Information Systems Security Research Articles

Model of current threats to security of confiden-tial data in divisional information systems

The paper proposes a model for determining actual threats to the information security of distributed information systems, based on algorithms of fuzzy inference and the theory of fuzzy neural systems, unlike known ones, uses sufficient and necessary indicators, excludes expert errors, increases the detection of the number of actual threats to information security of distributed systems by 5 %, reduces the cost of purchasing information protection equipment from 15 to 30%. It takes into account the following factors: the IT infrastructure of the distributed information system, the capabilities of attackers and their level of motivation in the distributed information system, the list of existing protection tools in the distributed information system.
 The proposed approach differs from existing ones in the following: lack of involvement of highly qualified specialists in the field of information security; the process is automated, has a low computational complexity; absence of deficiencies in expert assessments; allows you to determine the list of current information security threats in information systems of various classes and types.
 The task of ensuring the security of confidential information becomes the most urgent, which is due to the growth of computer attacks and leaks of information, which are reflected in the statistical data on the commission of crimes in the field of high technologies, the growth of criminal activity using modern communication devices and the Internet.
 Existing methods of modeling current threats to information security and assessing the effectiveness of the information protection system cannot be used at all stages of the life cycle of distributed information systems - they do not take into account the following indicators in the complex: IT infrastructure of distributed information systems, current threats to information security, security requirements for confidential information, a list of means of protecting confidential information and their value as important indicators when solving these problems.
 In order to achieve the goals of ensuring the security of confidential information, it is necessary to: organize the effective creation of an information protection system (information security system), effective modeling (identification of the list) of current threats to information security, identification of the current violator, and also provide the opportunity to conduct a qualitative assessment of the effectiveness of the information security (protection) system.
 One of the most important tasks of ensuring the security of confidential information is the assessment of the effectiveness of the protection (security) system. In this regard, the goal of the work (research) is to improve the quality of the evaluation of the effectiveness of the protection (security) systems of distributed information systems by determining sufficient and necessary evaluation indicators using modern (promising) information technologies that allow the most effective solution of the following tasks: determination operating parameters of adaptive production fuzzy neural systems, which are most suitable for solving the tasks, application of Data Science technologies in data processing, fuzzy output algorithms.

The Role of Digital Media on Students’ Management in Higher Vocational College

This study uses a combination of empirical analysis to conduct a comprehensive analysis of the role of digital media and student management in higher vocational colleges. The results show that the current application status of digital media in student management shows extensive and profound impact. With the rapid development of information technology, digital media has become an important tool for student management in higher vocational colleges, covering many aspects such as course management, attendance management, and student information inquiry, greatly improving management efficiency and convenience. By establishing a digital system, the school has achieved comprehensive coverage of student information management and online education. At the same time, digital media also plays an important role in students' social interaction and has become an indispensable part of students' daily lives. However, digital media applications also bring some problems. Information overload and distraction can make it difficult for students to focus, while security risks threaten student privacy. Solving these problems requires schools to take effective measures, such as improving information literacy and security awareness, and establishing a complete information security system. The impact of digital media on student development is complex and diverse. Its advantage lies in providing a broad learning space and diversified learning methods to promote students' communication and socialization. However, negative effects such as information overload and Internet addiction cannot be ignored. In order to better guide students to use digital media, schools and families need to strengthen digital media literacy education, pay attention to students' mental health, and strengthen network security. In student management, the advantages of digital media are mainly reflected in improving efficiency and interactivity, and promoting management innovation and development. However, the popularization of digital media needs to face issues such as technical and device support, security and privacy protection. By strengthening measures such as construction, training, supervision and management, schools can better leverage the advantages of digital media and improve management efficiency and service quality. Going forward, digital media will play an even more important role in student management. Intelligent management, expanding management fields and promoting student self-management will be the direction of future development. However, the security and popularity of digital media remain challenges that need to be addressed. By strengthening comprehensive measures such as construction, training, supervision and management, schools can better guide the future development of digital media in student management, provide students with more intelligent, personalized and efficient services, and promote their all-round development.

