Search

Cybersecurity is quickly becoming one of the most important and potentially impactful risks to a process or refining facility. Cybersecurity solutions for electrical infrastructure can be challenging to implement because of the large number of devices that utilize a single set of passwords. The potential solutions to mitigate these risks can be expensive, inefficient, and time consuming to maintain. This article describes a case study of developing and implementing cybersecurity best practices for electrical infrastructure at a refining facility using a low-cost and low-maintenance approach. The design approach for this case study employs a centralized solution to implement role-based user access control, automated device password management, and a centralized data aggregation and human-machine interface (HMI) platform. The development of the cybersecurity best practices, design and implementation of the automation and cybersecurity platform, operations and maintenance, and lessons learned are discussed.

Password based authentication is still the most popular and dominant method of online authentication and has been the main target of malicious attacks. Password misuse due to improper management is the leading cause of data breaches leaving valuable information vulnerable. It is therefore crucial to devise systems that safely and effectively manage user online credentials. The purpose of this research is to build a password management web application with core considerations of security and usability. After survey of similar applications and tools, the system was successfully designed and implemented with express server framework of node js environment adopting standardized cryptographic functions of hashing and encryption to securely manage online credentials while enhancing usability through Google chrome extension. The implemented system was then subjected to functional and User evaluation tests to ascertain its usability and reliability. The test results showed that the system successfully achieved its set out objectives; however, with room for further improvement.

Researchers and policymakers advocate teaching children about digital privacy, but privacy literacy has not been theorized for children. Drawing on interviews with 30 families, including 40 children, we analyze children’s perspectives on password management in three contexts—family life, friendship, and education—and develop a new approach to privacy literacy grounded in Nissenbaum’s contextual integrity framework. Contextual integrity equates privacy with appropriate flows of information, and we show how children’s perceptions of the appropriateness of disclosing a password varied across contexts. We explain why privacy literacy should focus on norms rather than rules and discuss how adults can use learning moments to strengthen children’s privacy literacy. We argue that equipping children to make privacy-related decisions serves them better than instructing them to follow privacy-related rules.

Every company is a target today, no matter the type of business it does. Hackers and cybercriminals are after data which they can monetize in many ways. Being proactive and have a defensive and protective plan in place such as evaluating and assessing IT security is a great recipe for avoiding data breaches and consequently, business disasters. Passwords are the most popular authentication method, mainly because they are easy to implement, require no special hardware or software, and are familiar to users and developers. Unfortunately, most users store their sensitive information or credentials in plain-text that might be accessible to attackers. Since the information is not encrypted and stored or transferred in cleartext, attackers will be able to read it easily. Storing a plaintext password in a configuration file allows anyone who can read the file access to the password-protected resource. Developers sometimes believe that they cannot defend the application from someone who has access to the configuration, but this attitude makes an attacker’s job easier. Good password management guidelines require that a password must never be stored in plaintext. The question is why not utilizing a machine learning platform that can be trained to search text in a computer resource, detect a string of plaintext characters, and analyze the string of characters to predict or detect a plaintext password on a computer resource asset. Since plaintext passwords can be stored anywhere on a computer network, including on a computer resource asset, such as, for example, a file (for example, a configuration file), a router, a switch, a computer, a server, a database or source code, the solution can be arranged to target computer resource assets on the network and search those computer resource assets. The machine will be able to detect a plaintext password in a character string by analyzing plaintext character strings for common password complexity, such as, for example, including at least one uppercase letter, lowercase letter, number, special character, and text length (for example, minimum of eight characters). Then check the similarity of the character string against a database comprising passwords, including, for example, passwords that were previously found or identified by the solution, or passwords that were input or loaded into the database from a list, table, record, file, or a computer resource that can input passwords to the database. Also, it will predict a level of certainty that a character string includes a password and output a confidence score based on the predicted level of certainty. Finally, it will categorize the confidence score in any number of prediction certainty levels, including, for example, three levels – high, medium, or low.

