Information Privacy and Security

Ever since the evolution of banking, there have always been a number of unscrupulous individuals who have tried to breach its defenses in order to gain access to valuables. In the course of time, the physical attacks have become slowly less necessary because banking has steadily gained an online presence. Formerly, it was impossible to authorize a transaction through a mobile phone using the Internet. However, now that is more than possible, it is an extremely popular way of having transactions. As a result, security within financial institutions has shifted focus from physical to virtual measures. The most important component of a good financial IT security infrastructure is security Karishma (2010). In this scenario, the need for ensuring that information is kept confidential, adhering to accepted norms of privacy and making it available to authorized users at the appropriate time, assumes great significance. This is particularly valid for the banking sector where day-to-day opera...

Privacy is currently at the centre of a fierce battle. On one side, powerful data companies like Google, Facebook, and major data brokers are collecting and analysing as much personal data as they can. They are lobbying governments around the world, and trying to get governments to depend on them. During the coronavirus lockdown, for instance, governments depended on platforms to conduct their meetings online. The analysis of data is increasingly outsourced to companies like Palantir, which has contracts with American and British public institutions. Intelligence agencies and public health authorities argue they need as much data as possible to keep us as safe as possible. On the other side of the privacy battles, a techlash from consumers, human rights organisations, privacy experts, a few businesses, and new regulation such as Europe’s General Data Protection Regulation (GDPR) and California’s Consumer Privacy Act, represent forces that are pushing corporations and governments to respect our privacy. It is up to citizens to decide what kind of future we want.

There are number of Anti-Spam filters that have reduced
the amount of email spam in the inbox but the problem
still continues as the spammers circumvent these
techniques. The problems need to be addressed from
different aspects. Major problem for instance arises when
these anti-spam techniques misjudge or misclassify
legitimate emails as spam (false positive); or fail to
deliver or block spam on the SMTP server (false
negative); thus causing a staggering cost in loss of time,
effort and finance. Though false positive are very harmful
loss of important information for the user, false negatives
defeat the purpose of the spam filtering. This paper makes
an effort in proposing another aspect to address this
problem. It discusses some of these anti-spam techniques,
especially the filtering technological endorsements
designed to prevent spam to entrench their capability
enhancements, as well as analytical recommendations that
will be subject to further research. Apart from applying
anti-spam techniques, training of Spam control tool with
relevant user preferences can reduce the chances of false
positives, false negatives and spam email that land in the
inbox. We identify the need for training the filter with
domain specific data. This paper shows the decline in
false negatives via results of a case study on training the
Spam Bayes tool with carefully collected domain specific
user preferred dataset for over a period of 12 months.

Il trattamento dei cd. Big Data, per conformarsi al Regolamento europeo sulla protezione dei dati personali, richiede un'indagine preliminare volta a individuare quali siano le misure organizzative e tecniche idonee alla corretta valutazione e, poi, alla mitigazione del rischio per la privacy dei consumatori. L'articolo offre una prima ricognizione dell'apparato normativo applicabile ai Big Data e, rilevando l'inadeguatezza del tradizionale schema negoziale - basato sul binomio "informativa-consenso" - a tutelare i diritti del data owner, propone una riflessione su scenari regolamentari futuribili.

From the time when the life span of our Great Grand Fathers and Mothers Generations, a lot has been said about privacy. The ability to share information and communicate freely using Information and Communication Technology is vital to the realisation of privacy as enshrined in the Constitution. This is simply because it has changed the scope of what is known as privacy and what is known as the violation of the said privacy. It also disturbs the equilibrium of what is known as privacy and what is known as freedom of speech. Generally it makes complications on what are somebody’s rights in terms of privacy (private right) and what is public domain (Public Right).
The information and communication technology has probably had the greatest impact on society than any other technology. People rely on information and communication technology for all the advantages delivered such as powerful information access, storage and better reproduction of sounds and images. However, it is from the same technology through which one’s privacy, secrecy and confidentiality is infringed. 
This paper deals with the concept of Privacy, from its origin, meaning and types (as the first part), also how does the development of science and technology have brought effects (both negative and positive) to the user (customers) in relation to their privacy and how does the law solve the dispute when it comes to the negative impacts (as the second part of the work).

