The Impact of Gamification on Students’ Learning Outcome and Career Interest in Cybersecurity Education

2022 | Americas Conference on Information Systems | Citations: 0

Authors: Zhong, Chen; Kim, J. B. (Joo Baek); Liu, Hong

Abstract: Effective cybersecurity education is a critical domain in addressing the shorta ... Expand

Abstract: Effective cybersecurity education is a critical domain in addressing the shortage of the cybersecurity workforce. To prepare students for real-world workforce challenges, hands-on practice is an important component in cybersecurity education. We integrated gamification into hands-on cybersecurity practice and conducted an empirical study on how gamification impacts students' learning outcome and career interests. Questionnaire data have been collected and will be analyzed to test our hypotheses. The expected results will address the impact of gamification on learning outcomes and suggest how gamification can be most effectively applied to cybersecurity education. Collapse

Topics: IT security IT career gamification intrinsic motivation digital signature

Methods: statistical hypothesis test longitudinal research structural equation modeling cross sectional survey cross sectional research

Secure attribute-based search in RFID-based inventory control systems

2020 | Decision Support Systems | Citations: 0

Authors: Doss, Robin; Trujillo-Rasua, Rolando; Piramuthu, Selwyn

Abstract: We develop a secure attribute-based search protocol for Radio Frequency Identifi ... Expand

Abstract: We develop a secure attribute-based search protocol for Radio Frequency Identification (RFID) systems. This protocol can be used to simultaneously identify groups of items that share a set of attribute values. To the best of our knowledge, this is the first such work with the potential to significantly enhance the security and intelligence of RFID-enabled applications in inventory control and supply chain management. The protocol is designed to be lightweight, suited for resource-constrained basic passive tags, and compliant with the Electronic Product Code (EPC) standards. This is achieved by exploiting the zero knowledge properties of quadratic residues. The security and privacy properties offered by the protocol are rigorously proven through formal verification. Collapse

Topics: radio frequency identification privacy public key encryption electronic authentication data encryption

Methods: machine learning

Evolution of Format Preserving Encryption on IoT Devices: FF1+

2019 | HICSS | Citations: 0

Authors: Baccarini, Alessandro N; Hayajneh, Thaier

Abstract: The Internet of Things (IoT) is a network of interconnected low-power sensing de ... Expand

Abstract: The Internet of Things (IoT) is a network of interconnected low-power sensing devices designed to interact and communicate with each other. To avoid compromising user privacy, it is necessary to encrypt these channels. We introduce Format Preserving Encryption (FPE), a modern cryptosystem that allows full customization of the ciphertext, while offering comparable security to AES. To gauge the performance of FPE, we compare the NIST-approved FF1 algorithm against several symmetric and asymmetric encryption schemes on a Raspberry Pi 3. While suitable for small plaintexts, FF1 breaks down for longer character strings. We propose a modified algorithm, FF1+, that implements dynamic round selection and key scheduling. Significant performance improvements are observed in our results, thus demonstrating FF1+ as a viable cryptosystem for IoT devices. Collapse

Topics: data encryption internet of things mobile system cryptanalysis Advanced Encryption Standard

Methods: computational algorithm

BPDIMS:A Blockchain-based Personal Data and Identity Management System

2019 | HICSS | Citations: 0

Authors: Faber, Benedict; Michelet, Georg; Weidmann, Niklas; Mukkamala, Raghava Rao; Vatrapu, Ravi

Abstract: Recent scandals on the abuse of personal information from social media platforms ... Expand

Abstract: Recent scandals on the abuse of personal information from social media platforms and numerous user identity data breaches raise concerns about technical, commercial, and ethical aspects of privacy and security of user data. European Union’s new General Data Protection Regulation (GDPR) is one of the largest changes in data privacy regulation and entails several key regulatory measures for both data controllers and data processors to empower and protect EU citizens’ privacy. In this research work, we propose a conceptual design and high-level architecture for a Blockchain-based Personal Data and Identity Management System (BPDIMS), a human-centric and GDPR-compliant personal data and identity management system based on the blockchain technology. We describe how BPDIMS’s architecture utilizes blockchain technology to provide a high-level of security, trust and transparency. We discuss how BPDIM’s human-centric approach with GDPR compliance shifts the control over personal data to the end users and empowers them better. Collapse

Topics: blockchain identity management General Data Protection Regulation legal context data encryption

Methods: archival research computational algorithm design artifact design guideline design science

A Synchronized Shared Key Generation Method for Maintaining End-to-End Security of Big Data Streams

2017 | HICSS | Citations: 0

Authors: Puthal, Deepak; Nepal, Surya; Ranjan, Rajiv; Nepal, Surya; Chen, Jinjun

Abstract: A large number of mission critical applications ranging from disaster management ... Expand

Abstract: A large number of mission critical applications ranging from disaster management to smart city are built on the Internet of Things (IoT) platform by deploying a number of smart sensors in a heterogeneous environment. The key requirements of such applications are the need of near real-time stream data processing in large scale sensing networks. This trend gives birth of an area called big data stream. One of the key problems in big data stream is to ensure the end-to-end security. To address this challenge, we proposed Dynamic Prime Number Based Security Verification (DPBSV) and Dynamic Key Length Based Security Framework (DLSeF) methods for big data streams based on the shared key derived from synchronized prime numbers in our earlier works. One of the major shortcomings of these methods is that they assume synchronization of the shared key. However, the assumption does not hold when the communication between Data Stream Manager (DSM) and sensing devices is broken. To address this problem, this paper proposes an adaptive technique to synchronize the shared key without communication between sensing devices and DSM, where sensing devices obtain the shared key reinitialization properties from its neighbours. Theoretical analyses and experimental results show that the proposed technique can be integrated with our DPBSV and DLSeF methods without degrading the performance and efficiency. We observed that the proposed synchronization method also strengthens the security of the models. Collapse

