Security Trust Research Articles

Analysis of Public Perception of the Implementation of Minister of Home Affairs Regulation Number 72 of 2022: A Quantitative Study on Digital Population Identity in Pontianak City

The Indonesian government, through Minister of Home Affairs Regulation No. 72 of 2022, introduced the Digital Population Identity (IKD) application as a step toward digital transformation in administrative services. This study aims to analyze public acceptance of the IKD application in Pontianak City using the Technology Acceptance Model (TAM) framework, focusing on the dimensions of Perceived Usefulness (PU) and Perceived Ease of Use (PEU). A survey of 467 respondents revealed that while the application is acknowledged as beneficial and relatively easy to use, a significant proportion of neutral responses in both dimensions indicates a gap between user expectations and experiences. Privacy concerns and trust in data security emerged as key challenges to technology adoption. By integrating risk and trust theories into TAM, this study finds that government transparency, data security enhancement, and digital literacy education are essential elements for building public trust. The study recommends optimizing application features, improving interface design, developing segmented communication strategies, and strengthening public outreach to establish an inclusive and reliable digital ecosystem for administrative services.

Quantum secure patient login credential system using blockchain for electronic health record sharing framework

Nowadays, most of the medical records are maintained in a digital format known as Electronic Health Records Sharing (EHRS) framework. Patients have individual login credentials for accessing these medical records. In the BCT, the information about the owner of the block and its dependency over other blocks is maintained in itself. Moreover, each block is linked with its nearby blocks, leading to a network controlled by patients responsible for storing and sharing the information. In healthcare, BCT can help with mobile health apps, monitoring equipment, sharing and keeping of clinical trial data, electronic medical records, and insurance information storage. This study proposes a secure Patient Login Credential System (PLCS) for EHRS. The proposed scheme has been included for block encryption with the symmetric and asymmetric cryptography algorithms with respect to the hospital server and patients. Additionally, the Quantum Secure Trust Protocol (QSTP) is integrated to enhance trust and security between the patient-side and hospital-side, maintaining data integrity and confidentiality. Similarly, the Tune Swarm Optimization (TSO) algorithm is utilized to optimize performance metrics. The security analysis for the proposed scheme has been evaluated with basic security assumptions for information systems like, availability, access control, maintaining forward secrecy, and maintaining data integrity. The proposed scheme demonstrated enhanced security and performance, with IDEA achieving encryption in 58 ms and decryption in 278 ms for a 512-bit block, offering the best performance in terms of encryption speed.

Implementing zero trust security models in cloud computing environments

In today’s rapidly evolving digital landscape, the adoption of cloud computing has fundamentally reshaped how organizations manage, store, and secure data. While cloud infrastructures offer scalability, flexibility, and resource efficiency, they also introduce complex security challenges. Traditional perimeter-based security models fall short in the face of these new threats, necessitating a paradigm shift towards the Zero Trust Security (ZTS) model. This model enforces strict access controls, continuous monitoring, and assumes no inherent trust within or outside the network. This paper offers an extensive exploration of Zero Trust in cloud computing environments, delving into its principles, architecture, implementation strategies, challenges, and anticipated future developments. Through a mix of theoretical discussion, technical frameworks, and real-world case studies, the study aims to provide a robust roadmap for organizations aspiring to adopt Zero Trust models in cloud infrastructures, achieving a balance between security and operational efficiency.

Zero Trust Principles in Cloud Security: A DevOps Perspective

This research introduces Zero Trust Security models integrated into DevOps workflows. The paper outlines the implementation of security controls in GCP environments and evaluates their efficacy in mitigating risks associated with modern cloud infrastructures. The rise of cloud computing has revolutionized enterprise IT environments but has also introduced new security challenges. Zero Trust principles, which advocate "never trust, always verify," have emerged as a robust framework for securing cloud infrastructure. This paper explores the integration of Zero Trust principles within the DevOps lifecycle to enhance cloud security. It highlights how DevOps practices such as continuous integration/continuous delivery (CI/CD) and infrastructure as code (IaC) can align with Zero Trust methodologies to enforce granular access controls, continuous verification, and real-time threat detection. By embedding Zero Trust within the DevOps paradigm, organizations can establish a resilient security posture that adapts to evolving threats while maintaining operational agility.