In the era of Internet of Things (IoT) and with the explosive worldwide growth of electronic data volume, and associated need of processing, analysis, and storage of such humongous volume of data, several new challenges are faced in protecting privacy of sensitive data and securing systems by designing novel schemes for secure authentication, integrity protection, encryption, and non-repudiation. Lightweight symmetric key cryptography and adaptive network security algorithms are in demand for mitigating these challenges. This book presents some of the state-of-the-art research work in the field of cryptography and security in computing and communications. It is a valuable source of knowledge for researchers, engineers, practitioners, graduates, and doctoral students who are working in the field of cryptography, network security, and security and privacy issues in the Internet of Things (IoT). It will also be useful for faculty members of graduate schools and universities.

Ao analisar os comportamentos dos utilizadores através das mídias sociais, Hermida (2014) conclui que nestes ambientes observa-se claramente a natural predisposição humana para partilhar. Neste sentido, Rheingold (2012) discrimina cinco dimensões da literacia digital: Atenção; capacidade de detecção de lixo; participação; colaboração e uso inteligente das redes. O autor destaca também as quatro propriedades de qualquer rede social: persistência; replicabilidade; escalabilidade e capacidade de ser pesquisado; adicionando a importância de estar consciente do que nós compartilhamos e com quem (na medida em que por trás das redes, existem audiências invisíveis e entrecruzadas, insuspeitadas entre o público e o privado – apontado assim mesmo por Boyd, 2014 -).
Com uma perspetiva semelhante, Brake (2014) enfatiza a relevância do tempo e da memória, onde a acessibilidade, a durabilidade, a integralidade, a desigualdade e evolução são as principais características a ter em conta.
Lembrando-se do processo metodológico de abordagem ecológica de McLuhan, Ling (2008) concluiu que o telemóvel, multidimensional, gera uma interação mediada que ocupa o mesmo lugar, se não mesmo uma posição de topo, nas mentes dos indivíduos (ibid: 168). O conceito de gestão de privacidade em redes foi referido por Campbell (2014) como "Networked Privatism”. Marwick (2013) e Boyd (2014), por sua vez, empregaram o termo similar "Networked Privacy" para descrever as negociações emergentes dentro de ambientes específicos (dispositivos-mídias) e as esferas líquidas (Serrano Tellería, Oliveira; 2015) ou as constelações (Serrano Tellería, 2015).
Características específicas têm sido observadas em relação ao ecossistema móvel. Características gerais e relevantes do conteúdo on-line e das mídias digitais são a hipertextualidade, interatividade, multimedialidade e usabilidade. O ecossistema móvel acrescenta ubiquidade à fluidez, transitoriedade, reticularidade e dissolução de fronteiras definidas por Bauman (2005) na vida líquida moderna. Ele ainda se caracteriza pela "spreadability" e pela tensão entre a cultura de massa e colaborativa dentro de si (Jenkins, Ford & Green, 2013). Aguado et al. (2013) traçaram um paralelo entre esses recursos e da vida líquida moderna. A metáfora de Bauman da vida líquida, de acordo com a lógica da sociedade de consumo, prevê uma contrapartida útil para tratar de algumas das características de mobilidade.
Além da correlação entre o impacto da tecnologia digital e os recursos digitais da sociedade líquida (que remete para as reflexões sobre a aceleração, deslocamento, do consumo e do papel da identidade), os meios de comunicação móveis encaixam-se particularmente nos parâmetros de fluidificação das dimensões tecnológico, institucional e cultural dos mídias previamente descritos por McQuail (2006; Aguado et al, 2013).
Dadas as citadas características do ecossistema móvel dos mídias na Internet, apresenta-se neste trabalho uma análise das conversas que surgem entre os utilizadores neste ambiente fluido e em constante evolução como técnica metodológica para poder apreciar o desenvolvimento dos utilizadores por meio das mesmas aplicações, meios e plataformas que os amoldam.

