The Personal Information Security Assistant

Network function virtualization (NFV) is a new networking paradigm that virtualizes single network functions. NFV introduces several advantages compared to classical approaches, such as the dynamic provisioning of functionality or the implementation of scalable and reliable services (e.g., adding a new instance to support demands). NFV also allows the deployment of security controls, like firewalls or VPN gateways, as virtualized network functions. However, currently there is not an automatic way to select the security functions to enable and to configure the selected ones according to a set of user's security requirements. This paper presents a first approach towards the integration of network and security policy management into the NFV framework. By adding to the NFV architecture a new software component, the Policy Manager, we provide NFV with an easy and effective way for users to specify their security requirements and a process that hides all the details of the correct deployment and configuration of security functions. To perform its tasks, the Policy Manager uses policy refinement techniques.

Automatic radio paging for network management system

The forthcoming Industry 5.0 era reinforces the role of the "human( user )-centric" approach for future technologies, services and applications, where the key objective is to satisfy the quality of service (QoS), security and privacy requirements of each individual user. To meet this objective, blockchain is considered as one of the prime enablers, as it allows secure, reliable, verifiable, and transparent management of private user data. However, contemporary blockchains are not suitable for Industry 5.0 applications due to their inability to ensure high throughput while maintaining reasonable security levels. Hence, in this paper, we design a user-centric sharded blockchain that enables generating, verifying, and storing blocks of data related to individual users with the aim to satisfy their QoS, security and privacy requirements. By analyzing the impact of user allocations to shards on the block period, we devise the user-shard allocation algorithm to minimize the block period or, equivalently, maximize the system throughput, and demonstrate the superior performance of our framework via simulations.

This paper studies a dynamic UAV-User resource trading scenario, where Unmaned Aerial Vehicles (UAVs) acting as airborne service providers dynamically adjust service prices and allocate bandwidth, while ground users dynamically select UAVs as service providers based on real-time utility maximization. We model the resource trading between UAVs and ground users as a dynamic game-theoretic problem to characterize the interactive decision-making process. To find the game equilibrium that maximizes the benefits of both users and UAV service providers, as well as enhance key metrics including network throughput, energy efficiency, and bandwidth utilization, we propose a bilevel deep reinforcement learning solution that coordinates pricing, bandwidth allocation, and user demand. To protect the privacy and security of users' personal data and improve model generalization across distributed devices, we incorporate federated learning into a blockchain-enabled UAV swarm, constructing a decentralized consensus layer to securely validate and aggregate local model updates. Experimental results demonstrate that the proposed framework achieves a 30% faster convergence rate and a higher quality of service (QoS) compared to baseline methods, confirming its significant effectiveness.

The rapid growth in consumers' adoption of social networking sites revolutionized the marketing landscape, transforming the way brands communicate with their customers. At the same time, the widespread popularity of social networking sites raised major concerns about the privacy and security of users' personal information on these platforms. Drawing on social identity, and privacy calculus theories, this study examines the roles of consumer‐social networking site relational dimensions, namely personal information disclosure and social networking sites identification as drivers of consumer brand engagement on social networking sites‐hosted brand pages. We show that the extent of consumer‐social networking site identification and the degree to which consumers disclose personal information on a social networking site affect their engagement with other brands hosted on that platform. Online survey data collected from a nationally representative sample of US consumers (n = 506) and empirically tested through structural equation modeling provide overall support to the proposed model. This study contributes to the literature by being the first to empirically demonstrate the spillover effects of consumer‐social networking site relational attributes to online consumer brand engagement. The findings provide guidance to marketing managers seeking to increase brand engagement on social media.