Topics: big data electronic authentication data encryption stream processing Java

Methods: experiment simulation computational algorithm literature study

From a Barrier to a Bridge: Data-Privacy in Deregulated Smart Grids

2012 | International Conference on Information Systems | Citations: 0

Authors: Strüker, Jens; Kerschbaum, Florian

Abstract: The introduction of so-called smart meters involves detailed consumption data. W ... Expand

Abstract: The introduction of so-called smart meters involves detailed consumption data. While this data plays a key role in integrating volatile renewable energy sources, a side effect is that it can reveal sensitive personal information. Concerns and protests led to a stopped smart meter rollout yet. In deregulated electricity markets, data-privacy is even more at risk: The UK, Texas and Ontario decided for a nation-wide communication intermediary in order to facilitate the exchange of the vast amount of smart meter data. However, this operational efficiency is achieved by the fact that an intermediary is a single point of failure. We present an approach based on encryption to secure the intermediary against privacy invasions and we can show that our prototypical implementation meets even restrictive requirements for large-scale data handling and processing. By aiming at customers’ confidence in smart metering, our solution might lay the ground for an ecosystem of energy services. Collapse

Topics: data encryption privacy access control symmetric-key encryption smart metering

Methods: design artifact computational algorithm design science

Simultaneous multi-level RFID tag ownership & transfer in health care environments

2012 | Decision Support Systems | Citations: 0

Authors: Zhou, Wei; Yoon, Eun Jung; Piramuthu, Selwyn

Abstract: Authentication of Radio Frequency Identification (RFID) tags takes several forms ... Expand

Abstract: Authentication of Radio Frequency Identification (RFID) tags takes several forms depending on the dictates of the considered scenario. For example, mutual authentication protocols are used in scenarios where both tag and reader need to authenticate each other. We consider and develop ownership transfer protocols for three scenarios in the health care domain that have not been addressed in extant literature. RFID-tagged items in a health care supply chain experience different levels of ownerships, often simultaneously, throughout their lifetime. We consider a scenario related to ownership of RFID tags in a health care supply chain, specifically the seamless incorporation by a third party logistics provider. Another scenario considered is where tags simultaneously possess a temporary and a permanent key for communicating with a temporary (e.g., rental customer) and a permanent (e.g., owner) user respectively. The third scenario considered is where there are several levels of ownership (e.g., primary owner, rental owner, sub-rental owner). We provide example cases in the health care domain where such scenarios are observed. We then present brief security analyses of the developed protocols. Collapse

Topics: radio frequency identification logistics management electronic authentication supply chain management IT security threat

Anti-counterfeiting, key distribution, and key storage in an ambient world via physical unclonable functions

2009 | Information Systems Frontiers | Citations: 0

Authors: Guajardo, Jorge; Škorić, Boris; Tuyls, Pim; Kumar, Sandeep S.; Bel, Thijs; Blom, Antoon H. M.; Schrijen, Geert-Jan

Abstract: Virtually all applications which provide or require a security service need a se ... Expand

Abstract: Virtually all applications which provide or require a security service need a secret key. In an ambient world, where (potentially) sensitive information is continually being gathered about us, it is critical that those keys be both securely deployed and safeguarded from compromise. In this paper, we provide solutions for secure key deployment and storage of keys in sensor networks and radio frequency identification systems based on the use of Physical Unclonable Functions (PUFs). In addition, to providing an overview of different existing PUF realizations, we introduce a PUF realization aimed at ultra-low cost applications. We then show how the properties of Fuzzy Extractors or Helper Data algorithms can be used to securely deploy secret keys to a low cost wireless node. Our protocols are more efficient (round complexity) and allow for lower costs compared to previously proposed ones. We also provide an overview of PUF applications aimed at solving the counterfeiting of goods and devices. Collapse

Topics: computer hardware electronic authentication privacy radio frequency identification random-access memory

Methods: computational algorithm design artifact descriptive statistic

Sharing and access right delegation for confidential documents: A practical solution

2006 | Information & Management | Citations: 0

Authors: Yiu, S. M.; Yiu, S. W.; Lee, L. K.; Li, Eric K. Y.; Yip, Michael C. L.

Abstract: This paper addresses a practical problem in document management systems for whic ... Expand

Abstract: This paper addresses a practical problem in document management systems for which no existing solution is currently available in the market. To store confidential documents, a common approach is to keep only the encrypted version of the documents to ensure confidentiality of the contents. In real cases, documents may need to be shared by more than one person or group in a company and it is common for a manager to delegate the access rights of a documents to a delegatee. How is it possible to share encrypted documents and delegate the access rights of encrypted documents? Here, we discuss the issues related to this problem and provide a practical and easy-to-implement solution for solving the problem. It has been shown to be feasible by a prototype implementation. We also show how to extend our solution to be more scalable by taking advantage of the company's hierarchical structure. Collapse

Topics: data encryption database system public key encryption access control Java

Methods: design artifact computational algorithm design science database modeling