Security Practices Research Articles

Metal-organic framework-based dual function nanosystems for aluminum detoxification and plant growth in acidic soil.

Plants encounter various abiotic stresses throughout growth and development, with aluminum stress emerging as a major global agricultural challenge that hinders plant growth and limits crop yields in acidic soils. In this study, nanomaterials with dual functions, controlled release and adsorption, were constructed to alleviate aluminum toxicity. Specifically, two metal-organic frameworks, UiO-66 and ZIF-8, were used to load naphthylacetic acid and tryptophan, respectively. These two controlled-release systems were then combined with a chitosan-based matrix (NT@CS@UZ) to enable the regulated release of both compounds at distinct rates. Concurrently, the porous structure of these materials facilitates the adsorption of soluble aluminum in the plant rhizosphere. Results show that the acidic environment accelerates ZIF-8 degradation, triggering an early release of tryptophan under aluminum stress conditions. This early release promotes plant growth and alleviates stress damage. Naphthylacetic acid is subsequently released at a slower, sustained rate to stimulate root growth and further mitigate aluminum toxicity in roots. Additionally, NT@CS@UZ effectively adsorbs aluminum ions, limiting Al3+ uptake by plants and creating a low-aluminum barrier to protect roots. These dual function nanomaterials significantly boost crop yield and enhance stress resilience, presenting new avenues for food security and sustainable agricultural practices.

Hunting, fishing, and foraging in times of conflict: the implications of choosing safety in the Mississippian Central Illinois River Valley

ABSTRACT This study investigates the impact of intraregional conflict on food security and subsistence practices in the Central Illinois River Valley (CIRV) during the Mississippian period, particularly between AD 1200 and 1400, a time characterized by escalations in intergroup violence. Utilizing integrated faunal and botanical datasets from two critical archaeological sites – the Lamb site, representing the preconflict phase, and the C. W. Cooper site, indicative of the conflict onset phase – this research elucidates how prolonged warfare necessitated substantial adaptations in subsistence strategies among CIRV Mississippian communities. While much previous research has centered on elite aspects of Mississippian warfare, this study shifts the focus to the broader societal impacts on the daily lives of residents of the CIRV. Findings demonstrate significant shifts in foraging behaviors and resource utilization patterns, reflecting strategic responses to the challenges and hazards posed by persistent warfare. By highlighting the adaptability of these communities in the face of warfare and environmental stressors, this research contributes valuable perspectives to the anthropological understanding of the interrelations between warfare and food systems.

‘Social defence’ and the resilience of the domestic war on terror: A genealogy of social security, national security, and defence

Abstract Russia’s invasion of Ukraine has moved attention within International Security back to Great Power Politics and interstate war, and away from phenomena like ‘foreign terrorist fighters’ and lone actor terrorism. Is the War on Terror paradigm receding? This paper argues that counter-radicalisation imaginaries and counter-extremism programming will all remain stubbornly present despite the shift back to interstate war. The resilience of domestic War on Terror policies will stem from their integration within local municipality activity and social policy during the second decade of the 21st century. These policy areas and levels are detached from the international security community, meaning that shifts in attention at the global level will have little effect upon localised national security practices. The paper then interrogates how counterterrorism agendas have so successfully entered the world of social policy and local public administration, using genealogical methods to trace how social security and crime prevention were historically prefaced upon defence. The paper traces the policy paradigm of ‘social defence’ which dominated mid-20th century international organisations, targeting non-criminal juveniles with pre-emptive interventions to prevent ‘dangerous persons’ imperilling society. Effectively, this untold history of crime prevention in Europe demonstrates the profound interlocking of national security, social policy and defence across the 20th century, with implications for the resilience of this triad.

Exploration of Reliability and Security of E- Banking: Selected Urban Cooperative banks