A Bloom filter is a probabilistic data structure for approximate membership filtering. It is applied in diverse Network systems to enhance a system’s performance and reduce the memory consumption, for instance, Named-Data Networking, Software-Defined Networks, and Wireless Sensor Networking. Bloom filter consumes a tiny amount of RAM space to store information of large sets of data. On the contrary, the Bloom filter is unexplored in the password database. In this article, we present a novel password management system using the 3-Dimensional Bloom filter (3DBF), called PassDB which features a) low space consumption, b) irrecoverable, c) irreversible, and d) high security and strict privacy. PassDB uses twelve 3DBFs to avoid false positives. In addition, we present extremely high accuracy Bloom filter and the accuracy is 99.99% with false positives of 0.000001882. Moreover, PassDB gives utmost importance to the privacy of a user. Why should anyone be allowed to see the password (e.g., encrypted or raw password) with raw user information? This research question poses a new challenge towards the privacy of a user. This practice exploits the privacy of the users in identity management system. Therefore, PassDB imposes strict privacy for password database, i.e., no one is able to map password with a user ID.

This Case Study reports the preliminary results of a quantitative survey aimed to identify students' awareness and enthusiasm to learn cybersecurity in Nigerian Universities. The objective of the survey was to see how students in this developing country are aware of cyber-attacks and how they can mitigate the attacks and to find out if cybersecurity awareness program is part of the University program. The preliminary results indicated that the students claimed to have basic cybersecurity knowledge, but are not aware of how to protect their data. It also appears that most Universities do not have an active cybersecurity awareness program to improve students' knowledge on how to protect themselves from any threats. The surveyed students also show interest in learning more about cybersecurity.

Тема работы: «Разработка приложения для управления паролями под ОС Windows». Предметом работы является приложение по управлению паролями – программа, позволяющая пользователю надежно Ñ Ñ€Ð°Ð½Ð¸Ñ‚ÑŒ пароли и другие данные ÑƒÑ‡ÐµÑ‚Ð½Ñ‹Ñ Ð·Ð°Ð¿Ð¸ÑÐµÐ¹. В этой работе объясняется полезность такого рода программного обеспечения. Рассматриваются Ð¿Ð¾Ð´Ñ Ð¾Ð´Ñ‹ к организации Ñ Ñ€Ð°Ð½ÐµÐ½Ð¸Ñ Ð´Ð°Ð½Ð½Ñ‹Ñ Ð¿Ñ€Ð¸Ð»Ð¾Ð¶ÐµÐ½Ð¸Ñ, приводятся и сравниваются особенности ÑÑƒÑ‰ÐµÑÑ‚Ð²ÑƒÑŽÑ‰Ð¸Ñ Ñ€ÐµÐ°Ð»Ð¸Ð·Ð°Ñ†Ð¸Ð¹, выделяются отличительные черты разрабатываемого решения. Цель работы – разработать описанное решение. Решенные в Ñ Ð¾Ð´Ðµ работы задачи:1. Выделение наиболее Ð²Ð°Ð¶Ð½Ñ‹Ñ Ñ„ÑƒÐ½ÐºÑ†Ð¸Ð¹ приложения;2. Анализ ÑÑƒÑ‰ÐµÑÑ‚Ð²ÑƒÑŽÑ‰Ð¸Ñ Ñ€ÐµÑˆÐµÐ½Ð¸Ð¹;3. Разработка Ð¾ÑÐ½Ð¾Ð²Ð½Ñ‹Ñ Ñ„ÑƒÐ½ÐºÑ†Ð¸Ð¹ приложения, а именно:a. Хранение Ð´Ð°Ð½Ð½Ñ‹Ñ Ð² зашифрованном виде с использованием мастер-пароля,b. Гибкая генерация паролей,c. Анализ паролей на слабость, на факт компрометации,d. Шифрование файлов,e. Возможность импорта и экспорта;4. Разработка интерфейса, позволяющего удобно использовать эти функции. Теоретической основой выпускной квалификационной работы послужил анализ ÑÑƒÑ‰ÐµÑÑ‚Ð²ÑƒÑŽÑ‰Ð¸Ñ Ñ€ÐµÑˆÐµÐ½Ð¸Ð¹ конкурентов. Практическая часть работы выполнялась на основании документации языка программирования Java. В результате выполнения выпускной квалификационной работы был разработан программный продукт, решающий вышеописанные задачи., Topic: "Development of an application for managing passwords for the Windows OS". The subject of the work is a password management application - a program that allows the user to securely store passwords and other account data. This paper explains the usefulness of this kind of software. Approaches to the organization of application data storage are considered, the features of existing implementations are given and compared, and the distinctive features of the developed solution are highlighted. The purpose of the work is to develop the described solution.Tasks solved during the work:1. Highlighting the most important functions of the application;2. Analysis of existing solutions;3. Development of the main functions of the application, specifically:a. Storing data in encrypted form using a master password,b. Flexible password generation,c. Analysis of passwords for weakness, for the fact of compromise,d. file encryption,e. Ability to import and export;4. Development of an interface that allows user to conveniently use these functions.The theoretical basis of the final qualifying work was the analysis of existing solutions of competitors. The practical part of the work was carried out on the basis of the Java programming language documentation. As a result of the final qualifying work, a software product was developed that solves the problems described above.

