL/NoSQL databases for structured and unstructured data, dynamic partitioning for improved data locality, and adaptive indexing for optimized query performance. The system incorporates secure data handling mechanisms like encryption and differential privacy, ensuring compliance with healthcare regulations. Scalability is achieved through decentralized database management, enabling broad healthcare node participation. The framework’s effectiveness is evaluated in real-world smart healthcare networks, focusing on model accuracy, query latency, scalability, and energy efficiency, with potential impacts on personalized medicine and collaborative healthcare analytics.

Determinants of the Development of Cyber-Crime Operating Within Digital Banking: The Case of Commercial Bank of Ethiopia

This study was initiated with the aim to analyze the determinants of the development of cyber-crime operating within digital banking at Commercial Bank of Ethiopia (CBE). A descriptive and explanatory survey design entertaining a mixed approach was adopted. Qualitative data was collected through administering a self-completion questionnaire distributed to 380 sample respondents. The study enjoyed a 92.1% response rate. The study focused on customers of commercial bank of Ethiopia as a target population. The convenient sampling technique was employed to include the bank's customers who were available during the study period when the researcher visited the head office. The data collected from questionnaires was analyzed using the statistical package for social science (SPSS) version 22, and the findings were interpreted based on the listed hypothesis, regression mode, descriptive and inferential statistics. The findings of the study indicated that technological advancement, lack of cyber security awareness and training, insider threats, regulatory and legal frame work and inadequate security measures are the factors that have significant effects on the development of cyber-crime at a 95% confidence level. The findings highlight the importance of investing in advanced technologies such as artificial intelligence (AI), machine learning (ML), and big data analytics, to strengthen the banks capabilities in detecting and mitigating risks in real time.

Fedrtid: an efficient shuffle federated learning via random participation and adaptive time constraint

Federated learning is a promising new distributed machine learning paradigm, where the client realizes secure and collaborative multi-user training of machine learning models by retaining private data and sharing model parameters with the server. However, with the frequent interaction of model parameters between the client and the server, the client will consume a large amount of network and arithmetic resources, and resource-constrained clients can hardly maintain model security while ensuring the efficiency of collaborative user training. Therefore, we propose FedRtid, a shuffle differential privacy federated learning scheme with random participation and adaptive time constraints, to improve the efficiency of collaborative user training while considering model privacy. First, in model training, the participating clients have the right to decide on random participation in training locally and independently, to alleviate the user’s resource constraints and reduce the time of user interaction to train the model, while adding differential noise to the shared model parameters to ensure model security. In addition, to avoid the global model security decline of server aggregation due to fewer clients participating in training, and the model accuracy decline caused by adding differential noise to all model parameters, we constructed user sparsification and adaptive time-constrained shuffle techniques to reduce the number of model parameters to which the user adds noise, and enhance the model security. Under two types of data distributions, independently and identically distributed and non-independently and identically distributed, we conduct a large number of experiments on three real datasets, and the results show that FedRtid can effectively balance the accuracy and privacy of the model.

Vulnerability Evaluation for Student Enrollment at SMKS Pandawa Bali Global Abiansemal

The development of information technology has driven the adoption of digital student enrollment systems by various educational institutions, including SMKS Pandawa Bali Global Abiansemal. The school employs the CodeIgniter 3 framework with standard configurations to enhance efficiency, transparency, and accessibility in the student admission process. However, this technological progress also introduces significant security risks, such as potential data breaches, system integrity disruptions, and damage to the school's reputation. This study aims to evaluate the security vulnerabilities of SMKS Pandawa Bali Global’s online registration system through risk analysis and penetration testing. The research methodology involves a literature review, identification of vulnerabilities, risk assessment, and formulation of recommendations. The findings reveal several critical vulnerabilities, including risks of SQL injection attacks, Cross-Site Scripting (XSS), and insecure session management. To address these issues, the study recommends implementing security measures such as deploying a Web Application Firewall (WAF), enabling multi-factor authentication, conducting regular security testing, and providing security training for staff. By adopting these measures, the school can enhance the security and stability of its enrollment system, ensuring a smoother, safer, and more reliable student registration process in the future.

Social engineering as a component of professional competence in information security of future computer science teachers

The article considers the actual problem of information security - social engineering. The authors investigate what social engineering is and its main methods, including phishing, vishing, baiting, and pretexting, and analyze the educational programs of the speciality "014.09 Secondary Education (Informatics)" regarding the availability of relevant competencies. The article analyzes data on the components of professional competencies in information security and social engineering of the leading educational institutions of the USA, the EU, and Ukrainian higher education institutions; based on the analyzed data provided in general, the relationship between training in cyber security and social engineering. The authors also explore the role of future computer science teachers in protecting students from the threats of social engineering. They note that a critical factor in this protection is teaching students to recognize and eliminate social engineering threats and how to protect their sensitive information.