A Building Model for Enhancing Information Systems Security

Today, electronic systems and information have become no less important than food and water for human life. No one can deny this fact. Electronic information systems contribute to the development of life in many areas. But some electronic information systems should not be available for anyone to use, such as reading, operating, modifying or destroying without permission. This type of electronic information systems must be protected in some way based on the related situation. . Password-based authentication is the first defense for most information systems. Password security enhances the security of the entire information system. Therefore, password protection models become very important in such cases to help users improve authentication security. Researchers published various methods based on salting, hashing, symmetric encryption, and key splitting methods. The paper conducted by Saleh Al-Asali describes a method for generating a suitable secret key that is easy to memorize and remember, as he succeeded in generating a password that is strong and easy to remember. This paper improves the previous method by adding some improvements mentioned in the section described in the suggested method.

Testing the dominant mediator in EPPM: An empirical study on household anti-malware software users

A key research area in information systems security (ISec) is explaining or improving users’ IS security outcomes via the extended parallel process model (EPPM) lens. While the theoretical construct in emotional valence (e.g., fear) and cognitive valence (e.g., perceived efficacy) were deemed as mediators in previous EPPM-related ISec studies, existing research has ignored the value of testing and reporting the dominant mediator between the emotional valence and the cognitive valence. In this paper, we reintroduce the theoretical origins of the dominant mediator assumption in EPPM and highlight its merits using the multiple mediation method. Theoretically, we illustrate how testing and reporting the dominant mediator can help identify the dominant mechanism triggering specific behavioral outcomes. Further, this paper questions the dominant mediating role of fear on the behavioral outcome in ISec context. Methodologically, this study proposes to assess the dominant mediator via a multiple mediation model instead of using the discriminant value equation introduced by Witte (1995), Witte et al. (1996) and enhanced by Chen et al. (2021) when testing the EPPM theory in the ISec context.

The Role of Blockchain Technology in Securing Supply Chain Information Systems

This research aims to analyze the role of blockchain technology in securing supply chain information systems. The research method used involves literature study and qualitative analysis of blockchain implementation in the context of existing supply chain information systems. The research results show that blockchain technology can play an important role in strengthening the security and integrity of supply chain information systems. By using characteristics such as decentralization, transparency, and reliability, blockchain can help fight security threats such as cyberattacks, counterfeiting, and data manipulation. Through the use of blockchain, information can be secured, verified and safely accessed by stakeholders in the supply chain. Apart from that, blockchain can also increase efficiency and accountability in supply chain information systems. In conclusion, blockchain technology has significant potential in securing supply chain information systems and can contribute to increasing trust between stakeholders.

Web-based Academic Information System Security

Web-based Academic Information System (SIA) has been used by all students of the Faculty of Information Technology KH. A. Wahab Unwaha Jombang University. Because all student academic records are stored through the campus network, it is necessary to conduct research on security so that a secure system is obtained. This research was conducted with steps including analysis and testing of installed systems, analyzing needs, designing problem solutions, making repair modules, installing modules and retesting repair modules. From the results of the research conducted, it can be concluded that there are weaknesses in the login system. The weaknesses include the use of the Student Identification Number (NIM) as the default username and password, username and password data is not encrypted before being sent to the server over the network, traces of usernames and passwords left in the browser as a cache or in the password manager can be seen as unencrypted plaintext. From the security analysis results, the SIA login system can be improved by applying HMAC MD5 encryption technology and Challenge Handshake Authentication Protocol (CHAP). Challenge is generated by the server randomly and used as a key in the HMAC MD5 encryption process. With the use of challenge passwords sent in the form of hash values will always be different in each session. Javascript on the client side is used to perform encryption so that the data before being sent to the server is already in an encrypted state.

