Security Rules Research Articles

Adapting an early autism caregiver coaching intervention for telehealth delivery in low-resource settings: A South African study of the 'what' and the 'why'.

We were busy with an early autism caregiver-coaching programme in South Africa, when COVID-19 stopped all in-person work. We changed the programme so it could be done using computers and/or phones. Here, we describe programme changes (which we call the 'what') and the reasons for those changes (which we call the 'why'). We used a tool called the Framework for Modification and Adaptations (FRAME) to describe the 'what', and the Exploration, Preparation, Implementation, Sustainment (EPIS) framework to describe the 'why' of our programme changes. The team members who helped make these changes checked that the changes described were correct. We made 10 changes in total: we used WhatsApp to deliver the programme, made simple pictures with words as visual tools for the programme, changed some session activities, changed a self-reflection checklist, provided all activities online, changed the way assessment and consent was done, made a session recording guide, sent things needed for sessions by email and WhatsApp, and made a caregiver-child play recording guide. The reasons for changes (the 'why') were about factors outside schools (the types of phones and data people had, WhatsApp security rules, COVID-19 rules), things inside schools/workplace (about the caregivers and nonspecialists themselves, ethics boards, things about the school itself), and support from people who developed the programme. Changes were made by working with things inside schools/workplace that could change. Identifying what could change helped focus and guide which changes were made to a programme.

Networking and need of complex literacy in the digital age

The digitalisation of society is a process that is constantly improving. The main reason for this is the development of contemporary technologies (Cloud Computing, Mobile Cloud, Internet of Tings, cyber-Physical Systems, Big Data, etc.) which impose new requirements on working conditions and the necessary knowledge for their use. This requires improving the digital literacy of society by expanding the knowledge and skills to use technologies and to know the need to comply with rules for information security, privacy and personal data protection. In this regard, the article discusses the problem of the need for complex literacy by adding new components to the established understanding of information (digital) literacy, covering the additional requirements for working in the global space. Based on a retrospective analysis of publications in the field of information literacy, the need for a new understanding of digital literacy is substantiated and a structure of the so-called "Complex Literacy" is proposed and the requirements for the new components "Technological Literacy" and "Security & Privacy Literacy” whit extended discussing the issues of information security, privacy and personal data protection in the digital age.

Cyber Security Controls and Countermeasures

Today's digital economy encompasses a conglomeration of devices, data, applications, and complex networks that can be hosted on-premises, in data centers or in cloud environments to support business functions. As a cybersecurity professional, you will be tasked to manage risks like cyber threats and data breaches in the workplace. The risks may emanate from the data that resides in the systems, like servers, computers or external drives and the physical assets themselves, like routers and switches. The onus is on preventing security events and limiting the damage or consequences of any event that might happen. Managing these risks in an organization can be achieved by implementing cyber security controls and countermeasures. Cyber security controls can be categorized into three distinct major groups: administrative control, physical control, and technological control. The administrative controls focus on security policies, guidelines, rules, procedures and standards designed by management to control access and utilization of confidential information. Physical control refers to a set of IT security controls deployed at the physical premise to prevent unauthorized physical access to data centres. Technical controls involve the use of systems and technical solutions to prevent security events in networks and cloud platforms. Additionally, when implementing security controls, the function of cyber security controls can be broadly divided into seven groups: directive, deterrent, preventive, compensating, corrective, detective, and recovery controls. Furthermore, security frameworks such as NIST, CIS controls COBIT, and ISO/IEC series form the cornerstone of cyber security controls and countermeasures. The aforementioned aspects will be discussed further in the later sections. For now, it is to provide a general picture of the cyber security controls and countermeasures. Keywords – Security Controls, Countermeasures, Frameworks, Information Systems, Risk