Common Pitfalls in Web Server Remote Code Execution Security

The presence of Remote Code Execution (RCE) vulnerabilities on the web server poses a high risk of exploitation, compromising sensitive data. This study examines the prevalence of RCE vulnerabilities and the most common pitfalls, such as broken authentication, session management flaws, and misconfigured access controls. Recent advances include compiler-assisted encryption and deep learning-based optimizations that may help mitigate these issues. The role of educational tools in promoting secure coding practices has also been discussed and emphasized to incorporate integrated security training within development environments. However, all these advances notwithstanding, there is still an enormous gap in the adaptation of frameworks to emerging threats, which again calls for real-time threat intelligence and AI-powered detection mechanisms. This review synthesizes the existing literature and identifies future directions for closing RCE vulnerabilities through innovative, universally applicable solutions. This work aims at improving understanding and the ability to mitigate RCE vulnerabilities inside web server environments through bridging academic insights with practical applications.

Full-Time Employment: An Empirical Study of the Impact of Internet Use in Indonesia

The impact of digital transformation era by utilizing the internet has achieved job market outcomes. This study aims to analyze full-time employment probability as a result of using the internet in his work. The data used 8,436 samples from the February 2023 National Labor Force Survey microdl.hilata sorted by formal sector employment. With the analysis technique of the logistic binary regression model, several dominant determinants of the probability to work full-time were obtained. The use of the internet for promotion and marketplace affects labor market outcomes measured by working hours. Probability for workers as full-time workers by using these two things becomes greater. This study also shows that several economic variables such as income, pension security and attending training significantly have a greater effect on workers’ chances of working full-time (>40 h/week). In addition, the influence of demographic variables in the form of age, marital status and domicile of workers in Sumatra provides greater probability for full working hours.

Data Protection Strategy in Management Information Systems: Risk Analysis and Implementation

Management information system (MIS) data protection is critical and cannot be ignored, especially considering the increasing number of cyber threats and data leaks that can harm organizations. This journal discusses various data protection methods that can be used in MIS, with special emphasis on risk analysis and good implementation. In this research, we conducted a comprehensive analysis of the various threats faced by management information systems, including threats from cyberattacks, human error, and technological vulnerabilities. We also identify the components that contribute to those risks and how they impact data integrity and confidentiality. We do this using a case study approach and qualitative data collection. Additionally, the journal offers various solutions for mitigation, such as implementing strict access controls, data encryption, and security training for users. We also emphasize how important it is to have a clear information security policy and disaster recovery procedures to ensure continued operations. This research aims to assist organizations in strengthening their management information systems by providing practical, evidence-based recommendations for implementing data protection strategies. It is hoped that the results will serve as a guide for stakeholders in designing and implementing effective data protection strategies, which will increase trust and security in data management in the digital era.

A Scale Development and Application Study on Smartphone Security Awareness

This study aims to assess the extent of smartphone security awareness among students pursuing an associate degree and to ascertain if there are substantial variations in smartphone security awareness based on certain demographic variables. Furthermore, its objective is to uncover the correlation between smartphone security awareness and proficiency in digital literacy. The Smartphone Security Awareness Scale was initially designed with this particular aim. The scale comprises nine items that are measured along a single dimension, accounting for 39.6% of the overall variation. The scale’s reliability coefficient was found to be 0.78. The study sample comprised 612 associate degree students pursuing further education in two vocational colleges. The data were obtained using the internet and voluntarily. The data indicate that associate degree students had a high level of awareness regarding smartphone security. There was no significant difference in smartphone security awareness based on gender, use of security software, participation in information security training, and level of care regarding the privacy and safeguarding of personal data. No significant relationship was found between smartphone security awareness and smartphone ownership duration. However, significant differences were found according to experience of security problems and competence in using information technologies. A positive, significant, and moderate correlation was discovered between smartphone security awareness and proficiency in digital literacy. The scale devised during the investigation can be utilised in other future studies. According to the results obtained in this direction, training and seminars can be organised to increase smartphone security awareness.