Security concern has become the biggest obstacle to adoption of cloud because all information and data are completely under the control of cloud service providers. To provide optimal services on cloud, this paper introduces a new distributed and scalable data sharing scheme for data owners in clouds that supports anonymous authentication. Proposed ASP (Advanced Security Protocol) protocol is a cryptographic access control protocol based on key-updating scheme referred to as Advanced Key Update (AKU). The main advantage of the AKU scheme its support for efficient delegation and revocation of privileges in hierarchies without requiring complex cryptographic data structures. Proposed ASP protocol also includes a new digital signature scheme that enables cloud providers to ensure that requests are submitted by authorized end-users, without learning their identities. User Revocation facility is also supported by proposed ASP. In this paper various existing approaches and issues related to data encryption and message authentications are also discussed. At last, experiment results are analyzed and performances are evaluated. The main aim of the paper is to provide more visibility and control to the end-users and close the gap between capabilities of existing solutions and new requirements of cloud-based systems.

Privacy has been a sensitive question lurking over the head of Indian administrators who have been equally reluctant and ignorant about answering the same. The advent of Aadhaar Act in 2016 and Government's mandate of linking Aadhaar with PAN had mooted up the issue of Privacy once again. Article 21 of the Constitution provides privacy to the citizens but only to a limited extent, which was put to question in several instances. The entire nation anticipates the decision of the Aadhaar Case. The judgment in the case of Justice Puttaswamy famously known as the Privacy Case finally arrived on 24th August 2017, which will directly impact several cases of Aadhaar pending before the Supreme court. Meanwhile, the Legislators have kept a blind eye to the long awaited Privacy Protection Bill of 2011. While concern over Individuals Privacy continued to vacillate until recently, the judgment has clarified situations to a large extent. Other sectors such as banking and welfare have brought forth their own rules to regulate Privacy concern. The article discusses the present legal situation of Privacy under various legislations, the impact of recent privacy judgment in India and analyses whether the current regulations created by various authorities such as SEBI, RBI, IRDAI have something substantial to offer or are just there to mellow down the daunting public.

The phenomenon of quantification and translating all elements of reality into data, in order to make them subject to aggregation and algorithmization, Viktor Mayer-Schonberger and Kenneth Cukier call datafication. This article will discuss the social risks posed by datafication. 1. Colonization of more and more subtle areas of human experience and social world by the market. The more precisely every possible aspect of human existence is quantified and recorded, the better the consumers are profiled and thus more susceptible to market manipulation. 2. Loss of privacy and surveillance. The fact that more and more forms of human activity is subjected to datafication leads to loss of privacy. 3. The fetishization od data and reification of social reality. The data are treated as a reflection of objective reality, however they are, just like algorithms fed by them, socially constructed. These constructs are treated as they were the natural forces, that regulate or even control our lives.

This paper aims to provide enhancements in the privacy preserving model that was published in our previous paper entitled "An Effective Privacy Preserving Model for Databases Using (α, β, k) - Anonymity Model and Lossy Join" [1]. The previous paper includes a model that maintains the privacy of the multiple sensitive data after the publication of the data in two tables: one for QI-tuples and the other for sensitive attributes. This model used the connecting numbers which depend on one of the sensitive attributes as in lossy join technique. The authors found that in some cases there is a problem may arise with retrieving the exact frequency for any of the rest sensitive attributes if they are not included, as a set of attributes in the same tuple in sensitive attributes table. In other words, the frequency of any one of the rest sensitive attributes is different from the existing frequency of the same attribute in original table especially if the researcher doesn’t use all sensitive attributes in the same tuple together as a set. This problem may affect the ability of researchers to utilize the data and consequently affect the research accuracy. This paper proposed a solution for this problem by adding the frequency details in published sensitive data table for the sensitive attributes that are not used in making connecting numbers. The solution will increase the data utility and improve the research accuracy.