Competitiveness as a Result of Creativity and Innovation

The aim of this article is to highlight that critical thinking and creativity generate innovation that is at the core of long-term competitiveness. The creation of culture of critical thinking and creativity should start with the education system – in primary and secondary schools, then it should find its way in science and research activities of institutes and universities, and finally, it should be implemented at all business levels – with the purpose of achieving systemic innovation. It is only in the conditions of a strategic education-science-business synergy, in an environment of promoting critical thinking, creativity and innovation, that long-term competitiveness is possible, which can result in large-scale development of nations, societies and businesses. The achieved level of competitiveness should in its turn be protected against external and internal threats by introducing security measures that include the entire system of physical, technical, information and procedure security, while recognizing and protecting intellectual property and trade secrets. In terms of relevance and methodology, this article reviews existing significant challenges to innovation and competitiveness management; questions are proposed demanding further research in the field of regulations, as regards leading innovation in a global context. Conclusions are drawn about the need of strategic synergy of the priorities of state policies in the fields of science, education and business. It is stated that only coordinated long-term prioritization and planning in economy, science and education, which involves development of focused scientific research in priority sectors (industries) and creation of staff predominantly for these priority sectors of national business development, can ensure long-term competitiveness, sustainability and growth.

Method of Performing Operations on the Elements of GF(2m) Using a Sparse Table

For the implementation of error-correcting codes, cryptographic algorithms, and the construction of homomorphic methods for privacy-preserving, there is a need for methods of performing operations on elements GF(2m) that have low computational complexity. This paper analyzes the existing methods of performing operations on the elements GF(2m) and proposes a new method based on the use of a sparse table of elements of this field. The object of research is the processes of operations in information security systems. The subject of research is methods and algorithms for performing operations on elements GF(2m). The purpose of this research is to develop and improve methods and algorithms for performing operations on elements GF(2m) to reduce their computational complexity. Empirical methods and methods of mathematical and software modeling are used in the research. Existing and proposed algorithms are implemented using the C# programming language in the Visual Studio 2015 development environment. Experimental research of existing and developed algorithms was carried out according to the proposed method, which allows to level the influence of additional parameters on the results of the research. The conducted research on methods for performing operations on the elements GF(2m) shows the expediency of using a sparse table of field elements. This approach makes it possible to reduce the amount of RAM required for the software and hardware implementation of the developed method compared to the classical tabular method, which requires storage of a full table of correspondence of the polynomial and index representation of the field elements. In addition, the proposed method gives an increase in speed of more than 4 times for the operations of calculating the multiplicative inverse element and exponentiation. As a result, the proposed method allows to reduce the computational complexity of error-correcting codes, cryptographic algorithms, and the homomorphic methods for privacy-preserving.

Detection of Geographic Information System Security Hazards in the IoT Based on Network Security Situation Awareness

Abstract The geographic information system (GIS) is the important system these days for navigation and directing the routes. In order to detect the security risks of the GIS efficiently and accurately and to protect the security of the GIS, a GIS security risk detection method in the Internet of Things based on network security situational awareness has been proposed. The data preprocessing method based on the operation data of the GIS is adopted. The normalized and standardized processing of the operation data of the GIS is devised to reduce the dimensional difference between the data and the geographical areas. This will facilitate the subsequent applications of the GIS to make better decisions by preserving the security. The redundant data in the GIS operation data are removed by using feature reduction algorithms through the acquisition method. The security elements based on enhanced probabilistic neural network are inferred, and the useful data samples are obtained as the security elements detection set. A rough set theory is also used to realize geographic security hidden danger identification. The experimental results show that the proposed method is efficient to maintain security and to detect the geographic security risk detection within a short span of time. The detection result accuracy is high, which meets the GIS application requirements.

