Security Notifications Research Articles

Comparing Large-Scale Privacy and Security Notifications

Over the last decade, web security research has used notification campaigns as a tool to help web operators fix security problems or stop infrastructure abuse. First attempts at applying this approach to privacy issues focused on single services or vendors. Hence, little is known if notifications can also raise awareness and encourage remediation of more complex, vendor-independent violations of privacy legislation at scale, such as informed consent to cookie usage under the EU's ePrivacy Directive or the General Data Protection Regulation's requirement for a privacy policy. It is also unclear how privacy notifications perform and are perceived compared to those about security vulnerabilities. To fill this research gap, we conduct a large-scale, automated email notification study with more than 115K websites we notify about lack of a privacy policy, use of third-party cookies without or before informed consent, and input forms for personal data that do not use HTTPS. We investigate the impact of warnings about fines and compare the results with security notifications to more than 40K domains about openly accessible Git repositories. Based on our measurements and interactions with operators through email and a survey, we find that notifications about privacy issues are not as well received as security notifications. They result in lower fix rates, less incentive to take immediate action, and more negative feedback. Specific reasons include a lack of awareness and knowledge of privacy laws' applicability, difficulties to pinpoint the problem, and limited intrinsic motivation.

Simulating and Estimating the Effectiveness of Security Notification by ISP to Malware-Infected Users

In recent years, malware-infected devices, such as Mirai, have been used to conduct impactful attacks like massive DDoS attacks. Internet Service Providers (ISPs) respond by sending security notifications to infected users, instructing them to remove the malware; however, there are no approaches to quantify or simulate the performance and effectiveness of the notification activities. In this paper, we propose a model of security notification by ISPs. In the proposed model, we simulate the security notification with composite parameters, indicating the nature of malware attacks such as persistence of malware, user response ratio, and notification efforts by ISPs, and then discuss their effectiveness. Moreover, we conduct a simulation based on the actual attack.

The Occupational Panel for Germany

Abstract The occupational panel for Germany provides a comprehensive database for studying the development of occupations over time. It is based on the IAB Employment History (BeH), which contains all social security notifications that employers have to submit for their employees subject to social security and minor employees. The current version of the panel covers the years 2012–2018. Information on employees is aggregated at the occupational level such as shares by age, qualification or gender. In addition, occupational information from the expert database BERUFENET of the Federal Employment Agency, e.g. the substitution potential or the Digital-Tools Index, is prepared and merged to the occupational panel.

Low-Cost Home Security Notification System Using IoT and Telegram Bot: A Design and Implementation

Home security is a critical issue, especially for the civilians to protect their property from harm. Currently, the increase in home breaking usually occurs during school holidays and public holiday seasons. Therefore, to overcome the problem and the main objective is to design and develop a low-cost home security notification system using PIR sensor to detect movement of intruders, Raspberry Pi Camera, GPS module integrated with Raspberry Pi Zero WH to send an alert notification message with image, date, location, and time via Telegram Bot to the house owner’s and people nearby through a smart phone. The system utilizes the System Development Life Cycle (SDLC) by implementing the waterfall model as the methodology. Three experiments were conducted to examine the effectiveness of the system which is sensor detection range, response time and user acceptance test (UAT). The finding indicates that the home security notification system was efficient, effective, low-cost, and easy to use. Besides, the system can detect the presence of the intruder and send the notification message in a reasonable time. Meanwhile, the result from the UAT indicates that the proposed system has a positive impact and to be well accepted by the majority of the users. Hence, the system can help the house owners to take immediate action such as calling the neighbourhood association or police department authority when the system detects an intruder in the house.

Securing the Future of Workforce Communication: A Dynamic Alert Framework for Modern HCM Systems

The operational efficacy of contemporary organizations is increasingly predicated on the sophistication and adaptability of their Human Capital Management (HCM) systems. Within these systems, the strategic handling of information and data is paramount, particularly in the context of generating and disseminating alerts and notifications to relevant stakeholders without violating stringent data security protocols. Although current SaaS (Software as a Service) solutions for HCM offer advanced capabilities for configuring alerts and notifications in alignment with security mandates, a significant gap remains in their ability to dispatch email alerts containing sensitive data to recipients who lack the requisite security permissions within the system. This paper presents a comprehensive examination of the underlying architecture, encompassing the intricacies of security groups, service accounts, and the nuanced configuration of alerts necessary to forge a robust and secure notification framework. Furthermore, it delves into the specific tools and functionalities provided by Workday, assessing their potential to reinforce this framework and thereby augment the overall efficiency of communication channels between employees, HR, and executive management

Discovering the interplay between defensive avoidance and continued use intention of anti-malware software among experienced home users: A moderated mediation model

Dismissing or disregarding security notifications (defensive avoidance) may lead to inactive use of anti-malware, compromising the effective protection of home computers. Nevertheless, few studies have investigated the cognitive and behavioral mechanisms initiated by defensive avoidance in users. Motivated thus, we propose a moderated mediation model that depicts users’ cognitive and behavioral mechanisms initiated by defensive avoidance, as well as the moderation role of perceived vulnerability and user involvement. Our results show that perceived vulnerability and user involvement may moderate a biased cognitive mediation process between defensive avoidance and future behavioral intention.