Essential factors driving the adoption of online public services among Hanoi’s citizens

This study investigates the factors influencing citizens’ intention to use online public services (OPS), focusing on perceived usefulness, trust in security, convenience, ease of use, and technological accessibility. Using a survey of 334 people in Hanoi and the PLS-SEM model, the study analyzes the impact of these factors on user intention through a series of empirical tests. The results reveal that perceived usefulness is the strongest predictor of user intention, supported by significant positive effects from trust in security and perceived convenience. Perceived ease of use shows a positive but less pronounced impact, while technological accessibility has a more minor yet significant effect. These findings align with established theories in technology adoption and provide practical implications for policymakers and service providers. To enhance the adoption of OPS, it is crucial to communicate the benefits of these services, implement robust security measures, and improve user convenience. Addressing technological accessibility is also important but should be complemented by efforts to strengthen other critical factors. This study offers valuable insights for designing and implementing effective OPS.

E-Payments and the Dynamics of Consumer Spending Habits

This research paper investigates the relationship between e-payment methods and consumer behavior. It aims to understand the intricate dynamism on how the adoption and usage of e-payment systems influence consumer spending habits and the influence of perceptions of e-payment safety and reliability on financial behavior. The study utilizes the Technology Acceptance Model (TAM) framework, a mixed-methods approach, combining quantitative surveys and qualitative interviews to gather comprehensive insights from a diverse sample of 197 consumers. The results revealed strong positive correlations between the frequency of e-payment usage and both total expenditure and the frequency of purchases. Furthermore, the study identifies a positive correlation between confidence in e-payment security and impulse buying behavior. However, a negative correlation between confidence in e-payment security and budget allocation implies a potential downside, where heightened trust in e-payment systems may lead to a lackadaisical approach towards budgeting and financial discipline. Based on the findings, it was recommended among others that, given the positive correlation found between consumer trust in e-payment security and financial discipline, it is imperative for e-payment providers to continue investing in robust security measures. Regular updates, encryption technologies, and transparent communication about security protocols can help build and maintain consumer trust.

Improving Network Security: Protection Strategies in the Digital Age

Network security is an important factor in protecting data in the digital era. Threats such as DDoS attacks and malware can damage information systems. This article discusses network protection strategies, including the use of firewalls, encryption, VPNs, and Zero Trust Security. In addition, the implementation of multi-factor authentication and user awareness are also identified as crucial mitigation measures. By utilizing technologies such as artificial intelligence, threat detection can be done more efficiently. This research aims to provide practical solutions to improve network security and reduce the risk of cyber attacks.

Multiobjective Secure Trust Aware Redundant Array Shifting Encryption and Clustering Based Routing in Mobile Ad Hoc Networks

ABSTRACTMobile ad hoc networks (MANETs) are characterized by their self‐configuring and decentralized nature in wireless networking. In MANETs, energy‐constrained devices face increased packet loss due to malicious nodes, leading to higher delays and energy consumption. Addressing this issue is crucial to improve network performance and efficiency. Therefore, to overcome these issues, a multiobjective secure trust‐aware redundant array shifting encryption adaptive sparrow search optimization (MORS‐ASO) was introduced in this manuscript for secure data transmission in MANETs. This encryption enhances security by distributing data across multiple nodes and dynamically shifting it, making it more resistant to attacks and unauthorized access. The hybrid integrated cat swarm optimization is the combination of integrated optimization algorithm and cat swarm optimization. Adaptive sparrow search optimization is applied to carry out the data transmission securely. The proposed method helps to offer security against various routing disruption attacks, genuine and hurtful attack. The MORS‐ASO achieves a packet delivery ratio of 94.3%, an end‐to‐end delay of 3.362 s, a throughput of 2952.7548 bps, and a jitter of 1.245 ms. Also, it consumes 32 joules of energy, supports a network lifetime of 3500 s, and has a packet loss ratio of 19%.