Evaluation of Governance in Information Systems Security to Minimize Information Technology Risks

Information system security within XYZ University constitutes a vital component of its IT framework, exerting significant influence over security levels across all facets of the information systems. Among the numerous implemented information system services at the university, a considerable portion lacks active security measures within operational systems. In pursuit of achieving uniform governance, this study adopts the most recent COBIT 2019 framework. The primary objective of this research is to evaluate the degree to which current information system security management aligns with the process achievement values stipulated in the COBIT 2019 standard. This evaluation entails the calculation of maturity level values that gauge performance levels in managing information system security. Findings from the COBIT 2019 Design assessment conducted at XYZ University's LTIK reveal that individuals scoring above 80 or those requiring Capability Level 4 include APO12 and BAI10. Moreover, the calculation outcomes for each subdomain reveal the presence of 2 subdomains at Level 4, 4 subdomains at Level 3, 15 subdomains at Level 2, and 19 subdomains at Level 1. The identification outcomes underscore the existence of gaps within each domain. Particularly, the APO12 and BAI10 domains exhibit a gap spanning 2 levels.

Application solutions of highway freight information systems based on quantum communication.

To improve the security of data transmission in the highway freight information system, this study is an application plan for the highway freight information system based on quantum communication. This solution is based on quantum communication technology to encrypt and transmit key sensitive data[1]; it realizes unified management of quantum keys through the quantum key cloud terminal and provides key services for the highway freight information system; it realizes access to the system through the quantum key cloud service platform. The secure use of mobile terminal quantum keys improves the overall security of the road freight information system. This scheme uses the quantum encryption key generated only once, effectively protecting the entire system's security. The quantum key management server and quantum key cloud platform defined in this plan manage terminals and quantum keys respectively, and jointly produce and distribute quantum keys with the help of other hardware facilities and software to provide secure transmission of key information.

Подходы к оценке защищённости информационных систем с криптографическим преобразованием объектов

The file system is one of the components of an information system, especially vulnerable to attacks by intruders. Consequently, it is impossible to increase the security level of an information system without ensuring a sufficient level of protection for file system objects, attacks on which affect, among other things, the interests of users of information systems. In order to make decisions on the use of certain mechanisms for protecting file system objects, a regular assessment of their current level of security is necessary. The purpose of the study. Building a model for assessing the security of an information system with cryptographic transformation of file system objects in the context of an attacker using a wide range of attacks on the file system. Materials and methods. The analysis of scientific publications on the problem of assessing the security of information systems allowed us to propose a methodology for assessing the security of information system assets. The methodology is based on a combination of a probabilistic approach to the analysis of possible scenarios for the implementation of threats in information systems for file system objects, expert assessments of basic attack events and representations in the form of attack trees. The threat implementation representation in the form of attack trees is used to simulate the actions of an attacker. Results. A structural model of an information system with cryptographic transformation of objects has been developed. Its valuable assets have been allocated. The list of the main threats to information security relevant for such systems is defined. Possible variants of the ways of implementing attacks and possible scenarios of the development of events in the processes of transferring file system objects with cryptographic transformation are modeled. A set of measures for the protection of information system objects with cryptographic transformation of objects is proposed. The calculation of the probabilities of attacks on an asset along the path determined by the attack tree, the possibility of implementing an attack, the degree of effectiveness of the proposed countermeasures is proposed. Conclusion. The presented methodology for assessing the security of an information system with cryptographic transformation of objects makes it possible to use well-known approaches in a comprehensive manner, and will be useful to developers and researchers in practical and scientific activities to ensure information security.

Implementation of Security Information & Event Management (SIEM) Wazuh with Active Response and Telegram Notification for Mitigating Brute Force Attacks on The GT-I2TI USAKTI Information System

In an era of widespread information system usage across various sectors, digital threats to organizations have become increasingly significant. These threats have the potential to disrupt operations and result in substantial financial losses. One enduring threat is brute force attacks, which exploit human tendencies to use easily remembered passwords. By utilizing The Security Lifecycle Methodology, this research aims to identify an efficient and cost-effective solution to enhance information system security and continuously evaluate the implemented solution rather than stop right after the policy or solution implementation. The study proposes the utilization of the open-source Security Information and Event Management (SIEM) platform, Wazuh. When combined with the Active Response feature, this platform not only detects security threats but also automatically takes mitigating actions against detected attacks. Additionally, the integration with the Telegram messaging application streamlines the SIEM monitoring process, making it more practical and efficient. After implementation, the testing phase confirms the effectiveness of the implemented solution as the Wazuh SIEM is able to detect 100% of brute force testing scenarios in multi- protocol attacks with an average of 80,51 seconds time required to detect brute force attacks with a 1-second interval between attack, 172,18 seconds for 10-seconds attack interval, and 434,58 seconds for 30-seconds attack interval. The active response can mitigate 100% of the detected brute force attack with only 0,51 seconds time required between detection and mitigation action taken. The implemented telegram integration successfully sends all the notifications on time to Telegram Chat by utilizing Telegram API.