Abstract. SIM Swap is a form of cybercrime where the victim’s phone number is taken over by a third party through the recycling and reselling of phone numbers that still retain previous customers' data before being recycled. The practice of phone number recycling poses serious risks to the privacy and security of users’ personal data, especially when personal identification numbers (NIK) and family card numbers (KK) stored on the SIM card are not erased before the number is recycled by telecommunication operators. Cases of SIM Swap involving recycled phone numbers highlight weaknesses in the implementation of related regulations, such as Law No. 27/2022 on Personal Data Protection and Ministerial Regulation No. 5/2021. This study aims to analyze regulatory weaknesses, legal implications, and consumer protection against personal data breaches due to SIM Swap. This research employs a normative juridical method with a doctrinal approach through the analysis of legislation and legal documents. The data collection technique involves a library study using secondary data, while the data analysis method is qualitative. The results show that the practice of phone number recycling leads to data misuse and consumer harm due to regulatory gaps in personal data and consumer protection. Legal protection must be strengthened through preventive and repressive measures. Preventive legal protection involves proactive efforts by the state to prevent legal violations, whereas repressive legal protection addresses disputes that have occurred, including resolving trademark disputes through litigation and non-litigation channels. Abstrak. SIM Swap adalah bentuk kejahatan siber di mana nomor telepon korban diambil alih oleh pihak ketiga melalui daur ulang nomor telepon dan penjualan ulang nomor telepon yang masih menyimpan data pelanggan sebelum nomor tersebut didaur ulang. Praktik daur ulang nomor telepon menimbulkan risiko serius terhadap privasi dan keamanan data pribadi pengguna, terutama jika data nomor induk kependudukan (NIK) dan nomor kartu keluarga (KK) pada kartu SIM tidak dihapus sebelum nomor telepon didaur ulang oleh operator telekomunikasi. Kasus SIM Swap pada nomor telepon daur ulang oleh operator telekomunikasi menunjukkan kelemahan dalam implementasi regulasi terkait, seperti UU No. 27/2022 tentang Perlindungan Data Pribadi dan Permenkominfo No. 5/2021. Penelitian ini bertujuan untuk menganalisis kelemahan regulasi, implikasi hukum, dan perlindungan konsumen terhadap kebocoran data pribadi akibat SIM Swap. Penelitian ini menggunakan metode yuridis normatif dengan pendekatan doktrinal melalui analisis peraturan perundang-undangan dan dokumen hukum terkait. Teknik pengumpulan data penulisan ini menggunakan metode studi kepustakaan dengan data sekunder dan analisis data yang digunakan adalah metode analisis kualitatif. Hasil dari penelitian menunjukkan bahwa praktik daur ulang nomor telepon menyebabkan penyalahgunaan data, dan merugikan konsumen karena memiliki celah kekosongan hukum dalam perlindungan data pribadi dan perlindungan konsumen yang perlu dilindungi oleh melalui perlindungan hukum preventif dan represif. Perlindungan hukum preventif dalam hal ini yaitu upaya proaktif yang dilakukan oleh negara untuk mencegah terjadinya pelanggaran hukum. Sedangkan perlindungan hukum represif, yaitu upaya untuk menyelesaikan sengketa merek yang telah terjadi, seperti penyelesaian sengketa merek melalui jalur litigasi dan non-litigasi.

One of the most important security threats in Content Centric Networking (CCN) is cache privacy disclosure, where an adversary can obtain the privacy information of a legitimate user through timing attack. In view of this security problem, we propose a cache privacy protection strategy based on content privacy and user security classification (CPUSC). While protecting user privacy, CPUSC also takes into account the efficiency of content distribution. Firstly, CPUSC starting from user's subjective point of view to determine content privacy level. Secondly, the router in the system assigns a credit value to each user according to the user's behavior and sets a security level for each of them. Then, in the light of the credit value, the user's security level can be defined. Finally, a latency is set for each content response based on the content privacy level and the user's security level. Performance analysis show that the proposed scheme can effectively protect the user's privacy while ensuring the content distribution efficiency of the network.

The increasing popularity of smart devices have led users to complete all of their daily work with these devices.Users are now able to shop online, share information with the applications that they install on their smart devices.Installed applications gain access to various sensitive information, such as the user's contact list, phone number, location.However, there is no control mechanism in place that can check whether these applications are safe to install.Therefore, applications are installed according to the users' decisions, without any limitations or warnings.As a result, users become the target of malicious applications, and the personal security and privacy are compromised.In this study, we investigate the security solutions that aim to protect the privacy and security of Android users.We reveal the shortcomings of mobile security solutions and shed light on the research community.Additionally, we present the taxonomy of Android-based mobile security solutions.

Security and usability are key requirements of e-Government solutions. Security requirements are often met by reliance on smart card technology. In Austria, the open source components MOCCA Local and MOCCA Online facilitate the integration of smart cards into national e-Government applications. While MOCCA Local and MOCCA Online guarantee security, their capability to meet given usability requirements has not been assessed so far. To bridge this gap, the usability of MOCCA Local and MOCCA Online has been evaluated by means of a usability test. The obtained results show that MOCCA Local and MOCCA Online basically meet given usability requirements. Still, some minor issues have been identified that threaten to reduce the usability of these components. In this paper we introduce the basic architecture of MOCCA Local and MOCCA Online and present results of the conducted usability test. Based on these results we identify existing usability issues and derive possible improvements.

This chapter presents an approach for designing secure Data Warehouses (DWs) that accomplish the conceptual modeling of secure DWs independently from the target platform where the DW has to be implemented, because our complete approach follows the Model Driven Architecture (MDA) and the Model Driven Security (MDS). In most of real world DW projects, the security aspects are issues that usually rely on the DBMS administrators. We argue that the design of these security aspects should be considered together with the conceptual modeling of DWs from the early stages of a DW project, and being able to attach user security information to the basic structures of a Multidimensional (MD) model. In this way, we would be able to generate this information in a semi or automatic way into a target platform and the final DW will better suits the user security requirements.

Users often need to authenticate at situated displays in order to, for example, make purchases, access sensitive information, or confirm an identity. However, the exposure of interactions in public spaces introduces a large attack surface (e.g., observation, smudge or thermal attacks). A plethora of authentication models and input modalities that aim at disguising users' input has been presented in the past. However, a comprehensive analysis on the requirements for secure and usable authentication on public displays is still missing. This work presents 13 design considerations suitable to inform practitioners and researchers during the development process of authentication systems for situated displays in public spaces. It draws on a comprehensive analysis of prior literature and subsequent discussion with five experts in the fields of pervasive displays, human-computer-interaction and usable security.