Fortifying Application Security: Integrating OAuth2 Single Sign-On with Precision Role-Based Access Control

In today's digital era, securing applications has become paramount due to the increasing sophistication of cyber threats and the proliferation of data breaches. This paper explores how integrating OAuth2 Single Sign-On (SSO) with precision Role-Based Access Control (RBAC) can significantly enhance application security. By unifying authentication and authorization mechanisms, organizations can streamline user access while mitigating risks associated with over-privileged accounts and credential fatigue. We delve into the OAuth2 protocol architecture, dissect the core components of RBAC, and present strategies for their effective integration. Through real-world case studies and comparative analyses, we highlight the benefits, challenges, and future trends of this integration. Our findings underscore the necessity for robust security frameworks that adapt to evolving threats, emphasizing the role of OAuth2 SSO and RBAC in fortifying application security. Keywords Application Security, OAuth2, Single Sign-On, Role-Based Access Control, Authentication, Authorization, Identity Providers, JSON Web Tokens, Zero Trust Security, Adaptive Authentication, Machine Learning, Identity Management, User Experience, Credential Fatigue, Cyber Threats, Access Control

Securing the cloud: A comprehensive analysis of data security challenges and solutions

Through cloud computing, organizations and individuals have access to more flexible, scalable and cost effective storage of data as well as a means to access and manage data. The problem is, however, the immense adoption of cloud computing has resulted in data security challenges across the globe. This work investigates different security problems that cloud infrastructures face such as data leaks, insider attacks, encryption problems and weaknesses related to common resources and multi-tenant models. However, cloud technology has significant benefits, and these risks must be safeguarded against with well tried and tested strategies. The principal solutions suggested to secure cloud data are advanced encryption techniques, including homomorphic and end-to-end encryption. The study also looks at the growing adoption of Zero Trust security model, where continuous authentication, least privilege access, and micro segmentation are being implemented to curtail entry by unauthorized users and data breaches. In addition, I illustrate the significance of regulatory frameworks including GDPR and HIPAA in enforcing compliance, and steering cloud service providers to uphold the highest possible security standards. This finding paves the way for cloud computing to deliver unprecedented flexibility, but exposing security challenges that will need a multidisciplinary solution. AI driven threat detection coupled with secure encryption and Zero Trust frameworks can be powerful data protection strategies for the cloud. The study, however, also highlights major gaps that need to be bridged, including developing better insider threat management, better encryption practices and clearer regulatory standards. Further research is needed for the future to investigate other technologies yet to come to be, and what they will mean for cloud data security (quantum computing to name one example). The research presents a thorough review of the security of information in the cloud, providing useful insights for cloud service providers, industry leaders and policy makers. Future research recommendations include facilitating more robust encryption techniques, adding behavioral analytics for discovering insider threat, and addressing changing risks on cloud computing environments.

A context-aware zero trust-based hybrid approach to IoT-based self-driving vehicles security