Effects of the design of mobile security notifications and mobile app usability on users’ security perceptions and continued use intention

The explosive global adoption of mobile applications (i.e., apps) has been fraught with security and privacy issues. App users typically have a poor understanding of information security; worse, they routinely ignore security notifications designed to increase security on apps. By considering both mobile app interface usability and mobile security notification (MSN) design, we investigate how security perceptions of apps are formed and how these perceptions influence users’ intentions to continue using apps. Accordingly, we designed and conducted a set of controlled survey experiments with 317 participants in different MSN interface scenarios by manipulating the types of MSN interfaces (i.e., high vs. low disruption), the context (hedonic vs. utilitarian scenarios), and the degree of MSN intrusiveness (high vs. low intrusiveness). We found that both app interface usability and the design of MSNs significantly impacted users’ perceived security, which, in turn, has a positive influence on users’ intention to continue using the app. In addition, we identified an important conundrum: disruptive MSNs—a common approach to delivering MSNs—irritate users and negatively influence their perceptions of app security. Thus, our results directly challenge current practice. If these results hold, current practice should shift away from MSNs that interrupt task performance.

DANS: A Secure and Efficient Driver-Abnormal Notification Scheme With IoT Devices Over IoV

The vision of Internet of Vehicles (IoV) is to make the dream of zero traffic accident come true. However, the problems of drivers’ poor fitness and distraction go from bad to worse on account of the increase of chronical patients and the prosperity of mobile phones. Most of the security-related literatures aimed to offer a better efficiency, protection, or scalability on safety-related message verification, but few security protocols were suitable for the transmission of the drivers’ abnormal reports because of low latency requirement. In this paper, we propose a secure notification scheme [driver-abnormal notification scheme (DANS)] based on edge-fog computing to offer real-time response. After passing two-factor authentication, vehicles serve as the edge nodes to download and to real-time compare the sensing parameter for reducing the long-distance communication latency. By means of hash-chain-based public key cryptosystem, DANS can omit the certificate overhead to keep short latency, and also holds the benefits of driver authentication, mutual authentication, integrity for abnormal reports, conditional privacy preservation, non-repudiation, fast verification, and good scalability. Performance evaluations and simulation demonstrate that DANS earns outstanding results in terms of verification delay and communication overhead. To the best of our knowledge, this paper is the first attempt to design a notification scheme to real-time detect the driver-abnormal issues over IoV.

An IoT-based dynamic traffic management system in perspective of Bangladesh

This article presents a traffic management system that dynamically micro-manages city traffic by keeping track of the precise number of stationary vehicles at every intersection. It can be implemented quickly at a relatively low cost. Through the use of localised computing, a trilateration system, integration of internet of things (IoT) and development of an algorithm which manages the green signal timing on a per lane basis we create a system which is not only cost effective, but also provides vehicle security and public notification of citywide traffic congestion. It is capable of working in conjunction with both human driven vehicles of today as well as the self-driving vehicles of tomorrow. We simulate overall effectiveness of the system in MATLAB for worst-case scenario and have nonetheless found favourable (5-10% improvement) results.

Microcontroller Based Electronic Digital Lock with Security Notification

Due to the advancement in science and technology all over the world, there is a significant increase in the rate of crime and sophistication in crimes; as a result, it is necessary to ensure the security of one’s self and one’s valuable belongings. The main goal of this paper is aimed at creating an electronic security system capable of detecting an intruder and reporting to security personnel. The design of the microcontroller based electronic digital lock with security notification uses a four-digit pass key for its operation. The operation involves opening the door, closing the door, changing of password and alarm upon wrong password entry. It is important for use in Bank Vaults, Hotels, Offices and can also be used in our homes. The research objectives were achieved with the use of microcontroller which programs the ATMEGA328P microprocessor and interfaces it with all the other components in the circuit. In the end, the circuit was able to activate the relay switches for opening and closing the door in about three seconds, and the alarm sounds when it detects a wrong password. Comparison was made between the conventional traditional lock system and the proposed one. The distinctive feature added is the sliding door, the security notification feature and the password modification in case of a breach in security. The design fulfills the requirements of supporting conventional lock systems eliminating the use of ordinary keys shared among occupants. To demonstrate and evaluate the design, a prototype was developed. As compared to other microcontroller based digital lock, it is easy and it required less hardware. It doesn’t need additional A/D and D/A converter. We can set the password and reset it without using external device and can be easily implemented. The evaluation shows that the design works well, consumes minimal power and is able to unlock a door.Atmega328p Microcontroller was used as the main component of the project.

Currents in Contemporary Bioethics

there have been no significant amendments to the Privacy Rule since 2003. It has been the view of many covered entities, regulators, and analysts that several provisions of the original Privacy Rule were unworkable or caused unintended consequences. There-fore, the recent rulemaking provided an opportunity to correct some long-identified problems and to integrate congressional directives under the HITECH Act and GINA into the Privacy, Security, Enforcement, and Breach Notification Rules.The amendments and the regula-tory explanations are long, techni-cal, and arcane. This article focuses on two important areas of the Pri-vacy Rule with significant changes: research and genetic information. It indicates how a number of the revi-sions have failed to resolve or have exacerbated problems under the Pri-vacy Rule.