Index Terms—Privacy Preserving Model, Anatomy Technique, lossy join, Multiple Sensitive Attributes, Connecting Numbers.

International Journal of Computer Science and Information Security (IJCSIS),
Vol. 13, No. 11, November 2015

https://sites.google.com/site/ijcsis/
ISSN 1947-5500

Few would deny that monitoring employees is a necessary part of doing business. The very act of paying someone for services would necessitate, in a competitive environment, that the product produced or time spent working be observed. Continued employment, raises, and profit sharing rewards require employers to monitor their employees. Surveillance may be necessary to diminish corporate liability for sexual harassment claims, absenteeism, safety concerns, employee theft and other illegal activities that take place at work. Nevertheless, we may wonder at the efficacy and moral legitimacy of employee drug testing. In this article, after a presumption in favor of individual privacy has been established, several of the most prominent arguments in support of employee drug testing will be considered. As we shall see, none of the arguments typically offered in favor of workplace drug testing are particularly compelling.

In the era of Internet of Things (IoT) and with the explosive worldwide growth of electronic data volume, and associated need of processing, analysis, and storage of such humongous volume of data, several new challenges are faced in protecting privacy of sensitive data and securing systems by designing novel schemes for secure authentication, integrity protection, encryption, and non-repudiation. Lightweight symmetric key cryptography and adaptive network security algorithms are in demand for mitigating these challenges. This book presents some of the state-of-the-art research work in the field of cryptography and security in computing and communications. It is a valuable source of knowledge for researchers, engineers, practitioners, graduates, and doctoral students who are working in the field of cryptography, network security, and security and privacy issues in the Internet of Things (IoT). It will also be useful for faculty members of graduate schools and universities.

Spațiul cibernetic se caracterizează prin anonimat, dinamism și lipsa frontierelor. Acest lucru generează atât oportunități de dezvoltare a societății informaționale, cât și riscuri la adresa funcționării acesteia la nivel individual, statal și interstatal. Asigurarea securității spațiului informatic devine o preocupare majoră a tuturor actorilor implicați, mai ales la nivel instituțional, unde se concentrează responsabilitatea elaborării și aplicării de politici coerente în domeniu, fapt care prevede necesitatea dezvoltării culturii de securitate cibernetică a utilizatorilor sistemelor informatice și de comunicații, utilizatori adesea insuficient informați în legătură cu potențialele riscuri, dar și cu soluțiile de contracarare a acestora. În consecință, una din premizele dezvoltării unei societăți sigure, sănătoase și puternice în România este reprezentată de prevenirea și combaterea riscurilor și amenințărilor la adresa securității cibernetice a țării. Obiective: Scopul acestei lucrări este acela de a oferi instituțiilor publice un exemplu de parcurs în vederea protecției și securității datelor de care dispun. Metodologie: Acest studiu se bazează pe literatura de specialitate în domeniul protecției și securității informatice. Rezultate: La final, reamintim faptul că securitatea informației distribuită în rețele de calculatoare nu este o problemă ce ține numai de tehnologie, aceasta constituind de asemenea o problemă umană și de management. Valoare: Cu cât autoritățile administrației publice vor pune mai mare accent pe securitatea informațiilor deținute, cu atât sistemele informatice utilizate de acestea vor fi mai sigure, în același timp asigurându-se și o protecție a funcționarilor instituțiilor respective.