Why don't individuals follow the best information security practices? We address an aspect of this question by focusing on one of the most common authentication methods – passwords. To promote better password habits, security experts consistently recommend the use of password managers as a best practice, but recent research shows their usage rate is low. Therefore, understanding the factors that influence the use of a password manager is important. We contribute to this cause by drawing on information security and technology adoption literature. Survey results from 120 participants with varying numbers of internet accounts yield some counterintuitive findings. As proposed, perceived severity and perceived vulnerability of password loss strongly influenced intent to use password managers. However, perceived ease of use diminished the intent to use password managers, and trust is only partially supported. Our results indicate that 'security' aspects of password managers are more important than 'usability' aspects. The implications of these findings for password management are discussed.

Information security awareness (ISA) has become a vital issue, as security breaches often attributed to humans lead to losses for individuals and organizations. Information security (IS) education may be an effective strategy to improve students’ ISA, however, studies associated with the relationships between teaching effects and information security learning are few. This study adopted gamification practice and examined its effect on students’ ISA knowledge enhancement, attitude and intention of security compliance, and willingness for continuous IS education. This study also examined the gender difference in a gamified learning system. One hundred ten undergraduates participated in a quasi-experimental study. The results indicated that students within a gamified class performed better than students within a lecture-based instructional group. We found significant gamification effects on the three security focus areas of password management, Internet use, and information handling. Gamification did not significantly impact the attitude and intention of participants’ security compliance and students’ willingness for continuous IS learning. Gender difference in the effect of gamification on ISA knowledge enhancement was not observed as well. The research provides theoretical and practical contributions by incorporating gamification into IS learning and suggests gamification as an effective means to enhance students’ knowledge acquisition in an engaging, timely, economical, and repeated manner.

With the rapid Internet development, the cases of cybercrime keep increasing year by year and cost hundreds of millions of Ringgits in Malaysia every year. Malaysia government organizations MyCERT and CyberSAFE aim to increase information security awareness (ISA) of the public by providing general security recommendations. The ISA of the public should be measured to provide adequate analysis of the current security awareness level among Malaysians to establish enhancement on security areas. This study concerns profiling users with a computer-based automated ISA measurement by gathering the information in the computer from 5 focus areas of security (password management, email usage, internet usage, networking usage, and information handling). The ISA profile is created based on the result of ISA measurement by successfully implemented the automated ISA measurement. The profile reflects the behavior and attitude of the user on security, which contains useful information that can be further utilized such as the user profile of recommendation system on security.

