Search

This article details an attempt to bridge the gulf between information technology (IT) and social science approaches to cybersecurity using a simulation. Digital affairs are increasingly central to public policy, and yet the subject's incorporation within political science education has been hamstrung by an underlying disciplinary divide and lack of familiarity. Despite their differences, both IT and political science have strong traditions of utilizing active learning methods and simulation to achieve learning outcomes. Drawing on this shared pedagogy, we created an interdisciplinary simulation that leverages elements of digital forensics to provide students with a unique, active learning experience of responding to a national cybersecurity crisis. The simulation was fielded during an intermediate level class on cyber conflict and generated an overwhelmingly positive response. Students credited the exercise with helping them better understand the unique characteristics of cyberspace as a geopolitical domain and appreciated how the lack of an IT background was not a barrier to addressing cyber policy issues. [ABSTRACT FROM AUTHOR]

This study addresses the growing need to strengthen information security strategies in Ecuador's public institutions, emphasizing the critical role of data protection in the context of digitization. Through a systematic literature review, current security practices, cybersecurity maturity, training programs, and adoption of emerging technologies are examined. The findings reveal significant challenges in the effective implementation of security policies, highlighting the gap between the formulation of regulatory frameworks and their practical application, along with limitations in resources and training. In addition, the importance of fostering an organizational culture of cybersecurity and the need to advance digitization are identified as key elements for improving institutional resilience. The research suggests that the effectiveness of cybersecurity training programs depends on their customization and the inclusion of practical elements. Finally, it is concluded that it is essential to improve the clarity and effectiveness of information security legislation to strengthen trust in public institutions and ensure robust data protection in Ecuador. [ABSTRACT FROM AUTHOR]

Introduction: The relevance of the study is underscored in response to the need for innovative tools to counter hybrid threats in the field of information security. Methodology: The study's methodological approach is described, highlighting the application of methods such as analysis, systematization, and comparison. The use of these methods is emphasized in conducting a comprehensive comparative analysis of information security strategies in Ukraine, Kazakhstan, and the European Union. Results: It is emphasized that the study's results provide a detailed insight into the current state of information security in the analyzed countries. It is specifically mentioned that recommendations for the development of information security communication strategies are a tangible outcome of the research. Conclusions: The conclusion highlights the importance of developing or enhancing information security communication strategies in the countries under study. It is suggested that these strategies can serve as an effective countermeasure against hybrid warfare and enemy attacks, thereby strengthening cybersecurity and responsiveness. [ABSTRACT FROM AUTHOR]

The article presents the state of the art and methodology of the doctoral research project "Framework for modeling and simulation of maritime cyberdefense - MARCIM". The state of the art defined the background of the research problem, the state of scientific activity, trends and challenges related to MARCIM: cyberdefense, modeling and simulation in cyber security and cyberdefense; and maritime cybersecurity and cyberdefense. The methodology was established with a focus on modeling complex systems, by phases and application actors. The article mainly concludes that maritime cyberdefense at a strategic level behaves like a complex system, with dynamics, processes and elements that cannot be clearly identified, which require modeling and simulation, with a metaheuristic approach, to study the set of actions and interactions between its entities. [ABSTRACT FROM AUTHOR]

Financial Management Information Systems (FMIS) are essential for efficient and transparent management of financial resources in the public sector. Due to the scarcity of publications on this topic in Colombia, this article aims to provide a contribution to academia and professionals who work in public finance by examining the importance of systems such as SIIF, CHIP, SIRECI, ÉPICO, SIA Observa, the DNP Investment Map, and the new PIIP platform, among others. Topics such as Smart Public Management (SPM), digital government, the fight against corruption, interoperability, cybersecurity, artificial intelligence (AI) and public marketing are also addressed. The research used an interpretative perspective, based on a theoretical, documentary, descriptive and purposeful type. It also used a qualitative and quantitative approach, which included the application ofa survey as an instrument of data collection. At the end of the article, the challenge of improving the interoperability and security of FMIS in the Colombian State is raised, highlighting the importance of training officials in information and communication technologies (ICT), as well as promoting websites and platforms related to state public finances to strengthen transparency and encourage citizen participation. [ABSTRACT FROM AUTHOR]

Concepts of ‘cyberspace’, ‘cybersecurity’ and ‘cyberthreats’ and an analysis of policy documents are employed to explore the character and evolution of cybersecurity policies in Mexico, Colombia and the Dominican Republic, chosen as examples of ‘accelerated’, ‘transitional’ and ‘lagging’ Latin American development. Mexico focused on the stability of the Internet as a space that contributes to faster economic growth. Columbia’s ‘risk management’ path seeks a balance between plausible threat evaluation and the estimated cost of eliminating them and concentrates on the active prevention of cyberattacks, emphasising the importance of developing concrete mechanisms for international regulation in the field of cybersecurity. The approach to cybersecurity of the Dominican Republic is based on the idea of ensuring a rapid transition to an innovative development model with the widespread introduction of information and communication technology (ICT), while addressing domestic cybercrime to which ordinary citizens and businesses are constantly exposed to. Comparing these experiences, it is clear that these approaches are characterised by two trends: randomness and non-imitation. [ABSTRACT FROM AUTHOR]