Cybersecurity in the age of IOT: Challenges and opportunities for businesses

The aim of this research is to present a thorough analysis of the intricate relationship between cybersecurity and the Internet of Things (IoT), with an emphasis on how it affects enterprises. The combination of cybersecurity and IoT in the modern digital era offers businesses both a number of benefits and a significant issue. This research sheds light on the complex interaction between these two sectors and provide useful insights that organizations may use to successfully navigate this ever-changing terrain. This study uses a comprehensive data collection methodology that involves conducting semi-structured interviews and surveys. Results suggest that a significant proportion of enterprises exhibit a sense of assurance regarding the efficacy of their cybersecurity protocols in the context of IoT implementation. This indicates a direct and positive relationship with the allocation of financial resources towards IoT efforts, hence emphasizing the significance of making strategic investments in both IoT and cybersecurity. The prominence of regulatory compliance difficulties was also highlighted, underscoring the imperative for organizations to effectively negotiate intricate privacy and security rules. The association between operational efficiency and prospects for innovation, indicating that companies that utilize the IoT to improve their operations are more inclined to foster innovation is also emphasized.

Rule-Based Threat Analysis Methodology for Cyber-Physical Systems in Healthcare

Cyber-physical system (CPS) integration in the field of contemporary healthcare has completely changed patient monitoring and management. But because these systems are linked, they are vulnerable to different kinds of cyber attacks, which calls for strong security protocols. This work aims to proactively identify and reduce possible security risks by proposing a Rule- Based Threat Analysis Methodology (RBTAM) specifically designed for CPS in healthcare environments. RBTAM uses formalized rules to methodically evaluate threats in the physical and cyberspaces. Its foundations are in discrete mathematics. The process starts with identifying the parts and vulnerabilities of the system, then rules capturing possible threat scenarios are formulated. Among the many things covered by these regulations are denial of service, hardware malfunctions, data tampering, and unauthorized access. By means of an extensive analysis process, RBTAM assesses the probability and consequences of threats found on the availability, confidentiality, and integrity of healthcare systems. Through the facilitation of the prioritization of mitigation measures, this analysis helps healthcare professionals to efficiently distribute resources and reduce possible hazards to data security and patient safety. Important elements of RBTAM are the creation of threat scenarios specific to healthcare settings, the development of security rules based on system architecture, and the incorporation of real-time monitoring systems to identify and address new threats. Furthermore, the approach stresses feedback loops for ongoing improvement, which guarantees flexibility to changing cyberthreats and technology developments. We provide a case study of RBTAM application in a simulated CPS healthcare setting to illustrate its effectiveness. Results show that by efficiently identifying and reducing possible security risks, RBTAM improves the general resistance of healthcare systems to cyberattacks. In the ever-connected healthcare environment, RBTAM provides healthcare professionals and system administrators the tools and insights they need to protect patient well-being and data integrity through a proactive and methodical approach to threat analysis in CPS healthcare.

ВИКТИМОЛОГИЧЕСКАЯ ПРОФИЛАКТИКА ПРЕСТУПЛЕНИЙ, СОВЕРШЕННЫХ С ИСПОЛЬЗОВАНИЕМ ИНФОРМАЦИОННЫХ (ЦИФРОВЫХ) ТЕХНОЛОГИЙ

The article presents the general characteristics of victimological prevention of crimes committed using in-formation (digital) technologies. The authors emphasize that the study of criminal law and criminological features of digital crime is justified and necessary at the present stage of development of society and the state. The relevance of the research is due to the fact that the modern world is more focused on the transi-tion to the digital space. And since modern crime actively uses information (digital) technologies for its criminal purposes, a law enforcement officer engaged in combating digital crimes needs theoretically grounded research on this topic. The purpose of this work is to reveal the victimological features of the prevention of certain types of digital crimes, as well as the study of criminologically significant characteristics of modern digital crime and the development on this basis of key measures aimed at preventing crimes committed in the infor-mation space. In this study, the authors focus on the basics of victimological prevention of digital crime. The article discusses what basic measures should be taken by citizens to protect themselves from becoming a victim of a digital (cyber) crime. The prevalence of the use of modern digital technologies is beyond doubt, and a person using ITT can easily become a victim of cybercrime or simply suffer due to the lack of basic rules of digital security. In this regard, the basics of victimological prevention are an important component of the prevention of digital crime. This study is intended for researchers interested in the issues of criminal law counteraction to crimes committed using information (digital) technologies.