Nowadays , cloud -based technology has been enlarged depends on the human necessities in the world. A lot of technologies is discovered that serve the people in different ways of cloud -based security and best resource allocation. Cloud-based technology is the essential factor to the resources like hardware, software for effective resource utilization . The securing applications enabled security mechanism enables the vital role for cloud -based web security through the secured password. The violation of data by the unauthorized access of users concerns many web developers and application owners . Web security enables the cloud-based password management system that illustrates the data storage and the web passwords access through the "Cloud framework". Web security, End-to-end passwords , and all the browser -based passwords could belong to the analysis of web security . The aim is to enhance system security. Thus, sensitive data are sustained with security and privacy . In this paper , the proposed Password Management via cloud-based web security gets to attain . An efficient Double Layer Password Encryption (DLPE ) algorithm to enable the secured password management system . Text -based passwords continue to be the most popular method of online user identification . They safeguard internet accounts with important assets against harmful attempts on passwords. The security of passwords is dependent on the development of strong passwords and keeping them from being stolen by intruders . The proposed DLPE algorithm perceived the double - layer encryption system as an effective security concern. When the data user accesses the user Login , the OTP generates via mail /SMS , and the original message is encrypted using public key generation. Then the text of data gets doubly encrypted through the cloud framework . The private key is used to decipher the cipher text . If the OTP gets matched , the text is to be decrypted over the text data . When double encryption happens , the detection of data flaws, malicious attacks , application hackers gets reduced and the strong password enabled double-layer encryption attained the secured data access without any malicious attackers . The data integrity , confidentiality enabled password management . The ability to manage a distributed systems policy like the Double Layer Password encryption technique enables password verification for the data used to highly secure the data or information.

Inexperienced use of technology can hinder the user and prevent them from using the technology to its full potential. A lack of understanding of certain best practices can result in security issues or create undesired scenarios for unsuspecting users. In other scenarios, taking the time to learn how to use a technology can take valuable time away from productivity and there are not always systems in place to support this learning. The technical paper portion of the portfolio is a report on the effect of new login password standards released by the National Institute of Standards and Technology (NIST). As the world begins to rely more heavily on digital interactions, cybersecurity continues to grow in importance, thus necessitating secure systems. The experiment is based on a report from 2016 and updated and modified to include current relevant websites and a broader subject of data to reduce bias. The original report determined the optimal password configuration to be one with a minimum of eight characters and containing a number and a special character. However, since the release of the new NIST standards, an increasing number of login systems are switching over to using longer passwords with looser restrictions in order to reduce the risk that a password is breached or an account is hacked. These new restrictions have proven to be more successful at preventing certain types of malicious attacks due to the predictable methods most users would employ to satisfy the previous requirements. These new restrictions also allow for users to create more memorable passwords than before. The STS research paper focuses on the processes through which elementary-age children learn the knowledge of how to properly interact with and use digital technologies. With the current state of COVID-19 forcing most schools worldwide to go online, possessing the skills to operate digital technology has gone from being a luxury to almost being a necessity to obtain a basic education. Ensuring that children can properly use these technologies and understanding the process in which they do will enable engineers and general designers to create more effective technology to expedite the learning process and to build digital citizens faster than before. Through research and analyses of previous studies, it was concluded that children are reliant on certain cues that enable them to discover for themselves what a technology is capable of and how to operate it. In lieu of these cues, a teaching presence, can fill the gap in knowledge to assist the child’s learning. The STS research paper approaches the subject from the ground up by investigating the source of this branch of knowledge. The technical paper utilizes a top-down approach where users must first understand the general concept of a password and how it works before they can be expected to dive into the details to understand the best way to use this technology. By analyzing from multiple angles how learning more about a technology can result in more efficient and productive use, individual methods can be assessed and compared to each other to determine their effectiveness. Should both approaches be determined as effective, then they can both be incorporated into future projects or daily practices to promote productivity and design for broader demographics.