The objective of this research was to identify a model of international police cooperation applicable to the different manifestations of cyber threats in Colombia: theft by means of computer, through the Business Email Compromise (BEC) industry; its development has been achieved through an interpretive research model that provides an understanding of beliefs and attitudes that make it possible to comprehend the world from the perspective of academic experts; additionally, a mixed approach through which synergies are established and qualitative and quantitative methodologies are complemented; research methods that simultaneously allow for the triangulation of information obtained from field work and theoretical and descriptive/phenomenological studies; Key findings suggest that an international BEC pattern is linked to false invoices, real estate and CEO fraud, as well as domestic email compromises. the most affected actors are multilateral organisations, private and public companies, respectively; It has been linked to arms trafficking, human trafficking, sexual exploitation, drug trafficking, and organ trafficking. [ABSTRACT FROM AUTHOR]

Recent investigations emphasize the importance of cybersecurity in the growing digital era; 83% of organizations experienced breaks in cyber security in 2022, spending a mean of 4,35 million dollars per incident. Cybersecurity in Peru is regulated by legal norms aimed at protecting data and providing informatic security. Objective: To describe cybersecurity in the support services to occupational physicians (SSOP) in the city of Lima. Methods: A non-validated survey was created and distributed to 11 SSOPs in Lima that provide a service to an important building project in Lima. Results: More than 80% of health care establishments had a response plan against cybernetic attacks; security copies of the data were done regularly storing them in a different place than the establishment and regularly updated security software's. Conclusion: The cybersecurity program is reactive. We discuss the importance of cybersecurity and analyze future challenges as well as emphasize the importance of preemptive preparedness in an environment of constant digital transformation. [ABSTRACT FROM AUTHOR]

In an increasingly technology-dependent world, cybersecurity has become a critical concern. Cyberattacks, such as data theft and malware, can have devastating consequences for businesses, governments, and individuals. In this context, artificial intelligence (AI) emerges as a powerful tool to safeguard networks and computer systems. Network immunization leverages machine learning and real-time data analysis to identify patterns and anomalies in network traffic. AI can detect unusual behaviors that may indicate an ongoing cyberattack or intrusion attempt. Furthermore, it can adapt and continuously learn from new threats, thereby maintaining a more secure network over time. However, the implementation of network immunization requires careful consideration due to ethical and privacy challenges, involving constant monitoring of online activities. [ABSTRACT FROM AUTHOR]

The use of social networks by high school students from National Police schools in Bogotá includes the identification of possible gaps in cybersecurity issues, despite programmes and strategies related to responsible use when browsing cyberspace. This research is based on the comprehensive-interpretive (sociological) paradigm with a mixed approach of qualitative predominance. A documentary review, a student survey and an in-depth interview with parents and speakers were carried out. The findings were grouped into two categories; cybersecurity and education. The results of the survey showed hyper-connectivity on the part of the students; the interaction carried out through social networks, especially through the exchange of photos, videos, sharing statuses and making video calls. The findings of the interview express that, although each educational establishment is autonomous, among parents, caregivers and teachers an expressly defined route is not clear to follow when evidencing emerging dangers to the use evidenced in social networks. There is also a lack of greater co-responsibility when identifying certain types of behaviour that threaten students, given that some parents consider that it is an issue that the school should take care of, while teachers believe that it is the parents' responsibility. In conclusion, the need to assess the degree of acceptance, the effectiveness and the scope of strategies developed by schools and private or government entities, with respect to raising awareness on cybersecurity issues and responsible use when browsing the Internet, is revealed. [ABSTRACT FROM AUTHOR]

In today's dynamic cybersecurity scenario, effective management of access to critical systems and data is essential to safeguard the integrity and confidentiality of information. This article presents a systematic review of the most prominent access control techniques in the last five years (2019-2023), with the aim of providing an updated view of trends in information security. The review, based on a meticulous selection of articles from Scopus, SciELO, IEEE and Google Scholar, adheres to the PRISMA methodology to ensure a rigorous and complete systematic review. Advanced techniques such as CP-ABE, ABAC, RBAC, ACE-BC, ABSE, among others, were identified and evaluated, which represent significant advances in access control and the protection of sensitive information. The results obtained highlight the critical importance of these techniques in information security, providing a clear overview of the most effective tools in the protection of digital assets. Ultimately, this review not only informs the latest trends but also drives future research in the area of access control and information security. [ABSTRACT FROM AUTHOR]

This article presents the results of a systematic review of the methods to implement cybersecurity maturity. Based on them, it proposes a framework for excellence in aeronautical cybersecurity that integrates the objectives of aeronautical cybersecurity with capabilities and requirements, which contributes to increasing the maturity of aeronautical cybersecurity. It exposes 13 objectives with 120 capabilities and 5 functional maturity levels to gradually meet up to 600 aeronautical cybersecurity requirements. Which were taken from articles with good practices associated with publications of the last 5 years and the criteria resulting from the collaboration of managers and the validation of experts in the industry, which allowed it to be enriched with good practices associated with the management of cybersecurity and the resilience of these infrastructures. [ABSTRACT FROM AUTHOR]