With the speedy progression and adoption of IoT devices in modern self-driving vehicles (SDVs), autonomous driving industry is gradually reforming its capabilities to provide better transportation services. However, this domain faces enormous security and privacy challenges and thus has become an attractive target for attackers due to its rapid growth and market worth. Furthermore, the rapid transformation in technological tools in transport industry and speedy evolution of cyber-attacks paved the way for designing efficient IDSs. Motivated by these challenges, we put forward a new secure and efficient IDS approach for the security of SDVs. The propose approach utilizes an emerging strategy to mitigate security vulnerabilities and cyber attacks detection using zero trust (ZT) model. Through this work, we put forward a context-aware zero trust security framework for IoT-based SDVs. The proposed framework utilizes a context-aware design to evaluate the trustworthiness of the devices using multi-source trust and reputation model. Then, to make the framework more effective and reliable, we introduce crawler system into the context of the IoT-devices in SDVs to make the system unbiased. Additionally, an observer module is developed that employs state-of-the-art machine learning algorithm to detect malicious actions. Empirical results on two standard benchmark datasets (i.e., Car Hacking and ToN_IoT) validate the practicality and robustness of propose framework in real-world transport systems with enhanced security and trust management against evolving cyber-threats. Detection results demonstrate that the proposed framework secured the best performance by achieving 99.43% and 99.52% accuracy for Car Hacking and ToN_IoT, respectively. The findings of this study will help the security professionals and researchers to comprehend the importance of ZT architecture in developing effective and robust security solutions for modern IoT-based SDVs.

Zero Trust Security: Is it Optional?

Zero Trust Architecture (ZTA) is a cybersecurity model that authenticates and authorizes every interaction between a user or device and a network. It's based on the idea that "trust is good, but control is better", and assumes that all networks and traffic could be potential threats. ZTA goes beyond the traditional "trust but verify" approach, by treating every access request as potentially dangerous and requiring a thorough check before granting access. This is regardless of the requester's identity or location. Zero Trust is a security model that assumes nothing should be trusted automatically, even within a network. It requires all users, regardless of location, to be verified and authorized before accessing resources. This is achieved through strict security measures like multi-factor authentication, advanced endpoint protection, and robust identity management. Today, people expect to access applications and data anytime, anywhere. With the rise of cloud computing and IoT, the number of connected devices and potential attack points is growing. To protect data and networks, we need a new approach. This article explains what Zero Trust is and some of its key principles.

Development of a method for protecting information resources in a corporate network by segmenting traffic

The object of the study is a corporate network with a dynamic structure and centralized management. The subject of the research is the processes of ensuring the protection of information resources in the corporate network. The goal is to develop a method of protecting information in the corporate network. The development is based on the Zero Trust Security strategy, according to which access to the network is allowed only after verification and identification of information. The task is to develop an effective method of protecting information resources and managing cyber security in the corporate network, taking into account the complex aspects of malicious influence. The following results were obtained. It is shown that the complex, diverse presentation of information in the network requires a comprehensive approach with the division of mixed content of information into segments according to the target orientation. Based on CISA's (Cybersecurity and Infrastructure Security Agency) Zero Trust Maturity Model, a method of targeted traffic segmentation is proposed. It allows detailed analysis of the interaction between applications, users and corporate network infrastructure, which increases the level of complex threats detection by 15 %. A method of protecting information resources of a socio-cyber-physical system is proposed, which, based on the principle of the Zero Trust Security strategy, improves the monitoring and management of cyber security of information resources by taking into account social aspects. This allows to detect and respond to threats in real time and adapt security policies according to the dynamics of user behavior and general security conditions. Integrating analytical methods and modern technologies into a security strategy creates a foundation for adaptive and resilient cyber defense.

A Study on Cybersecurity Challenges and Strategies in a Digitally Transformed Business Environment

In this era of digital transformation businesses are facing a rapidly changing cybersecurity landscape with new technologies, expanded attack surfaces and advanced threats. This article looks at the many cybersecurity challenges that arise from integrating advanced technologies like cloud, IoT and AI into business. The challenges are expanded attack surfaces, system complexity, data privacy and regulatory compliance and advanced threats. The article looks at the solutions to these challenges including Zero Trust architecture, layered security, advanced threat detection, incident response and security awareness training. plus real world case studies of how these solutions are being used and what’s coming next with emerging technologies and regulations. By addressing these challenges with a comprehensive approach businesses can strengthen their cybersecurity, protect their data and be resilient in a digital world. KEYWORDS Cybersecurity Challenges ,Digital Transformation, Cyber Threats ,IT Infrastructure ,Zero Trust Security ,Threat Detection ,Incident Response, Data Protection ,Regulatory Compliance Employee Training, Advanced Security Technologies, Cloud Security, Network Security