Cloud Services have become an important part of the business world. Although public cloud services provide a range of advantages, it also creates concerns over security, network usage and the need for technical expertise in the management of the cloud. This paper describes a local private cloud which uses on-site hardware infrastructure and which incorporates a three tier management system. This device can be plugged into the internal network of the organization and it comes preconfigured with cloud applications suited for many user requirements. The solution ensures data security and low network usage due to the on-site hardware while the private cloud along with the applications are remotely managed by the service provider ensuring ease of use for the customer.

Controlling digital signature services using a smartcard

With networks increasingly moving into virtually every aspect of our daily life, security is gaining importance, not only from the traditional perspective of communication but the network's growing role in modern automation and control. The traditional, certification based approach attempts to guarantee the security of a network through certification. Certified networks are generally confined to a limited domain and, as a result, they are isolated, costly, and under-utilized. In contrast, this paper presents a new principle – user-level, security-on-demand system, wherein the network allocates, where possible, the security resources commensurate with the user's request for transporting message(s) through the network securely. This principle is successfully demonstrated for the current Asynchronous Transfer Mode (ATM) networks, and is the result of an integration of the fundamental framework for network security, recently proposed by the authors in the literature, with the unique characteristics of ATM networks. The framework encapsulates the fundamental knowledge and set of relationships in network security and permits scientific and systematic reasoning about network security. It also enables all user groups – military, government, industry, and academia, to define their security requirements in a uniform manner. The security-on-demand approach promises the development of a "mixed use" class of networks in the future that may be simultaneously shared by different groups of users, with the system sustaining the diverse security requirements of each user. A unique characteristic in ATM network design is the dynamic call setup process. Under it, a network first establishes a virtual path or route for a user's call, guided by the user's requirements, and then transports the messages when a route has been successfully determined. This unique ATM characteristic is integrated with the framework to yield a successful demonstration of the proposed, user-level, security-on-demand approach. Utilizing the security framework as the foundation, every element of the network – node and link, is characterized by a security matrix that reflects its security resources. Every user is permitted to specify the security requirement for the call through a matrix, which expresses the limits of the security resources that the traffic cells must encounter during their transport through the network. Thus, during the dynamic establishment of the virtual path, every node and link is examined to ensure that the user-specified security is met, in addition to bandwidth and other Quality of Service (QoS) requirements. Traffic is launched when the call setup succeeds, otherwise, the call fails. Like all networks, the ATM network inherently consists of geographically dispersed entities and, as a result, the resource allocation strategy is necessarily distributed. Furthermore, as the network operation progresses, the resource availability scene changes dynamically. This paper proposes a unique function that reduces the key network resource parameters at a node to a single value, termed Node Status Indicator (NSI). The NSI value is computed dynamically at every node and disseminated across the network to be utilized by a node to refine its determination of a virtual path for a user call. The aim of the NSI is to improve the resource utilization in the network. The proposed approach is modeled for a large-scale, representative, 40-node ATM network. Utilizing stochastic input traffic that is synthesized to reflect realistic operating conditions, the model is simulated extensively on a testbed of 35+ Pentium workstations, under Linux, configured as a loosely-coupled parallel processor, utilizing an accurate, asynchronous, distributed simulator. The simulator implements the key characteristics of the ATM Forum proposed P-NNI 1.0 and UNI 3.0 standards. While the simulation results reflect a successful realization of the proposed approach, analysis reveals minimal impact of incorporating security on ATM network performance, as measured through call success rates and call setup times. In contrast, the tradition has been to incorporate security into large-scale systems and networks as an afterthought, i.e. adding hardware and software devices after the design has been completed, resulting in performance degradation. Also, while the use of NSI is observed to yield slightly lower average call setup rates and slightly higher average call setup times, a careful analysis of the trace of the calls as they progress through the system, reveals that, in general, calls are dispersed throughout the network, seeking to utilize all available resources of the network more evenly.

Global competition, innovative technological advancement and speedy changes in the lifestyles of the society have changed the face of banking institutions. Now-a-days, banks are seeking alternative ways to provide services as per expectations of their customer and differentiate their services with those of the competitors. Increasing number of the electronic delivery of banking services are becoming very common in the society. The use of information technology in banking sector has been termed as Internet banking, new age banking, and online banking. The technology-driven online banking services includes: Automated Teller Machines (ATM), Electronic Clearing Service (ECS), Electronic Funds Transfer (EFT), Tele-banking, Internet banking etc. Internet banking is concerned with online inquiry or banking transactions without any reference to the branch anywhere at any time. Online banking system can have some issues such as environmental instability, user's competence, security, trust, and privacy. These have all been cited as factors contributing to consumers' apprehensiveness toward internet use. In India, almost all banking businesses are controlled by Public Sector Banks (PSBs). Public Sector Banks are still dominating the commercial banking system. Now with the beginning of wellcomputerized foreign banks, there is a stiff competition for the nationalized banks. The proposed study is an attempt to address the security issues of online banking transactions and consumer perception about the internet banking operations.