The article shows the result of the innovation project developed by ACH Colombia, where a new service for immediate transfers of low amounts person to person was designed, supported by computer platforms adopting the highest technological level tools available, such as Blockchain (chain of blocks), warranting high levels of reliability and security. A payment ecosystem was integrated associating the main Colombian financial entities to provide immediate payment services among their users, reducing the use of cash. This proposal takes advantage of the wide adoption of mobile phones and internet access to develop a system of transactional processes that facilitate the purchase and payment operations of end users. A review of characteristics and technologies is shown for the design of means of payment. A recapitulation of cases regarding immediate payment systems is accomplished, and the methodological implementation of this payment system and final results are shown. [ABSTRACT FROM AUTHOR]

Traditionally, Industrial Control Systems have been isolated in private and highly secure networks. However, in recent years a trend has emerged towards the integration of these systems with the Internet, seeking to facilitate the exchange of fundamental data for business management and making precise decisions in the field of production. This movement towards convergence with the Internet poses significant challenges in the field of cybersecurity. The Electrochemical company (ELQUIM) of Sagua la Grande recently implemented a new, more productive and safer plant. An Industrial Control System supervises and controls the productive and technological parameters of the plant, however, there was no mechanism for collecting and storing them from the business area. A system was designed to securely acquire data from the process area and place it at the disposal of specialists and technologists in the business area. Through this information, technologists can detect malfunctions in the plant, as well as improve its production processes. The SCADA ErosXD designed and programmed by the companies SERCONI and XETID was used as supervision software. [ABSTRACT FROM AUTHOR]

Cyber-attacks refer to computer crimes that have shown great growth as a result of the pandemic, in 2021. According to Kaspersky Latam portal, cyberattacks grew by 24% (Kaspersky, 2021), the reason is due to confinement. Companies had to opt for Home Office, as well as Educational Institutions, which began their Distance Learning activities, thus remaining unprotected and vulnerable to malware attacks, phishing among others. This scientific article proposes to describe the current situation of cybersecurity among Educational Institutions in Ecuador, as well as, the safety measures they must take to protect their information. [ABSTRACT FROM AUTHOR]

The Industry 4.0 paradigm aims to obtain high levels of productivity and efficiency, more competitive final products, and compliance with demanding regulations related to industrial safety and cyber-security. To achieve these goals, industrial systems must be equipped with condition monitoring systems for the early detection and localization of faults and cyberattacks. This paper proposes a robust condition-monitoring strategy through the use of Deep Learning algorithms. The proposed scheme was validated using a Tennessee Eastman (TE) process with excellent results. The proposed strategy was compared with other condition monitoring schemes. The higher performance obtained by the proposed scheme indicates its feasibility. [ABSTRACT FROM AUTHOR]

The present investigation had as its main objective the proposal of an automated system model for a pilot plant based on technology 4.0 It was supported theoretically by Bombardo, (2019), Duitama, Diaz Piraquive, F., Rodriguez Bernal, L., Muriel Perea, Y. and Coronel, D. (2022), and Ladino, L.A., Juarez-Perez, J., Z. Ramirez-Diaz, L.A. Miller, J. Herrera, G.B. Raga, K. Simpson, G. Cruz, D. Pereira and F. Córdoba (2022). The methodology used in the investigation was projective of experimental design, which allowed the manipulation of several variables. The investigation is constituted by phases, where a model of the pilot plant will be made to fill virtual adapting 4.0 technologies such as digital automation, Internet of Things (IOT) and cybersecurity, to achieve what was previously said, the machine was installed. a module that allows to capture the data of the machine and project them in a computer that by means of a software a reproduction of the operation of the pilot plant and the behavior of the variables that it has in the productive process of the machine can be appreciated. The final result was that a virtual filling pilot plant was adapted with 4.0 technologies, such as: the Internet of Things, cybersecurity and the implementation of the cloud for data storage. Developing a series of tests that verified that the design complies with the stated requirements. [ABSTRACT FROM AUTHOR]

Taking into account the wide diffusion that data analytics has had in different application areas and considering the scarcity of specific datasets associated with cybercrime within open data strategies in Colombia, this article aims to characterize cybercrime in the department of Cundinamarca, through the use of exploratory analysis and machine learning techniques. The present research was developed through 4 methodological phases: data adequacy, exploratory data analysis, application of machine learning models and finally generation of value-added information. For the development of the proposed study, a dataset was formed from the dataset of 35,000 records published by the National Police in the open data portal of Colombia, which addresses high-impact crimes within the department of Cundinamarca and occurred during the first half of 2021. The cybercrime dataset has a total of 1513 records and includes attributes such as: day, quarter, municipality, area, victim, age and crime, so that at the exploratory analysis level, descriptive statistics methods were applied on the different attributes, while at the machine learning level, the association rules and clustering models were applied in order to determine respectively the relationship of the attributes with the type of crime, and the representative groups formed by relating the age with the type of crime and the municipality with the type of crime. The study developed allowed to demonstrate the usefulness and potential of data analytics techniques in the field of cybersecurity, in order to support decision making by the relevant authorities. [ABSTRACT FROM AUTHOR]