Comparative Study of Information Security Awareness and Practice Within Home and Work Environments: Case Study in Libya

The abundance of information available through the internet, mobile applications, and cloud computing has made it convenient for users to access a wide range of data. However, this convenience comes at a cost, as this information is constantly at risk of being compromised by cybercriminals and hackers. While the recognition of potential information security dangers is increasing in developed countries, regions like Libya in North Africa still exhibit insufficient protection levels. The purpose of this study is to compare various factors that may influence or affect users' practices and awareness in home and work environments. Specifically, the factors investigated are policy, behavior, IT knowledge, and education. To achieve the study's goals, a quantitative methodology was employed, and a survey was created to assess the correlation between these key factors and security awareness and practices in home and workplace settings. The survey attracted 220 respondents and was analyzed using statistical methods to determine the relationship between the independent variables and the dependent variables. The results of this study indicate a moderate positive correlation between policy, IT knowledge, and education with security awareness and practice in both home and workplace environments. Only the behavior factor had a low correlation for home users. These findings indicate that the level of security awareness and practices at home and in the workplace is generally moderate. This study aims to serve as an initial step in emphasizing the importance of security training sessions for employees and highlighting the need to increase knowledge of information security. The findings are intended to inspire further research and focus on providing security information to the public, thereby disseminating new knowledge on the importance of security training and enhancing awareness of information security.

Digital Preservation and Network Security Protection: A Case Study of Landscape Painting in Ming Dynasty

In the global wave of digitalization, the digital preservation of Chinese Ming Dynasty landscape paintings has achieved remarkable results. According to statistics, major museums in China have scanned more than 60% of Ming Dynasty landscape paintings with high precision, and the digital preservation work covers a wide range. However, the accompanying cybersecurity challenges cannot be ignored either. In recent years, cyber attacks on digital platforms of cultural heritage have occurred frequently. Worldwide, the number of such attacks has exceeded 3 million every year, of which attacks on works of art account for as high as 15%. Faced with this grim situation, China has taken a series of measures to strengthen network security protection. By upgrading encryption technology, optimizing network security protection systems, and conducting regular network security training and drills, China has made remarkable progress in ensuring the security of digital works of art. According to the latest data, since the implementation of enhanced protection measures, the number of cyber attacks on the digital platform of landscape painting in Ming Dynasty in China has decreased by 35%, effectively protecting precious cultural heritage from cyber threats.

Enhancing Health, Safety, Security & Environment (HSSE) Training through Virtual Reality: An Offshore Emergency Evacuation Exercise

The offshore oil and gas industry poses unique safety challenges, particularly during emergencies such as fires, where quick and effective evacuation is critical. This paper explores the use of virtual reality (VR) technology in Health, Safety, Security, and Environment (HSSE) training, specifically through a VR exercise developed for the emergency evacuation scenario on an offshore platform at Universiti Teknologi PETRONAS (UTP). The exercise focuses on training students to safely evacuate the platform during a fire emergency, navigating through realistic escape routes while avoiding hazards. The study evaluates the effectiveness of VR in enhancing students’ situational awareness, response times, and overall preparedness for real-world emergency situations. The results demonstrate that VR-based training significantly improves understanding of evacuation procedures and decision-making under stress, offering a valuable tool for HSE education in high-risk industries.

Analisis Implementasi Chatbot sebagai Sarana Komunikasi dan Efisiensi Layanan Pelanggan terhadap Peningkatan Kinerja PT Pelindo Terminal Peti Kemas Semarang

This study aims to analyze the implementation of chatbots as a means of communication and customer service efficiency and its impact on improving the performance of PT Pelindo Terminal Petikemas Semarang. The research method used is a qualitative method with a case study approach used to examine how chatbots automate routine tasks, reduce human error, and improve operational consistency. Data were collected through in-depth interviews and direct observations with triangulation data analysis methods. The results of this study indicate that chatbots are able to provide 24/7 service, accelerate customer response, and reduce waiting times which increase customer satisfaction and loyalty. The identified constraints include system integration, data security, user privacy, employee resistance, and additional training needs. To overcome these constraints, companies can collaborate with technology vendors, cybersecurity experts, and legal consultants, as well as invest in employee training and routine performance monitoring. Based on the results above, it can be concluded that chatbot implementation can improve operational efficiency and customer service quality with the right strategy to overcome existing constraints.

Navigating Risks in the Emergency Room: A Comprehensive Review of Patient-Related Violence Against Medical Workers in Emergency Departments

Patient-related violence against healthcare workers in emergency departments (EDs) has become a growing concern worldwide, impacting the safety and well-being of medical staff, the quality of patient care, and the overall healthcare system. This review provides a comprehensive analysis of the prevalence, types, and contributing factors of patient-related violence in ED settings, including environmental stressors, patient conditions, organizational policies, and social influences. The physical and psychological impact on ED workers, such as injury, stress, burnout, and job dissatisfaction, is also explored. Furthermore, current prevention and management strategies are reviewed, including security measures, training programs, policy frameworks, and support systems. The article identifies challenges, including underreporting and research gaps, and offers recommendations for improved reporting systems, policy reforms, and targeted training to equip ED staff to handle aggressive behavior. By highlighting these key insights, this review underscores the urgent need for evidence-based interventions to protect healthcare workers in EDs and improve workplace safety and patient care outcomes.