Promoting Security Behaviors in Remote Work Environments: Personal Values Shaping Information Security Policy Compliance

Organizations worldwide face critical concerns related to cybersecurity threats and information security policy (ISP) compliance. Even though humans are the weakest link in the cybersecurity chain, information security professionals understand the importance of promoting individual information security behaviors because employees are also the first line of defense against ever-increasing cyber threats. Despite a recent trend of working from home, organizations do not make significant differences in their information security interventions for remote workers, relying mainly on VPNs as the only used tool, essentially making employees follow in-office standard information security policies because they are “virtually in-office.” Our study suggests that organizations need to recognize the unique context of remote work and consider personal motivations when shaping information security practices. Furthermore, our study indicates that in order to motivate remote employees to follow secure information security practices, organizations should consider personal characteristics instead of focusing on generic interventions. For instance, our study compares onsite and remote workers, suggesting that personal values are more relevant in remote work settings. Our findings exemplify just one of the many potential personal characteristics to be considered, highlighting how personal values are important motivators for ISP compliance and how they differ for onsite and remote workers in their importance when following information security rules.

Audit à propos des connaissances du personnel soignant en matière de la transfusion : étude multicentrique

Transfusion is an important question of daily clinical practice. Transfusion is governed by rigorous security rules. To assess the knowledge of healthcare personnel regarding transfusion. This descriptive study was carried out by an anonymous survey, with anaesthetist resident, surgery resident, interns, anaesthetist, and nurses. This study was from January 1 to February 29, 2020. It was approved by the local ethics committee. We included 196 participants. 94.9% knew that red blood cells must be stored in the refrigerator. 58.2% thought that red blood cells should be transfused within 30 minutes of warming, and 31.6% said it should be transfused within 3 hours. We found that 85% knew that fresh frozen plasma should be stored in the freeze, and 59.7% said that the frozen plasma should be thawed within 30 minutes at most and 38.3% thought that the thawing should take at least one hour. Regarding the pretransfusion bedside test, 84.4% knew that it must be done by two personnel one of whom must be a doctor. 40.8% thought that the test consists of mix a drop of patient blood and a drop of bag blood. Several insufficiencies were found. There is a necessity of launching periodic training courses focusing on the management of blood products and the transfusion procedure.

Dynamic Security Rule Optimization Based on Deep Learning and Adaptive Algorithms

Compared with traditional computer network security identification techniques, deep learning algorithms are based on their own distributed network structure for storage, processing, classification, comparison, and automatic identification functions. The distribution and dynamism of cloud databases increase the difficulty of route prediction and recognition in the cloud, affecting the efficiency of cloud computing. In response to the above issues, the author proposes a dynamic path optimization process for cloud databases based on adaptive immune grouping polymorphic ant colony algorithm. By setting up two states of ant colony, reconnaissance ant and search ant, and introducing an adaptive polymorphic ant colony competition strategy, the defect of general ant colony algorithms being prone to falling into local optima is improved; On this basis, an artificial immune algorithm with fast global search capability is further integrated to improve the search ant path optimization process, improving search speed and accuracy. Simulation experiments show that the IPANT algorithm outperforms the other three algorithms, maintaining a throughput of 1000 kbps and relatively stable; The data of OSPF, SPF, and FR are not significantly different, significantly lower than IPANT. The immune polymorphic ant colony algorithm (IPANT) has the lowest time delay for packet routing and performs better than the other three algorithms, with FR and SPF having higher latency. It has been proven that this algorithm can better solve convergence speed and global optimization problems, and can quickly and reasonably find the database to be accessed in the cloud.

Assessment of cybersecurity of organizations: An empirical study of Czech and Slovak organizations

The purpose of this research is to evaluate how companies approach cybersecurity, which measures the companies set, and how it is reflected in relation to organizational learning. A questionnaire was distributed electronically among 124 IT and IS professionals working in companies based in the Czech and Slovak Republic. Hypotheses were tested using the chi-square test of independence, the Mann–Whitney U test, and the Pearson correlation coefficient. The results depict that cybersecurity is a fundamental topic for most companies. Unless companies declare the importance of cybersecurity, they do not tend to set and use security rules unless they are not under security laws. Research shows that costs for cybersecurity are variable, not fixed, and are in correlation with the size of the company and the turnover.