A bibliometric analysis is carried out on scientific articles referring to Mexico on cybersecurity issues, published between 2015 and 2020, indexed by Sciencedirect, Redalyc, and Dialnet. The study takes into consideration indicators such as productivity per year, per journal, per institution and per author, as well as the thematic content of the texts. From the 18 papers analyzed, the detected research trends suggest a majority contribution from researchers affiliated to universities, as well as the association of cybersecurity issues and the technologies involved in cyberspace with social topics. [ABSTRACT FROM AUTHOR]

In her 2021 State of the Union address, European Commission President Ursula von der Leyen stressed the need to improve EU cybersecurity. The threat landscape is diverse and changing, and includes disinformation and fake news, cyber-attacks on government infrastructure and interference in elections in third countries. With this in mind, in December 2020 the EU unveiled a new Cybersecurity Strategy that includes legislative and institutional initiatives: from the revision of the NIS Directive - the EU's first cybersecurity legislation - to the establishment of a cybershield to identify largescale cyber-attacks. To be effective in this field, which involves a multitude of actors, the EU will need to ensure robust cooperation and information exchange, both at national and European level, as well as with NATO. [ABSTRACT FROM AUTHOR]

The industrial internet of things (IIoT) has grown in recent years, which makes it possible to publicize recent technological innovations and be able to integrate them with each other, such as smart cities, among other applications such as health, education, transit and others, but at the same time there is a problem that is security, due to the fact that incidents related to IIoT have been registered against data networks, for this reason it is necessary to generate intelligent solutions in cybersecurity, which allow to give a satisfactory solution. The objective of this work was to propose an intelligence technique adaptable to a cybersecurity framework with the ability to solve cybersecurity problems in networks of IIoT devices, for the development of which the research-action methodology (I-A), which consists of merging theory with practice in such a way that the researcher can generate accurate conclusions about the practices carried out. In this sense, with this methodology it is intended to provide solutions to specific problems in a given situation. Based on the above, a systematic literature review of the different artificial intelligence techniques was carried out, to finally determine the most appropriate ones and proceed to carry out the respective validations until the appropriate one was selected. Where it was found that there is a great variety of intelligence techniques such as Deep Learning (Deep Learning), who obtained a very high score in the characterization that was carried out due to its great possibilities when integrating the algorithm into the field of cybersecurity, it was identified that they are very poorly characterized; however, in the initial research that was done, the result was how to work with this technology and how to adapt it to cybersecurity. There are different ways to analyze and secure data on the network, one of these is learning techniques, in this research several techniques were identified that with their respective algorithms provided the basis for adaptability with a framework related to IIoT technologies. [ABSTRACT FROM AUTHOR]

This article describes Ukraine's cybersecurity system, its place, and its role in a single configuration of national security. The methods used include formal-dogmatic, comparative-legal, sociological, and hermeneutics. The research revealed that effective cybersecurity must be addressed comprehensively, requiring coordinated action at the national, regional, and international levels to prevent, prepare, and respond to incidents by the government, the private sector, and civil society. [ABSTRACT FROM AUTHOR]

Policy process scholars are increasingly attentive to issues that engage multiple subsystems, though they disagree on what the unit of analysis should be. Researchers have used the term "boundary spanning," which already refers to a different class of institutions and actors, as well as variants of the terms wicked and messy problems without incorporating their full definitions. In this article, I argue that trans‐subsystem issues are better understood as "ill‐fitting problems" because they do not neatly fit into existing institutional jurisdictions. Jurisdictions are arbitrary rather than fixed, so our understanding of which problems stretch across subsystems depends on the political system or institution under study. I illustrate the match or mismatch between issues and institutional organization using data on attention to cybersecurity issues in U.S. congressional hearings from 1966 to 2014. Cybersecurity's widely varied attributes mean that multiple committees and the subsystems they represent compete for policymaking authority, while cybersecurity also competes for attention within each component subsystem. While the opposite phenomenon, "well‐fitting problems" are possible, endogenous and exogenous problem definition dynamics will worsen the fit between most issues and their governing arrangements. The clarified concept of ill‐fitting problems can support research into policy regimes, wicked problems, and complex systems. [ABSTRACT FROM AUTHOR]