The rise of E-banking has introduced unprecedented convenience and accessibility for users, transforming traditional banking operations into efficient online experiences. However, this shift brings challenges, particularly in terms of security and reliability, as users now expect robust protections for their financial data and consistent, dependable service. This study investigates the perceptions of security and reliability in digital banking among 290 urban cooperative banking customers. Using factor analysis, we explore key dimensions of e-banking services, focusing on elements like encryption, biometric security, and trust in transaction reliability. The analysis identified two primary factors: security and reliability, each with distinct contributions to overall user satisfaction. The factor loadings revealed that users had mixed confidence in encryption technologies and data privacy measures, with some expressing high levels of satisfaction, while others indicated significant concerns. Additionally, reliability emerged as a critical factor, with findings indicating that a notable portion of customers were dissatisfied with the timeliness and trustworthiness of e-banking services. For data collection, a structured survey measured responses on a five-point Likert scale, assessing variables such as trustworthiness, encryption effectiveness, privacy maintenance, and personal security practices. Through the use of descriptive and factor analysis, we quantified customer sentiments and identified patterns in user satisfaction. The results suggest that while there is moderate confidence in digital banking security, the reliability of service delivery remains an area for improvement. Banks should consider addressing these findings by enhancing transparency in their security protocols and strengthening service consistency to better meet user expectations in digital banking environments.

Optimizing API Project Efficiency: Agile Configurations, Advanced Design Patterns, and Testing Strategies

In the rapidly evolving digital era, Application Programming Interfaces (APIs) have emerged as the cornerstone of modern software development, enabling seamless communication and data exchange between disparate systems. Optimizing API project efficiency is paramount for organizations aiming to stay competitive and agile in response to market demands. This paper explores strategies for enhancing API efficiency through agile configurations, advanced design patterns, and comprehensive testing methodologies. We delve into the significance of decoupling configurations to achieve agile adaptability, discuss various API design paradigms like RESTful APIs and GraphQL, and examine their specific use cases and benefits. Additionally, we emphasize the importance of robust testing and security practices, highlighting industry-standard tools and technologies that facilitate these processes. Real-world case studies are presented to illustrate practical implementations, and the tangible improvements achieved. By integrating these advanced strategies, organizations can enhance their API performance, scalability, and maintainability, thereby delivering superior value to users and stakeholders in an increasingly interconnected world. Keywords: API efficiency, agile adaptability, decoupling configurations, RESTful API, GraphQL, API testing, microservices, API gateway, performance optimization, configuration management, API security, authentication, automated testing, real-world case studies

Assessing Employee Susceptibility to Cybersecurity Risks

This research challenges assumptions about cybersecurity risk factors, revealing that age, gender, and educational background are not significant determinants of employee susceptibility. It highlights the importance of inclusive cybersecurity training programs that cater to individuals of all age groups, dispelling the misconception that older employees are inherently less tech-savvy and more susceptible to cybersecurity threats. The findings show that cybersecurity teams within organizations significantly impact the adoption of security policies and data handling practices among employees, even though their influence on password and account security practices is limited. Organizations can adopt a holistic approach to cybersecurity training and awareness programs by leveraging these insights. This approach transcends traditional demographics and focuses on enhancing password and account security, ultimately strengthening cybersecurity postures, fostering a culture of cybersecurity consciousness, and fortifying defenses against the evolving landscape of digital threats.

Patient Health Record Protection Beyond the Health Insurance Portability and Accountability Act: Mixed Methods Study

Background The security and privacy of health care information are crucial for maintaining the societal value of health care as a public good. However, governance over electronic health care data has proven inefficient, despite robust enforcement efforts. Both federal (HIPAA [Health Insurance Portability and Accountability Act]) and state regulations, along with the ombudsman rule, have not effectively reduced the frequency or impact of data breaches in the US health care system. While legal frameworks have bolstered data security, recent years have seen a concerning increase in breach incidents. This paper investigates common breach types and proposes best practices derived from the data as potential solutions. Objective The primary aim of this study is to analyze health care and hospital breach data, comparing it against HIPAA compliance levels across states (spatial analysis) and the impact of the Omnibus Rule over time (temporal analysis). The goal is to establish guidelines for best practices in handling sensitive information within hospitals and clinical environments. Methods The study used data from the Department of Health and Human Services on reported breaches, assessing the severity and impact of each breach type. We then analyzed secondary data to examine whether HIPAA’s storage and retention rule amendments have influenced security and privacy incidents across all 50 states. Finally, we conducted a qualitative analysis of textual data from vulnerability and breach reports to identify actionable best practices for health care settings. Results Our findings indicate that hacking or IT incidents have the most significant impact on the number of individuals affected, highlighting this as a primary breach category. The overall difference-in-differences trend reveals no significant reduction in breach rates (P=.50), despite state-level regulations exceeding HIPAA requirements and the introduction of the ombudsman rule. This persistence in breach trends implies that even strengthened protections and additional guidelines have not effectively curbed the rising number of affected individuals. Through qualitative analysis, we identified 15 unique values and associated best practices from industry standards. Conclusions Combining quantitative and qualitative insights, we propose the “SecureSphere framework” to enhance data security in health care institutions. This framework presents key security values structured in concentric circles: core values at the center and peripheral values around them. The core values include employee management, policy, procedures, and IT management. Peripheral values encompass the remaining security attributes that support these core elements. This structured approach provides a comprehensive security strategy for protecting patient health information and is designed to help health care organizations develop sustainable practices for data security.