Security Ontology in a Virtual University

Abstract In this paper we propose a cybersecurity ontology model designed for universities, aiming to facilitate the management and protection of sensitive data and information within the context of the growing cybersecurity threats. The proposed ontology includes four distinct hierarchical levels: the basic level, the conceptual level, the instance level and the relationships level. At the basic level, it defines essential terms and principles of cybersecurity, including concepts like vulnerability, threat, cyber-attack, security policies and security rules. At the conceptual level, the ontology categorizes information and cybersecurity systems, embracing domains such as data protection, authentication, authorization, and auditing. At the instance level, the ontology describes specific examples of information and cybersecurity systems used in universities, such as the library management system or the accounting management system. At the relationships level, the ontology establishes links between different categories of information and cybersecurity systems, as well as between these systems and the entities that use them, such as students, professors and administrative staff. By implementing this cybersecurity ontology, universities can improve the management and protection of their sensitive data and information, as well as respond more efficiently to cybersecurity threats.

Digital determinants of the technological development of economy

Methods. The general scientific approach is the basis of the analysis of prerequisites, trends and regularities of the technological development of the economy. The dialectical approach made it possible to form the general principles, factors and conditions of digital technological changes in the economy. In order to conduct bibliometric analysis, an online platform for monitoring and analyzing international scientific research using visualization tools and modern citation metrics was used, as well as tools for building and visualizing bibliometric networks VOSviewer. The application of the software made it possible to reveal the main connections between the existing concepts of data visualization and to identify new and little-researched aspects of the digital determinants of the technological development of the economy. Results. Changes in the development of the economy from Industry 1.0 to the digital ecosystem are studied. The emergence of new technologies indicates the transformation of economic systems, as well as their role as drivers of social progress. The risks arising as a result of digitalization of the economy are characterized. Due to the inept management of information flows and data, the most common problem is cyber-attacks which pose threats to national security in the critical infrastructure sector. Digital activators of technological development are identified in order to overcome the risks that arise in the process of digital transformation of the economy. The presented components will ensure the development of digital ecosystems and create the basis for compliance with the rules of digital security in the conditions of technological development. Novelty. A bibliometric review of publications with the keyword «digital technology» was carried out, which made it possible to identify scientific clusters, branch specifics of digital technologies, as well as strategic directions of digitalization. It has been proven that bibliometric analysis is an effective tool for carrying out a generalized research of published works by a certain keyword. Practical value. Digital technologies are fundamentally modifying the field of retail trade, advertising and publishing, management and marketing, as well as increasing the possibility to collect data about changes in market conditions. This modernization process affects not only the world economy, but also the new stage of industrial transformation. In recent years, almost every sphere of the economy has changed significantly under the influence of digitalization.

The Economic Consequences of Climate Risk Disclosures

ABSTRACT As the U.S. Securities and Exchange Commission (SEC) implements rules to improve and standardize climate-related disclosures among public companies and the climate change dilemma unfolds, understanding the economic implications of climate risk disclosures becomes crucial for stakeholders. This study aims to synthesize research developments in the climate risk disclosure domain to provide valuable insights into current research trends and identify potential avenues for future research. More specifically, this study identifies prior research that investigates the economic or financial effects of climate disclosures. Prior studies find both positive and negative effects of climate risk and suggest that climate disclosures may mitigate the effects of climate risk. Our review synthesizes the results of prior studies and identifies the prevailing theoretical frameworks used. Based on our assessment of the findings in prior studies, we also reveal emerging research trends and suggestions for future research. Data Availability: The data used in this research are publicly available and can be made available upon request. JEL Classifications: Q54; M41; G32; G38; Q58.

Feature Level Fusion of Fingerprints and IRIS for the Enhancement of Biometric System