Leveraging AI/ML for anomaly detection, threat prediction, and automated response

The rapid evolution of information and communication technologies, notably the Internet, has yielded substantial benefits while posing challenges to information system security. With an increasing frequency of cyber threats—from unauthorized access to data breaches—the digital landscape's vulnerability is evident. Addressing the financial impact of cybercrime, this study delves into the role of Artificial Intelligence (AI) and Machine Learning (ML) technologies in cybersecurity. Analyzing advancements and outcomes, the research explores practical techniques for anomaly detection, threat prediction, and automated response. By investigating prior research and real-world implementations, the study provides valuable insights into the potential of AI/ML, uncovering current trends, challenges, and prospects in enhancing cybersecurity tactics amid a dynamically changing threat landscape.

Quantum-safe: Cybersecurity in the age of Quantum-Powered AI

There is a lot of talk about how the cyber world will change and perceive itself as quantum computing takes center stage in the computing industry in a decade. While some are enthusiastic about the advancement of quantum technology, others remain skeptical about its application in cyberspace. But there is no doubt the interaction of artificial intelligence (AI) and quantum computing offers cybersecurity both tremendous benefits and difficulties as we navigate the digital terrain. This article explores the complex interrelationship between these two state-of-the-art technologies and how it affects information system security. In this article, we look at the possible risks that the fusion of AI and quantum computing could bring, as well as the creative ways that experts are attempting to strengthen our cyber protections, current research and future directions.

Analisis Tingkat Kematangan Keamanan Informasi Menggunakan Indeks KAMI pada Tiyuh Pulung Kencana

Everyone must adapt quickly if they don't want to be left behind due to very rapid and significant technological developments. All institutions in Indonesia must also apply information technology to expedite and make their activities more effective and fulfill their duties and functions in implementing work programs. For this reason, the role of information security is very important to maintain the confidentiality, integrity and availability of information for the public and service interests. Based on the conditions described above, it is important to carry out a SID (Village Information System) assessment to determine the maturity and completeness of data security. Tiyuh Pulung Kencana Village in Tulang Bawang Tengah District, West Tulang Bawang Regency is the object of this research. This village or Tiyuh is one of the villages that has implemented SID effectively in the implementation of the Lampung Province Smart Village Program. The Information Security Index (KAMI) is used in Tiyuh Pulung Kencana, Tulang Bawang Tengah District, West Tulang Bawang Regency, to assess the completeness and maturity of the information security system. Document analysis and interviews with related parties are the qualitative methods used. The results of the KAMI index research show that Tiyuh Pulung Kencana relies heavily on electronic systems, but steps to protect information are still just starting (only in the initial stages). Therefore, Tiyuh Pulung Kencana must improve its information security practices by creating policies and procedures that comply with IT/IS standards and resource readiness.