In a globalized society, cybercrime has become a major problem, generating risks of essential information, such as passwords, personal data, among others. Not to mention, the vast sums of money that cyberattacks manage to fetch each year. This situation has taken on such a magnitude that conventional security measures are not enough to provide us with security in a digital environment. For this reason, the need arises to implement new computer protection tools, of which the "Honeypots" have stood out. The latter has become relevant, in addition to protecting, providing security; They are considered "trap" type systems that serve to observe the different behaviors of cyberattacks to later analyze the intrusion, the methods that were used. The general objective of this article is to study the active behavior of a Honeypot to later determine its performance, specify its degree of efficiency in the detection and classification of cyber-attack intruders. For this purpose, a technological methodology will be implemented, consisting of five (5) phases: diagnosis, plan design, resources, monitoring, and evaluation, as proposed by Arias (2016). A study will be carried out involving the use of a Honeypot with constant monitoring in three different types of situations that simulate a cyber-attack, at different degrees of intensity: without any attacks, attacks of less than 5 cycles per minute (light attacks), attacks greater at 10 cycles per minute (Heavy Attacks). The results obtained are highly acceptable; the honeypot obtained 95% efficiency in detecting simulated cyber-attacks with a performance of 95.4%. [ABSTRACT FROM AUTHOR]

Thie aim of this theoretical reflection is to describe and categorize the process involved in the new technological revolution based on big data, Internet of Things, cloud computing, etc., focused on Industry 4.0 or Industry of the Future, in which technologies are necessary to renew current and future manufacturing production. In the first part of the article, the digital transformation and its current situation is presented and, in the second part, the focus is on Industry 4.0 and the enablers or essential technologies to carry out this transformation. Consequently, it is inferred that technological enablers are the basic pillars of the fourth industrial revolution, essential to achieve an adequate digital transformation. Thlis premise should be understood as a new cultural paradigm, projecting itself in all areas of the system. [ABSTRACT FROM AUTHOR]

A medida que los ataques cibernéticos presentan una mayor amenaza, la inteligencia artificial ofrece una serie de herramientas que pueden utilizarse para mejorar la ciberseguridad. A lo largo de este artículo podemos observar un gran numero de beneficios y desventajas de la inteligencia artificial en el ámbito de la ciberseguridad. En nuestros resultados hemos obtenido resultados positivos en ataques con Inteligencia artificial y también hemos obtenido resultados positivos a la hora de obtener información de ataques mediante el uso de la IA. Como conclusión, es necesario avanzar en la inteligencia artificial, ya que el creciente volumen y complejidad de los ataques requiere de mayores recursos para poder enfrentarlos. A su vez, los ciberdelincuentes también usaran la inteligencia artificial para realizar sus ataques. [ABSTRACT FROM AUTHOR]

The main aim of this research study is to design a tool that allows evaluating the current state of computer vulnerability in a small and medium size enterprise (SME) by measuring its software's security level. The tool's components are defined, described, and supported by the common vulnerabilities and exposures (CVE) database, which offers a solid basis for an effective cyber risk assessment and recommendation scheme. The results show the execution of each of the tool's components by assessing a Colombian information and technology SME. All commercial software is evaluated on its different versions and lines of action are suggested according to the level of calculated risk. In conclusion, the proposed tool assesses the initial stages of search, report, and recommendations for cyber risk vulnerabilities, based on a systematic, permanent, and exaustive examination that is preventive rather than corrective. [ABSTRACT FROM AUTHOR]

New technologies create new challenges for global security that leave even the most militarily powerful countries vulnerable to attack. Countries are gearing up for electronic warfare and, in this realm, the old rules of international conflict either do not apply or have not been developed. Governments have yet to find stable policy solutions to match potential cyber threats. The challenge then is to establish new global norms concerning acceptable behavior in cyberspace. This article analyzes the attempts to construct global cybersecurity norms. It differs from much of the existing literature on norm‐construction since it moves beyond the interstate level to examine subnational groups and private sector actors that function as norm entrepreneurs in this policy area. The article posits that while nation states remain central, nonstate actors are playing an increasingly important role in cybersecurity norm‐building, supplementing state action, and, to some degree, compensating for state inaction when cooperation reaches an impasse. Related Articles: Glen, Carol M. 2014. "Internet Governance: Territorializing Cyberspace?" Politics & Policy 42 (5): 635‐657. https://doi.org/10.1111/polp.12093 Hellmeier, Sebastian. 2016. "The Dictator's Digital Toolkit: Explaining Variation in Internet Filtering in Authoritarian Regimes." Politics & Policy 44 (6): 1158‐1191. https://doi.org/10.1111/polp.12189 Zeng, Jinghan, Tim Stevens, and Yaru Chen. 2017. "China's Solution to Global Cyber Governance: Unpacking the Domestic Discourse of 'Internet Sovereignty.'" Politics & Policy 45 (3): 432‐464. https://doi.org/10.1111/polp.12202 [ABSTRACT FROM AUTHOR]