Cloud-Native ETL: Integrating Databricks and Azure Data Factory for Scalable Data Processing in Enterprise Environments

This article examines the implementation of cloud-native ETL solutions leveraging Databricks and Azure Data Factory (ADF) for scalable data processing in enterprise environments. The article presents a comprehensive analysis of the architectural design, integration strategies, and performance optimization techniques for combining Databricks' powerful data transformation capabilities with ADF's robust workflow orchestration. Through a series of case studies and empirical evaluations, we demonstrate how this integrated approach addresses the challenges of big data processing, including scalability, flexibility, and cost-effectiveness. Our findings reveal significant improvements in processing efficiency and resource utilization, with observed reductions in ETL pipeline execution times by up to 40% and overall cloud infrastructure costs by 25%. The article also highlights best practices for data governance, security, and quality management within this framework. These insights provide valuable guidance for data engineers and IT professionals seeking to modernize their data processing infrastructure and harness the full potential of cloud-native ETL solutions.

"Martyrs do not die": Politics and security in Kurdish insurgents' funerals.

Insurgents' funerals play a significant role in the conflict between Turkey and the Kurdish insurgent group PKK (Kurdistan Workers' Party) for both parties. This article examines the dual features of the insurgents' funerals. While the Kurdish population seeks to reintegrate the dead into larger narratives of the "Kurdish liberation movement" and use funerals as a site for mobilization, the regime portrays the social and political lives of the dead manifested in the funerals as a matter of security and integrates them into larger security discourses. Kurdish mayors and deputies were dismissed from office and imprisoned for organizing and attending these funerals, and even for publicly displaying grief. In this article, I demonstrate how the social and political life of the dead that survives the biological death can still remain in the language and practices of security, and argue that securitization of funerals have a broader implication of leaving no space for the Kurdish Question to exist except for the realm of security.

DevSecOps practices and tools

Nowadays, software development happens at a fast pace. At the same time, Information Technology organizations face higher demands and competition while struggling with external threats such as cyberattacks. Therefore, many organizations adopt DevOps as a working culture to improve their Software Development Lifecycle (SDL). However, the success of DevOps adoption remains inconsistent, and recently, IEEE introduced a DevOps standard that might help improve DevOps adoption. The standard mentions DevSecOps as the security aspect of DevOps, adding security practices to the SDL from inception, but what are these practices or capabilities? Which tools can be used to implement these practices? Therefore, a Multivocal Literature Review was performed to identify DevSecOps practices and their definitions, and which tools can be used to implement them.

THEORY AND PRACTICE OF REGIONAL SECURITY: UZBEKISTAN IS THE LEVER OF REGIONAL SECURITY IN CENTRAL ASIA

The article examines certain issues regarding the theory and practice of regional security. The concepts of region and regional security are defined and their main aspects are touched upon. As a result of the analysis of theoretical and practical materials, the author comes to the conclusion about the importance of regions and subjects of international law, including Uzbekistan, in ensuring regional security in Central Asia.

The Effects of Phishing Attacks on Mobile Phone Users in Tanzania: A Case of Kariakoo Market, Dar es Salaam

This study aimed at understanding phishing attacks targeting mobile phone users in Tanzania, focusing on the investigation of effects of these attacks on the mobile phone users. The study used technology threat avoidance theory as its theoretical framework. Respondents were selected using a purposive stratified sampling method to ensure diverse representation across various demographics and business sectors. A descriptive research design was employed and traders in Kariakoo market, Dar es Salaam were the target population. A sample size of 394 respondents was chosen and data obtained through structured questionnaires and in-depth interviews. Quantitative data were analyzed using SPSS, while qualitative data were examined with Deedose. The study revealed social, economic, and psychological effects of phishing attacks to mobile phone users in Tanzania. Socially, there was a noticeable decline in trust toward digital communications, leading to altered online behaviors and interactions. Economically, the effects included substantial financial losses and disruptions to business operations, impacting both individuals and organizations. Psychologically, the study found that victims experienced emotional distress, anxiety, and a heightened sense of vulnerability, prompting an increased awareness and caution regarding cyber security practices. The study concluded that phishing attacks posed significant social, economic, and psychological challenges for mobile phone users in Tanzania, with effects varying across different demographic groups. It also revealed that users' age, gender, education, and business sector influenced their susceptibility to phishing attacks, leading to diverse experiences and vulnerabilities within the population. The study recommends implementation of targeted awareness campaigns through popular communication channels, such as social media ads and television, to maximize reach and engagement, especially among younger users who are frequently online.