Ever since the evolution of banking, there have always been a number of unscrupulous individuals who have tried to breach its defenses in order to gain access to valuables. In the course of time, the physical attacks have become slowly less necessary because banking has steadily gained an online presence. Formerly, it was impossible to authorize a transaction through a mobile phone using the Internet. However, now that is more than possible, it is an extremely popular way of having transactions. As a result, security within financial institutions has shifted focus from physical to virtual measures. The most important component of a good financial IT security infrastructure is security Karishma (2010). In this scenario, the need for ensuring that information is kept confidential, adhering to accepted norms of privacy and making it available to authorized users at the appropriate time, assumes great significance. This is particularly valid for the banking sector where day-to-day operations are centered on information and information processing, which in turn is highly dependent on technology. Banking as a business involves the management of risks based on a repository of trust extended by the customers, If this objective has to be accomplished, it becomes imperative for all security concerns especially customer sensitive data to be addressed in an effective way so as to ensure that the trust levels are well preserved and information assets perform the role that they are supposed to according to Chakrabarty (2010). The research conducted on the Ghanaian banks concerning information security breaches within the banking and financial institutions has shown that majority of the banks are very much concerned with both internal and external security breaches and also all the Ghanaian banks have in one way or the other experienced information security breaches before, according to Tobin and Danquah (2011).The current and the future bank institution in Ghana need to provide social engineering measures to secure their information and that of their customers. This research investigates social engineering effect in Ghanaian Banks, and also identifies how Information and Communication Technology is managed. It also creates awareness on social engineering and it countermeasures of stakeholders, Contributes to development of policy to enhance and secure quality banking.

In this paper I will offer several arguments in support of the view that individuals have moral claims to control personal
information. Coupled with rights to control access to one's body, capacities, and powers, or physical privacy rights, we will have taken important steps toward a general right to privacy. In Part I, a definition of privacy is offered along with an account of the value of privacy. Simply put, privacy - defined as control over access to locations and information - is necessary for human well-being. In Part II, an attempt to move beyond claims of value to claims of obligation is presented and defended. Policies that sanction the capturing, storing, and trading of personal information about others is something we each have reasons to avoid. In the final part, the tension between privacy and security is considered. It is argued that privacy rights may be set aside only if specific procedural conditions are followed.

Password authentication with smart card is one of the simplest and efficient authentication mechanisms to ensure secure communication over insecure network environments. Recently, Tsai et al. proposed an improved password authentication scheme for smart card. Their scheme is more secure than the other previous schemes. In this paper, we show Tsai et al.'s scheme is vulnerable to password guessing attack and has computational overhead. Furthermore, we propose an enhanced password authentication scheme to eliminate the security vulnerability and enhance the overhead. By presenting concrete analysis of security and performance, we show that the proposed scheme cannot only resist various well known attacks, but also is more efficient than the other related works, and thus is feasible for practical applications.

Nowadays, due to widespread participation of elementary school children in cyberspace activities, basic cybersecurity education and awareness is deemed necessary. Within this context, knowledge acquisition in this timely and important field has greater chances to be more fruitful when the learner is properly motivated. Also, it is anticipated to be more joyful when knowledge is acquired in the form of a digital game-based activity. The paper at hand discusses the development of a novel mobile app called CyberAware, destined to cybersecurity education and awareness. At present, the game is designed for K-6 children in order to support either or both formal or informal learning. Additionally, due to its mobile characteristics, the game can be experienced as an outdoor or classroom activity. Finally, opposite to similar studies found in the literature so far, our attention is not solely drawn to game’s technological aspects but equally to the educational factor. This is achieved through the consideration and use of the ARCS motivational model already from the game’s design phase.