The adoption of Information and Communication Technologies -ICT- has caused multiple transformations in both the public and private sectors. The use of ICT in the justice sector speeds up judicial processes. However, this use raises risks since justice is part of the critical infrastructure of nations. In addition to the judicial information’ characteristics, an interruption in the provision of these services would be catastrophic. For this reason, cybersecurity plays a role in each stage of digital judicial processes. This paper aims to propose cybersecurity recommendations to digital judicial processes in the Colombian case based on a literature analysis, which described the digital justice landscape with an emphasis on Latin America. It also analyzes which ICT is used in each stage of the digital judicial process, their cyber risks, and the recommendations to face them. Also, how the functions of the National Institute of Standards and Technology –NIST- cybersecurity framework are considered. [ABSTRACT FROM AUTHOR]

Case-law analysis of the judgments regarding unlawful access to medical records by personnel of the public health care systems of Spain. The case-law analysis is followed by a reflection of the current configuration of the unlawful accesses to computer files as they are part of the Criminal Code Title for crimes related to violations of the right to privacy, as well as some proposals for improvement from a cybersecurity-based approach. [ABSTRACT FROM AUTHOR]

This article provides some insights into the debate about the relevance of cyber security as a tool for international competition. The central argument sustains that actions in the cyber security realm perform a key piece in competitive relations of governments. By making a comparison between Chinese and American cyber security models the text upholds that this realm has become a national security imperative. Likewise, it proposes the adoption of a comprehensive comparative cyber security models of governments. The article concludes by offering some issues to analyze cyber security within an international perspective. [ABSTRACT FROM AUTHOR]

The primary objective of this study is to use the inductive method to design and implement a blockchain technology software tool for electronic invoicing in Colombia. Electronic invoicing is a process managed in accordance with the guidelines of the DIAN (Dirección de Impuestos y Aduanas Nacionales). Each electronic invoice file contains a unique electronic invoice code (CUFE, in Spanish), which ensures that the information contained is unique. A database is designed by using MongoDB and the interface to access the system is developed by using Bootstrap, HTML, and JavaScript. Reading, storage, processing, and the creation of blockchains is performed by using Flask and Python. As a result, a new web tool is developed that is capable of creating electronic invoice blocks in 0.106 seconds. It is concluded that this web tool significantly improves the security of Colombian electronic invoicing systems. [ABSTRACT FROM AUTHOR]

This document presents the development of a cybersecurity platform for unmanned aerial vehicles (UAV), or drones, based on cyber-deception technology. This technology is based on the deliberate creation of easily accessible and detectable decoys (or honeypots) to detect potential intruders at the perimeter of a critical infrastructure. This document contains an explanation of the conceptual model of the proposed solution, and a detailed description of each of the developed procedures. A technological development methodology was implemented in this paper. Also, procedures were developed for the creation of honeypots in Wi-Fi wireless networks and in radio frequency bands, and the approach to the development of a GPS spoofing procedure was included. The latter was explored using software defined radio equipment (SDR) for the impersonation of GPS signals, which allows for the implementation of defense strategies against attacking drones. Finally, a web platform to monitor active decoys, and to register penetration attempts, is described. These penetration attempt records are stored in a blockchain, developed with basis on Ethereum technology. It was found that Wi-Fi and radio frequency wireless networks have vulnerabilities that can be exploited by potential attackers. Also, that the GPS spoofing procedure is much more complex than procedures by wireless networks, but it would allow to take action on attacking drones. [ABSTRACT FROM AUTHOR]

The paper analyses the activities of the Organization for Security and Cooperation in Europe (OSCE), which, as a result of the transformation of the Conference on Security and Cooperation in Europe (CSCE), has become one of the main elements of the European security architecture. The subject of interest is the international legal cooperation of the participating States in the field of international legal provision of the collective cybersecurity. Since its beginning the twenty-first century has been marked by the rapid development of information and communication technologies (ICT), which significantly accelerated communication processes both at the national and international levels. [ABSTRACT FROM AUTHOR]

Sharentíng is becoming a regular practice that compromises children's safety and privacy. This phenomenon is related to the act of sharing images of underage children on the Internet by their relatives. At the same time, a concern arises about the levels of Internet addiction in the population. In turn, levels of Internet addiction are a current problem in modern societies that has been linked to low self-control. This paper aims to analyse the degree to which images are published and the reasons why the adult segment of the population practices sharentíng, to determine the socio-demographic factors that have an impact on sharentíng, Internet addiction and self-control, and to establish the correlations between these three variables. A total of367 Spanish adults aged between 18 and 61 (M=28.98; SD=10.47) completed an online survey. Both the multiple regression analysis and the structural equation modelling revealed that: 1) Age emerges as a predictor of Internet addiction; 2) Age, gender and employment status are predictors of low self control; 3) No socio-demographic factors were found to be predictors of sharentíng; 4) The only significant correlation was observed between Internet addiction and self-control. Finally, practical implications of this paper on the protection of minors and adults' need for information on Internet security are discussed. [ABSTRACT FROM AUTHOR]