AI-optimized elliptic curve with Certificate-Less Digital Signature for zero trust maritime security

The proliferation of sensory applications has led to the development of the Internet of Things (IoT), which extends connectivity beyond traditional computing platforms and connects all kinds of everyday objects. Marine Ad Hoc Networks are expected to be an essential part of this connected world, forming the Internet of Marine Things (IoMaT). However, marine IoT systems are often highly distributed, and spread across large sparse areas which makes it challenging to implement and manage centralized security measures. Despite some ongoing efforts to establish network connectivity in such environment, securing these networks remains an unreached goal. The use of Certificate-Less Digital Signatures (CLDS) with Elliptic Curve Cryptography (ECC) shows great promise in providing secure communication in these networks and achieving zero trust IoMaT security. By eliminating the need for certificates and associated key management infrastructure, CLDS simplifies the key management process. ECC also enables secure communication with smaller key sizes and faster processing times, which is crucial for resource-limited IoMaT devices. In this paper, we introduce CLDS using ECC as a means of securing IoT networks in a marine environment, creating a zero trust security framework for Internet of Marine Things (IoMaT). To increase security and robustness of the framework, we optimize the ECC parameters using two vital artificial intelligence algorithms, namely Genetic Algorithm (GA) and Particle Swarm Optimization (PSO). Evaluation results demonstrate a reduction in ECC parameter generation time by over 40% with GA optimization and 20% with PSO optimization. Additionally, the computational cost and memory usage for major ECC attacks increased significantly by up to 40% and 67% for Rho attacks, 34% and 53% for brute-force attacks, and 30% and 67% for improved hybrid attacks, respectively.

Defending Against Modern Web Attacks: Strategies for Safeguarding User Identities and Data

Abstract: Organizations must adopt a comprehensive approach to safeguard user identities and sensitive data in the face of increasingly sophisticated web-based attacks. This article presents a multi-faceted strategy for defending against modern web threats, addressing key aspects such as phishing prevention, secure authentication mechanisms, protection against cross-site scripting (XSS) and cross-site request forgery (CSRF) attacks, browser and endpoint security, web application security best practices, and the implementation of a Zero Trust security model. By examining the current landscape of web-based threats and providing actionable recommendations, this article aims to empower organizations with the knowledge and tools necessary to combat evolving cyber threats effectively. The proposed defensive measures encompass user awareness and education, robust technical controls, secure coding practices, and adopting technologies such as multi-factor authentication, biometric authentication, web application firewalls, and browser isolation techniques. Additionally, the article emphasizes the importance of a proactive approach to incident response and threat intelligence, enabling organizations to swiftly detect, contain, and mitigate web-based attacks. By implementing these strategies, organizations can significantly enhance their resilience against modern web threats, safeguarding user identities, protecting sensitive data, and maintaining a secure online presence in an increasingly hostile digital environment

Defense in Depth Strategies for Zero Trust Security Models

The groundbreaking Zero Trust Security Model challenges perimeter-based protections in cybersecurity. As cyber threats become more sophisticated, corporations are embracing the Zero Trust philosophy of "never trust, always verify." Whether from within or outside the network, this paradigm imposes rigorous access rules and continual authentication. Zero Trust is a strong security foundation, yet it has drawbacks. The Zero Trust paradigm is enhanced by Defense in Depth, which layers several security methods to safeguard assets. This article examines how the Zero Trust Security Model might include Defense in Depth methods for a complete, robust, and adaptable security architecture. Zero Trust requires all users and devices to be verified, approved, and continually vetted before accessing resources, eliminating implicit trust. A typical method employed by attackers after breaching the perimeter is lateral movement inside the network, which this approach mitigates well. However, Defense in Depth—deploying numerous, redundant security measures throughout the IT environment—is a proven method. Defence in Depth and Zero Trust may be combined to strengthen access restrictions, detection, response, and recovery.