Background:: With the growing need for information safety and security rules in every corner of the globe. The biometric innovation has been used widely all over the world in daily life. In this view, the Multimodal-based biometric technique has gained popularity and interest due to its capability to resolve various problems associated with single-model biometric identification systems Methods:: In this research, an advanced multimodal-based biometric recognition system is introduced, which depends on multilayer perceptron (MLP), and it identifies humans using biometric features of Fingerprints and IRIS. To build an efficient model, the popular model called Rest- Net50 was used, the gradient method was used and the hinge technique was used as a loss function. For the technique of fusion, different techniques are used to show the effect of fusion in our model. The recognition rate of introduced systems was assessed by experimenting with various techniques on SDUMLA-HMT datasets based on the multimodal biometric datasets. The recognition rate showed that merging two biometric features in biometric recognition systems gives the best results compared to a single biometric feature. Results:: The results obtained showed the superiority of our model with other existing techniques by obtaining a recognition rate of 99.79% with a feature-based fusion method. Conclusion:: The introduced system used the MLP deep learning technique. The feature level fusion was applied to recognize the user using IRIS and fingerprints. To the best of our belief, this is the first research to incorporate MLP and multimodal-based biometric systems using IRIS and fingerprints.

Minimizing the Number of Distrustful Nodes on the Path of IP Packet Transmission

One of the important directions for improving modern Wide Area Networks is efficient and secure packet routing. Efficient routing is often based on using the shortest paths, while ensuring security involves preventing the possibility of packet interception. The work is devoted to improving the security of data transmission in IP networks. A new approach is proposed to minimize the number of distrustful nodes on the path of IP packet transmission. By a distrustful node, we mean a node that works correctly in terms of hardware and software and fully implements its data transport functions, but from the point of view of its organizational subordination, we are not sure that the node will not violate security rules to prevent unauthorized access and interception of data. A distrustful node can be either a transit or an end node. To implement this approach, we modified Dijkstra’s shortest path tree construction algorithm. The modified algorithm ensures that we obtain a path that will pass only through trustful nodes, if such a path exists. If there is no such path, the path will have the minimum possible number of distrustful intermediate nodes. The number of intermediate nodes in the path was used as a metric to obtain the shortest path trees. Routing tables of routers, built on the basis of trees obtained using a modified algorithm, provide increased security of data transmission, minimizing the use of distrustful nodes.

A Lightweight Symmetric Cryptography based User Authentication Protocol for IoT based Applications

The utilization of IoT is expanding across various domains, including telecare, intelligent home systems, and transportation networks. In these environments, IoT devices generate data gathered on remote servers, requiring external users to authenticate themselves to access the data. However, existing authentication protocols for IoT must meet the crucial requirements of speed, security against multiple attacks, and ensuring user anonymity and un-traceability. The main objective of this work is to find lightweight symmetric cryptography-based user authentication protocol tailored for IoT-based applications, focusing on MIM (Man-in-the-Middle) attack prevention, enhanced anonymity, and secure communication between IoT nodes and remote servers via IoT gateways. Existing protocols often lack sufficient defenses against MIM attacks and do not adequately address the need for enhanced user anonymity and secure communication channels within the IoT framework. Our research has identified that authentication techniques based on pairing are susceptible to attacks targeting temporary session-specific data, impersonation, privileged insiders, and offline password guessing. Furthermore, using bilinear pairing in these techniques requires significant computational and communication resources to address the security as mentioned above concerns. A new authentication mechanism must be proposed and designed explicitly for IoT scenarios. The proposed approach exclusively utilizes hash and exclusive-or operations to ensure suitability within the IoT context; thoroughly evaluated the recommended protocol against existing authentication protocols, employing both informal and formal analytical routines like BAN logic, ROR model, and AVISPA simulation. Our findings suggest protocol not only enhances performance but also enhances security. The proposed approach is a tried-and-true strategy for improving security rules in practical Internet of Things (IoT) settings addressing the inherent challenges posed by authentication requirements in IoT environments. The accuracy 98.93%, and Node detection rate 46.57% were improved which is a better outcome.

A security framework to protect ePHI in Saudi Arabia's healthcare infrastructure

Today, protecting patient privacy and ensuring the accuracy and integrity of their data are the two most crucial concerns in the healthcare field. Unauthorized access or changes to patients' private health records can lead to serious issues. Moreover, if healthcare providers fail to update a patient's records quickly, it could result in dangerous, even life-threatening situations. Attacks on hospital computer systems also present a significant danger to patient care. Establishing strong security measures and procedures through cybersecurity frameworks can help protect sensitive patient information, known as electronic protected health information (ePHI). The Security Rule by Health Insurance Portability and Accountability Act (HIPAA), a well-established set of security guidelines, focuses on safeguarding ePHI held by healthcare organizations and their associates. This paper suggests creating a Data Cybersecurity Framework (DCF) specifically for the healthcare sector in Saudi Arabia. This framework aims to shield ePHI and align with the security recommendations of the HIPAA Security Rule. The development of this proposed framework involved consultations with healthcare cybersecurity experts and concentrated on the healthcare system in Saudi Arabia. The research concludes that enhancing the protection of patient information and raising public awareness requires the joint efforts of various entities, including government bodies.