The 3.5G and 4G network technologies are, currently, the most used in Colombia, given the great deployment that Internet service providers have made, which represents a security challenge with respect to the different attacks on these networks. The interception of data with "Man in the middle attacks" (MiTM) and denial of service - DoS (in the smartphone or in the mobile network) are very feasible. In this article of applied research aims to establish some risks and possible impacts associated with telecommunications networks and how an attacker with little computational resource can eventually compromise the system, some risk and security vulnerabilities in mobile networks and their possibility of exploitation, as well as the general recommendations for risk reduction are studied. To achieve the above, an investigation of different vulnerabilities in these telecommunications networks was carried out, a risk map, in order to visualize the possible impacts, was made. Then, a technical test was run to capture traffic during the MiTM attack (which was successful), and as a final result, deliver recommendations in the event that they can execute cyber-attacks, with this, to be able to have a basis for the assurance of telecommunications networks and systems, allowing different people to recognize the vulnerabilities little explored in this type of systems. [ABSTRACT FROM AUTHOR]

This paper presents the answer to the cybersecurity challenges faced by the centralization of the electric power generation control in the second company of this type in Colombia. Likewise, it describes the main cybersecurity practices that were investigated, analyzed and implemented to establish and maintain a safe environment for operations, which allow facing the risks of cyberattacks on this essential service to the society. It presents the methodologies and technical measures that should have been considered in the different stages of the project to prevent cyberattacks from being effective, to identify them in a timely manner and to achieve the resilience of the supervision and control systems that were used and tested in this environment. It also shows how these results were used as a contribution to the evolution of Colombian national electric sector regulations on the subject and how they can serve as a basis for improvements to regulation and cybersecurity for other agents in the electricity sector in the country and the region. [ABSTRACT FROM AUTHOR]

This article explores the institutional development of the cyberspace domain in Colombia and its impact on civil-military relations in the country. An analysis of primary and secondary sources is used to define cyberspace and identify the cyber threats within it. It also describes civil-military relations in Colombia and the institutional framework of national cyberspace security and defense. Contrary to convention, in this case, it is evident that the initiative emerged from the country's civil sector, promoting greater participation of this segment in the field of security and defense. Thus, the cybersecurity and cyber defense agenda can be used to spearhead the rethinking of civil-military relations. [ABSTRACT FROM AUTHOR]

The present survey work contextualizes the main technologies of the era of digitalization or Industry 4.0, also known as the Fourth Industrial Revolution. First, the industrial impact and the technological evolution that the predecessor revolutions have historically caused are briefly described, to later present some of the architectures, standards, characteristics, and components of Industry 4.0, where the different engineering disciplines play a fundamental role. For its evolution. [ABSTRACT FROM AUTHOR]

The mediated use of technology fosters learning from early childhood and is a potential resource for inclusive education. Nevertheless, the huge range of options and exposure to interactive digital content, which is often online, also implies a series of risks. The definition of protection underlying the current strategies to protect children is inadequate as it only extends to reducing children's exposure to harmful content. This study proposes the expansion of this definition. Through systematic observation of 200 apps within the Catalan sphere for children under 8 years of age and principal component analysis, the results support a multidimensional conceptualisation of protection which, instead of being restricted to the potential risks, also considers aspects related to the educational and inclusive potential of digital resources. Five factors are suggested in order to select these resources and contribute to the digital competence of teachers and students. The first factor concerns the use of protection mechanisms and the existence of external interference, the second factor indicates the presence of adaptation tools; the exposure to stereotypes corresponds to the third factor and the last two consider the previous knowledge required and the verbal component of the apps. Finally, the scope of the suggested definition and its limitations as a guide for future analysis will be discussed. [ABSTRACT FROM AUTHOR]

The financial services sector faces challenges in the development of activities that require the use of information and communication technologies because these are activities exposed to risks such as cybercrimes, which can affect trust in the company’s brand and the confidence in the service. In order to face these challenges, ACH Colombia developed a project in order to anticipate and prevent the risks related to computer crimes, using tools that facilitate the analysis of information for decision-making. It also designed and implemented a particular prevention model for the payment button, which is one of the services that the company provides to banks, legal and natural persons and public entities. This article aims to present some results of the project. [ABSTRACT FROM AUTHOR]

This article provides insights into the debate about cyber issues and its effects on our understanding of new international security topics. Moreover, this article proposes the adoption of principles from the discipline of International Relations to study cyber issues in the global realm. The article concludes by offering certain guidelines to delve further in the analysis of cyber topics from an international perspective. [ABSTRACT FROM AUTHOR]

Peru is not excluded from the immense challenge that a process of digital transformation represents for organizations and that entails a necessary deliberation regarding the latent threats due to the potential violation of the security of information systems. This article seeks to exemplify the regulatory framework that has been developed in the country in relation to cybersecurity and evidences that, although it is not recognizable, there is a genuine concern about this matter. [ABSTRACT FROM AUTHOR]