Exploring College Students’ Perceptions of Privacy and Security in Online Learning: A Comprehensive Questionnaire-Based Study

The rapid shift to online learning has intensified concerns about privacy and security among college students. This study aims to examine these perceptions and identify strategies to enhance user satisfaction and trust. The study’s novelty lies in exploring the impact of collaborative efforts between educational institutions and technology providers on improving online learning experiences. The research objectives are to examine how transparency influences trust in security, investigate the relationship between data control and perceived privacy, and identify strategies to improve user satisfaction and trust. A quantitative approach utilizing an analytic research design and a questionnaire method was employed, targeting 420 college students engaged in online learning. Data analysis was conducted using SPSS software. Findings supported six hypotheses: higher transparency in data handling leads to increased trust (H1, H4); more control over personal data correlates with greater perceived privacy and security (H2, H3, H5); and collaborative efforts enhance user satisfaction and trust (H6). Specifically, 71% of participants agreed that increased transparency would enhance trust, and participants emphasized the importance of data control for privacy protection and user empowerment. Collaborative strategies, such as robust feedback mechanisms and comprehensive support services, were identified as crucial for improving user satisfaction and trust. Regression analysis indicated significant relationships between transparency, data control, digital literacy, and user satisfaction. This study underscores the importance of transparency, data control, and collaboration in fostering a secure and trustworthy online learning environment, offering valuable insights for policymakers and educators.

Emerging Authentication Technologies for Zero Trust on the Internet of Things

The large and interconnected nature of the Internet of Things (IoT) presents unique security challenges, even as it revolutionizes various sectors. With numerous devices, often limited in resources, traditional perimeter-based security methods struggle to keep pace. The “never trust, always verify” principle of zero trust security offers a viable solution. Zero trust security is a concept that has become increasingly popular, using key exchange techniques to ensure secure and authenticated communication within the network, especially in managing risks in critical infrastructure. Authentication is a process to identify an entity, a prerequisite for authorization, and essential for granting access control. It fundamentally relies on trust management and various methods to generate and manage cryptographic keys for authentication. The aim of this study is to enhance zero trust security in the context of the Internet of Things by investigating authentication methods and discussing several potential solutions for successful implementation. This study also presents the performance evaluation criteria for authentication in IoT and introduces advanced approaches for different scenarios, including lightweight cryptography, mutual authentication, and blockchain technology. Finally, we address challenges related to implementation and future directions for research.

Exploring Consumer Preferences and Behaviour Toward Digital Payment Gateways in India

This study explores consumer behaviour and preferences towards digital payment gateways in India, focusing on the factors that drive consumer choices and satisfaction. A structured survey with a stratified random sample of 1,000 respondents across India was conducted between January and April 2024. The study is grounded in three hypotheses, testing the differences in perceived convenience, trust in security, and the impact of cashback and rewards on consumer recommendations for digital payment platforms such as Phone-Pe, Google Pay, and Paytm. Statistical analyses were used to scrutinize the data, including ANOVA, chi-square tests, and Pearson’s correlation. Key findings indicate significant differences in convenience and trust levels among platforms, with convenience and rewards strongly correlating with consumer recommendations. The results suggest that enhancing convenience and security perception alongside attractive reward schemes can significantly influence consumer adoption and loyalty. Although this study offers useful information for stakeholders seeking to optimize digital transactions in emerging markets, it also has significant implications for complex preferences in Indian digital payment systems. The implications of these findings extend to the strategic development of tailored and consumer-friendly digital payment solutions. Furthermore, this study emphasizes the need for continuous innovation in digital payment technologies to better meet consumers' evolving demands. Implementing robust security measures and user-centric design can help build trust and simplify the payment process, thereby increasing user engagement and satisfaction. This research adds to the existing body of knowledge on digital payment preferences and provides a solid foundation for future strategic developments in this rapidly growing field.