Issues and Difficulties Encountered by Unorganized Sectors: An Indian Perspective

"The unorganized sector of the economy encompasses household-based production processes as well as modest and minor sectors of industry. An unstructured sector refers to an economic sector characterized by a lack of consistency in terms of profits or gains. The manufacture of this item is restricted and it can only be produced to a specific geographical location. It necessitates a reduced workforce and capital expenditure. In the unorganised sector of the Indian economy, one can see arts and crafts, artisan jobs, khadi and rural sectors, including the handcrafted industry, beehive honey production, incense stick manufacturing, handmade paper creation, and matchbox businesses. The Indian government established the National Commission for Enterprises in the Unorganised Sector (NCEUS) to act as a hub for resources for the unorganised sector. The primary goal is to improve the efficiency of small enterprises to provide a substantial amount of sustainable employment opportunities, particularly in rural regions. The Indian government has enacted laws and initiatives to support the growth of informal companies and enhance the welfare of workers in these industries. The Unorganised Workers Social Security Act of 2008 and the Unorganised Workers Social Security Rule of 2008, the Aam Admi Bheema Yojana, and the Rastriya Swasthya Bheema Yojana are the important aspects of this paper."

HHS Office for Civil Rights opens investigation into UnitedHealthcareGroup cyberattack

Last week, the U.S. Department of Health and Human Services' Office for Civil Rights (OCR) issued a “Dear Colleague” letter addressing the cybersecurity incident impacting Change Healthcare, a unit of UnitedHealthcare Group (UHG), and many other health care entities. The cyberattack is disrupting health care and billing information operations nationwide and poses a direct threat to critically needed patient care and essential operations of the health care industry. OCR enforces the HIPAA Privacy, Security, and Breach Notification Rules, which require that HIPAA covered entities – virtually all health care providers, clearinghouses, and insurance companies – protect the privacy and security of protected health information. The likelihood that substance use disorder (SUD) treatment information was included in the breach is very likely. However, OCR does not mention 42 CFR Part 2, just HIPAA. HHS views ransomware and hacking as the “primary cyber threats in health care.” There has been a 256% increase in large breaches involving hacking, and a 264% increase in ransomware, over the last 5 years, and this only includes those breaches OCR was notified of. $22 million was reportedly paid to the Change Healthcare hackers, in the form of bitcoin, likely from UHG, according to news reports. HHS OCR says: “If you believe that your or another person's health information privacy or civil rights have been violated, you can file a complaint with OCR at https://www.hhs.gov/ocr/complaints/index.html.” The one bright side of the new Part 2 rules are that OCR now enforces the regulation.

The Effectiveness of a Training Program based on Puppets Theater in developing some Social and Ethical Values among Kindergarten children in the Directorate of Private Education

This study aimed to identify the effectiveness of puppet theater in the development of some social values ​​(participation, self-reliance, etiquette, safety and security rules) and the development of some ethical values ​​(honesty, trust, altruism, benevolence, tolerance, apology). In order to achieve the aim of the study, the semi-experimental methodology was used in order to suit the objectives and nature of the study, depending on two groups, one of them is control and the other is experimental, chosen by the intentional method from the Evangelical Savior Kindergarten in Zarqa Governorate. The study revealed statistically significant differences between the mean scores of the experimental group students before applying the training program based on puppet theater (pre-test) and after applying the program in social and moral values ​​in favor of the post-test. The results showed the effectiveness of the training program based on puppet theater in developing some social values ​​by (1.44) in average scores and by (42.2%), and the effectiveness of the training program based on puppet theater in developing some social values ​​was (1.64) in mean scores. By (145%). The study recommended the necessity of including kindergarten curricula with educational activities based on Puppet Theater in order to instill some moral and social values ​​for them.