New digital economy technologies, such as the initial coin offering (ICO) and its virtual assets, tokens and crypto-currencies, when coupled with software that anonymizes their transactions, potentiate the risks of virtual crime, money laundering, terrorist financing, and even cyber-attacks on the state financial system. Such cybernetic risks have demanded from governments the development of security systems for financial activity in cyberspace, involving cyber-defense mechanisms, oversight bodies, as well as normative devices to regulate, prevent and suppress cyber-attacks. In view of this scenario, the purpose of this research was to describe the Brazilian system of financial security in cyberspace, analyzing it in the face of the initial coin offering (ICO) phenomenon and its virtual assets, arriving at the conclusion that the current system is inapplicable to such a phenomenon. [ABSTRACT FROM AUTHOR]

Los gobiernos democráticos se enfrentan a desafíos singulares para maximizar el potencial de la tecnología digital al tiempo que minimizan las amenazas a las sociedades más abiertas. Proteger las elecciones justas, los derechos fundamentales en línea y los enfoques de múltiples partes interesadas respecto a la gobernanza de Internet son tres prioridades interrelacionadas fundamentales para la defensa de democracias fuertes en una era de creciente inseguridad, mayores restricciones y competición geopolítica. Los crecientes desafíos a los que se enfrentan las democracias para gestionar las complejas dimensiones de la tecnología digital se han convertido en un problema definitorio de la política nacional e internacional con implicaciones directas para los derechos humanos y la salud democrática de las naciones. La digitalización progresiva de casi todas las facetas de la sociedad y la naturaleza inherentemente transfronteriza de Internet plantean una serie de problemas complejos cuando la información pública y privada en línea está sujeta a manipulación, piratería y robo. Este artículo aborda la tecnología digital en lo que se refiere a tres subtemas distintos pero interrelacionados: elecciones libres y justas, derechos humanos y gobernanza de Internet. En las tres áreas, los gobiernos y el sector privado están luchando para seguir el ritmo de los aspectos positivos y negativos de la rápida difusión de la tecnología digital. Para abordar tales desafíos, los gobiernos y legisladores democráticos, en asociación con la sociedad civil y las empresas de medios y tecnología, deben liderar urgentemente el camino hacia la elaboración e implementación de reglas y mejores prácticas con el fin de proteger los procesos electorales libres y justos frente a la manipulación externa, defender los derechos humanos en línea y proteger la gobernanza de Internet frente a enfoques restrictivos y de mínimos. El artículo concluye estableciendo cuáles deberían ser algunas de esas reglas y mejores prácticas. [ABSTRACT FROM AUTHOR]

Beginning from the social network Facebook, the Author reflects on how important it is to increase our level of understanding the opportunities and, above all, the dangers of the digital world where, beyond the technological aspects and automatic security settings, the human factor must take central role. The person is the center around which the reformulation of an active communication process must take place to protect ourselves. [ABSTRACT FROM AUTHOR]

The so-called «Fourth Industrial Revolution», constituted by phenomena such as robotics, artificial intelligence and other similar technical manifestations, considered not long ago futuristic or science fiction matters, begins to be a everyday reality. And although, according to the scientific community, we are only at the dawn of the phenomenon, there is a widespread concern and a growing interest in the study of the determination of its benefits but also of its risks, through the analysis of its effects in the economic, legal, and ethical fields, et cetera. In this sense, it seems urgent to consider the need to control technological advances, in order to ensure that the apparently unstoppable progress in this scope --although the chronology is not yet well determined-- will achieve beneficial results for human beings and not contrary to human rights and values. [ABSTRACT FROM AUTHOR]

This article presents the systemic analysis of the components of security with the use of the languages of systems dynamics such as the prose, influence diagram, flow-level, equations and behaviors. Systems dynamics allows the analysis of the complexity of security's elements through the characterization of the existing feedback cycles, for the perception, explanation and prediction of security. The usefulness of the proposed model is shown through the simulation of hypothetical scenarios, allowing in this way measuring information security. [ABSTRACT FROM AUTHOR]

It can be said that Internet is Information System divided into a kind of building and to access the information must navigate floors full of it. The issue is that traditional browsers does not have the power to drive through all those floors and are restricted to only a few. Because of this, users do not find answers that fully meet their searches. The first floors of this building, which could be considered the most basic, contain a very small percentage of the information on the web, and are those who use the search engines, it means, it is a shallow navigation. The remaining floors, the most, are outside its scope and content remains hidden at every visit. To achieve equate a little this reality a little have been developed two movements: Semantic Web and Deep Web. Both are intended to enable users to reach the most part of the information on the web. The first from a semantic point of view and the second offering privacy when browsing. In this article, is presented an analysis of the reality of both technologies and is develop the conceptualization necessary to improve understanding of them. [ABSTRACT FROM AUTHOR]

This article aims to analyze the perceptions expressed about issues related to cybersecurity and privacy of computer systems in Portugal. The study addresses the issue of gender equality, based on the malefemale dichotomy, using a perspective intrinsically related to a differential perceptions of bias. The research methodology adopts an approach that consists in the use of 10 measurement variables. From the statistical analysis of the results obtained, there is no unidirectional pattern in the data: according to the indicators, higher perceptions were detected for male subjects, for female subjects, or absence of statistically significant differences. [ABSTRACT FROM AUTHOR]