Single-Trace Side-Channel Attacks on NTRU Implementation

Most of the currently used cryptosystems are not secure in the presence of cryptographically relevant quantum computers. As the research in quantum technologies proceeds, a need for quantum-safe cryptography is imminent. NTRU is a post-quantum public-key cryptosystem based on lattices and was a finalist in the 3rd round of the post-quantum standardization process organized by the National Institute of Standards and Technology (NIST). This paper aims to study the implementation security of the cryptosystem with respect to an attacker with access to power leakage. Such a threat model is relevant especially, but not only, for embedded devices. We studied a countermeasure implementation of the NTRU decryption algorithm from An et al. (Appl Sci https://doi.org/10.3390/app8112014, 2018) that claimed its security against power attacks. This paper revisits an attack presented in as reported by Rabas (In: Proceedings of the9th International Conference on Information Systems Security and Privacy,ICISSP 2023, Lisbon, 2023) that shows it is in fact vulnerable even in the case of just a single trace available to the enemy for extracting the key. We then describe a new profiling template attack on the implementation and show experimental results of the attack using the same datasets, resulting in a comparison of these two methods and further confirmation of the vulnerability of the algorithm even to generic profiling attacks. Several possible types of countermeasures are discussed.

Audit Keamanan Sistem Informasi Puskesmas Dengan Standar ISO/IEC 27001:2013 Dan Framework COBIT 5

One of the problems of a company is the security of information systems. High security is needed to maintain the confidentiality and misuse of information within the organization. To improve the security of business operations and the quality of information technology resources, it is necessary to evaluate the security of existing information technology assets. Just like one of the systems at PT Infokes Indonesia, namely the Health Center Information System, this is a multi-functional application based on a web base so that it can be used by more than one user at the same time as patient recording is done electronically. The purpose of this study was to conduct a security audit of the Health Center Information System at PT. Infokes Indonesia uses ISO/IEC 27001:2013 and the COBIT 5 framework to document audit findings of information system audits at PT. Infokes Indonesia to make an audit report. Based on the results of research that has been conducted through interviews and questionnaires using the COBIT 5 framework and using the APO13 sub domain, the results show that Existing Capability is at level 1 while the expected Capability Level is at level 3 so that the Capability Gap is 2.

Investigating the acceptance intentions of online shopping assistants in E-commerce interactions: Mediating role of trust and effects of consumer demographics

Online shopping has various advantages, such as convenience, easy access to information, a greater variety of products or services, discounts, and lower prices. However, the absence of salespeople's personalized assistance decreases the online customer experience. Business-to-consumer e-commerce companies are increasingly implementing online shopping assistants (OSAs), interactive and automated tools used to assist customers without salespeople's assistance. However, no comprehensive model of OSA acceptance in e-commerce exists, including constructs from multiple information system disciplines, sociopsychology, and information security. This study aims to fill these gaps by empirically investigating consumers' intention to accept OSAs from a functional, social, relational, and security perspective. It identifies OSA acceptance factors in e-commerce through an extensive literature review and expert opinion. A research model is proposed after identifying structural relationships among the study's variables from the literature. The study employs partial least squares-structural equation modeling (PLS-SEM) to validate the proposed model empirically. The results indicate that anthropomorphism, attitude, ease of use, enjoyment, privacy, trust, and usefulness are crucial determinants of acceptance variables. There are significant moderating effects of respondents' gender and education on OSA acceptance. The study's results have substantial implications for academia, extending and validating the Technology Acceptance Model (TAM) for OSA acceptance in e-commerce. The study will help e-commerce marketers develop optimal adoption strategies when implementing OSAs on social media platforms.

Development of methods for neutralizing «Zero-day» threats

Objective. The purpose of this study is to develop and analyze methods for neutralizing «zero-day» threats in order to increase the level of cybersecurity and protection of information systems. Method. In this article, a behavioral analysis of the threat is used. The characteristic features of the zero-day exploit behavior have been studied. The threat model is based on solving the tasks of timely detection and neutralization of the threat. Result. The actual problem of information systems security - the threat of «zero-day» is considered. The review of existing neutralization methods and discussion of effective new approaches were carried out. It has been revealed that the main vulnerability is outdated threat signatures. Threat detection is based on a study of the behavior of software a comparison with the previous day tracking is possible mainly by analyzing log files taken from an automated workplace. Conclusion. The content of this work emphasizes the importance of developing methods to neutralize «zero-day» threats in order to avoid the centralized spread of vulnerability and infection of a large number of automated workplaces, which can lead to the suspension of production processes within a large enterprise.