Revolutionizing DevOps Security: AI and ML-Enabled Automated Testing Approaches

In modern DevOps environments, the integration of security practices poses significant challenges due to the fast-paced nature of Continuous Integration/Continuous Deployment (CI/CD) pipelines. Traditional security testing methods are usually too slow and reactive to address vulnerabilities effectively in such dynamic settings. To overcome these challenges, organizations are increasingly adopting automated security testing solutions that leverage Artificial Intelligence (AI) and Machine Learning (ML). This paper discusses AI and ML capabilities in automating security testing during DevOps. It talks about how these technologies can improve security by enabling real-time threat detection, reducing false positives, and adapting to new vulnerabilities through continuous learning. Key AI/ML-based tools and techniques, along with their integration into DevOps workflows, are also discussed in detail. It also covers the integration challenges and the potential of AI/ ML in security testing in the coming years.

The effectiveness of information, education, and communication (IEC) methods on food safety and hygiene among food vendors during Ramadan

Background: During Ramadan 2023, only 4.7% of the 104 snack and food outlets in Jakarta, Indonesia, at the Cilandak District Primary Health Center met hygiene and sanitation standards. The inspections involved supervising cleanliness, implementing HACCP (Hazard Analysis & Critical Control Point), and counseling on the implementation of health and food safety practices. Purpose: To evaluate the impact of information, education, and communication (IEC) methods on food safety and hygiene practices among street food vendors during Ramadan. Method: A quantitative design with a quasi-experimental approach, an information, education, and communication (IEC) methods on food safety and hygiene for food vendors during the month of Ramadan consisting of one group. The study had two steps: first, it inspected food outlets before and after an educational intervention using a health environment inspection (eIKL PaJan) form; secondly, it tested food samples using a rapid test. Three outlets were randomly selected from each of the five sub-districts, and the data was analyzed using a paired T-test. The level of statistical significance was set at an alpha level of 0.05. Results: Fifteen "takjil" snack vendors were evaluated, and most had non-conformity scores. The highest non-conformity scores were due to hand hygiene issues and lack of knowledge about food safety. After the intervention, the mean score of knowledge about safe food handling increased from 57.5 to 75.9, with p<0.001 indicating an increase in awareness of food safety perceptions. Of the fifteen food samples tested, six showed the presence of formalin in the rapid test. However, subsequent testing at the laboratory revealed that the samples were free of formalin. Conclusion: Our study highlights a significant public health concern: enhancing awareness can bolster the safety, cleanliness, and knowledge of snack food outlet proprietors. This could positively affect the economy, human resource quality, and health through the implementation of food security practices.

The Impacts of Cyberattack on SMEs in the USA and Way to Accelerate Cybersecurity

We are at the 4th industrial revolution called industry 4.0. The world is turning from digitalization to automation. Technological advancement and adoption and utilization of changing pattern of technology is gaining the gear at all social, political, diplomatic, economic and commercial spheres including SMEs. Technological advancement is bringing speed, innovation and sophistication of products and services in SMEs in one hand and on the other hand, cyber hacking and various and changing pattern of cybercrimes are hampering the growth and development. The aim of the study is to analysis the impacts of cyberattacks on SME’s productivity, growth and development in USA and potential way to accelerate the cyber security in the area. The study is mainly based on secondary sources of data including journals, research publications, scholarly articles, thesis papers etc. The finding of the study revealed that Banking and finance, healthcare, small manufacturing firms, retailers and E-commerce, public transport and infrastructure with less than 500 employees are the most vulnerable sectors for the Cyber-attack in the USA. The most commonly practiced cyberattacks are Phishing attacks, Ransomware, Malware, DDoS attacks, MitM etc. The Study suggests a number of cyber security measures including employee awareness and training program, creation of security policy and practice, know how to distinguish between fake antivirus offer and real notification and protect OT-IT system to prevent the damage.

Users' Awareness of Cyber Security Practices for Preventing Data Attacks in Public Organisations

This study assessed users' awareness of cyber security practices for preventing data attacks. The study employed a descriptive research design and quantitative research approach. A random sampling technique was used to select a sample of 65 respondents. Data were collected through structured questionnaires. Descriptive statistics such as mean and standard deviation were used to analyse data. The validity and reliability of data collection tools were ensured. Findings revealed that the user's awareness of cyber security practices on prevention of data attacks was high in the selected case for study, which remains anonymous. The study recommends that due to the rapid changing of technology, the organisation should prevent risks from various sources, including internet-borne attacks, such as spyware or malware, user-generated weaknesses, such as easily guessed passwords or misplaced information, inherent system or software flaws and vulnerabilities and subvert system or software features.

Native Enterprise Mobile App Development: Best Practices for Security, Performance, and Scalability

This article explores best practices for developing high-quality native enterprise mobile applications, addressing security, performance optimization, scalability, seamless enterprise integration, and automated testing and compliance. With the enterprise mobile app market projected to reach $430 billion by 2024, organizations must prioritize robust development strategies to enhance operational efficiency and data security. The article discusses key techniques such as implementing strong encryption, leveraging native SDKs, adopting modular architectures, utilizing well-designed APIs, and incorporating AI-driven testing tools. By adhering to these practices, enterprises can significantly reduce the risk of data breaches, improve app performance, ensure scalability for future growth, streamline integration with existing systems, and maintain compliance with industry regulations, ultimately positioning themselves for long-term success in an increasingly mobile-first business landscape.

Security, ethics, and animals: towards a sentientist security discourse

ABSTRACT This article argues that it is high time for the (extra)ordinary violence and insecurity that nonhuman animals are subjected to in today’s world to be taken seriously in studies on security. Through a sympathetic yet critical engagement with how animals have appeared in recent posthuman security scholarship, the article insists on the need to differentiate between sentient beings on the one hand, and other beings as well as things on the other; the need to acknowledge and seek ways of eliminating the violence and insecurity internal to entangled human-animal relations; the feasibility of treating individual animals as direct subjects of security; and the feasibility of adopting a strong animal rights position grounded in sentience to supplement the relational or entanglement ethic dominant in posthuman security scholarship. The article proceeds by developing a tentative outline of a sentientist security discourse in terms of referent objects, nature of threats, security agents and security practices, and concludes by discussing some scholarly implications and the potential impact of securitising existential threats to animals.

The neuropolitical imaginaries of cognitive warfare

The concept of cognitive warfare is currently gaining ground in the policy discussion and in academic research as a way of conceptualizing the ‘weaponization of the neurosciences’. Introducing the Science and Technology Studies-inspired concept of ‘neuropolitical imaginaries’ and assessing discussions on cognitive warfare launched by the NATO Innovation Hub in 2017, this article explores how the contemporary turn to the brain sciences in defense and security reimagines politics. The article argues that seeing the human mind as increasingly vulnerable to external interference redefines the nature of human agency by giving precedence to the skilful ‘cartographer’ employing neuroscientific techniques and methods for persuasion. This emerging vulnerability of the human mind reshapes security into a zero-sum game for ‘cognitive superiority’, making brain science scholars authorities in security. Finally, speaking to the literature on security expertise and science in security, the article argues that the envisaged arms race for cognitive superiority gives rise to a neurosecurity dilemma: as the neurosciences becomes entangled with security, neuroscientific practices simultaneously arise as a core vulnerability, making their work conditional upon compliance with security practices.

A students’ behaviors in information security: Extension of Protection Motivation Theory (PMT)

ABSTRACT This study investigates information security behaviors among university students, focusing on the interplay of psychological and social factors influencing their behavioral intentions and actions. By integrating the Theory of Planned Behavior, Protection Motivation Theory, and General Deterrence Theory, the research offers a comprehensive understanding of factors such as self-efficacy, perceived risk vulnerability, response cost, and response efficacy. Utilizing structural equation modeling (SEM) and Necessary Condition Analysis (NCA), the study assesses the impact of these factors on students’ information security practices. Measurement items were developed based on recent empirical studies, ensuring relevance to the contemporary digital environment. The findings reveal significant associations between these factors and students’ security behaviors, providing insights into effective strategies for promoting information security awareness and practices. This research contributes to the academic discourse on digital security behaviors and offers practical implications for enhancing information security measures within university settings.