Le tecnologie dell’informazione e della comunicazione modulano gran parte della vita quotidiana dell’uomo del XXI secolo. Tali tecnologie, insieme a innumerevoli vantaggi, hanno portato con sé una sfida alla privacy così come eravamo abituati a concepirla. Fughe di dati, strategie di marketing diretto e microtargeting, tecniche di sorveglianza su vasta scala, misure di sicurezza nazionale: queste sono solo alcune delle nuove, problematiche aree, con cui è necessario confrontarsi.  La privacy, dagli anni ’60 del secolo scorso, e in seguito in modo sempre crescente, è stata invocata da più parti come l’ultima resistenza nei confronti degli effetti collaterali dell’uso delle tecnologie dell’informazione. Questo elaborato porta dunque al lettore italiano i principali approcci al problema della privacy elaborati nell’ambiente accademico statunitense, prevalentemente da studiosi di diritto e filosofia, al fine di comprendere i diversi aspetti del concetto di privacy.
La seconda parte dell’elaborato evidenzierà i punti deboli e più oscuri della privacy. Molte voci, infatti, hanno mosso critiche nei confronti di quello che può sembrare un valore anacronistico e, nei casi peggiori, controproducente per il benessere della società.
La terza e ultima parte del presente lavoro è dedicata all’analisi del paradosso della privacy, cioè la discrepanza tra intenzioni e comportamenti nella tutela della propria privacy. Il tema del paradosso offrirà alcuni spunti di riflessione per capire, nonostante le sue contraddizioni, l’importanza della privacy.

FACEBOOK PRIVACY VIOLATION SCANDAL IN BROADER CONTEXT

May -10-2018

In April, the CEO of Facebook, Mark Zuckerberg, testified in Congress about the alleged user privacy violations that occurred at Facebook. Several weeks later,Cambridge Analytica, the political consulting firm that misused the personal information of millions of Facebook users, is shutting down due to the loss of customers. The Federal Trade Commission is progressing with its investigation of Facebook, and we will find out whether and how Facebook will be held responsible for these privacy violations.

That said, these privacy concerns are not going to end anytime soon. It is not just Facebook. Companies in multiple industries are becoming heavily dependent on customers’ personal data so that they can provide tailored products and services to their customers at lower cost. Ideally, both the companies and their customers should benefit from this data collector-data contributor relationship. In reality, all of us who are data contributors often feel uncomfortable about it. From Zuckerberg’s testimony in Congress, we may find answers to why we feel this way, and how meaningful regulation can improve this situation.

One reason why data contributors may not trust data collectors is that there is an informational asymmetry between the two. Many users have little knowledge about how companies like Facebook are collecting their personal information and what kinds of information are being collected.People get suspicious about whether their voices are being recorded secretly through the microphones on their laptops or through smart home devices like Amazon Echo.

It is often unclear to users who has access to their personal information. For example, people unfamiliar with Facebook’s business model may think that it sells users’ information to advertisers. During his Congressional testimony, Zuckerberg explained that Facebook acted as an intermediary that connected users with relevant ads. In order to provide greater clarity to users,regulation is needed to require that data collectors disclose, in an understandable and comprehensive manner, the sources being used to collect information, the types of information being collected, and the parties who have the access to that information.

Sometimes the collected information may be such that we are hesitant to share it. For example, many car insurance companies have been promoting telematics devices, which track drivers’ driving habits, and good drivers will be rewarded with lower premiums. But even for a good driver, the chance of her getting into an accident varies depending on many other factors, for example, the road conditions. Imagine if insurance companies start to gather information about the routes that a driver takes and change premium rates accordingly, in real time. Drivers will spend less on car insurance if safer routes are taken,and insurers will be able to monitor their risk exposures more closely. But even in such a mutually beneficial scenario, not everyone is willing to share his every footprint with others.

In short, people balance different considerations when it comes to the sensitivity of personal information. Some may be happy about giving up personal information in exchange for lower price or convenience, while others may not. Therefore,data contributors– meaning you and me — should be given the right to not share the information they consider sensitive, unless they want to do so.

In the EU, the General Data Protection Regulation – GDPR – goes into effect on May 25, 2018, and it provides data protection and privacy for all individuals within the European Union. It also deals with the export of personal data outside the EU, and hence, it will have a global impact.

Given the increased focus on cyber privacy, it is likely that some Congressional legislation regulation emerge. Will this regulation be adequate and will there be adequate enforcement of those regulations?

Author – Jay Kesan

Read More at - https://www.jaykesanpublications.com

<br>Password authentication with smart card is one of the simplest and efficient authentication mechanisms to ensure secure communication over insecure network environments. Recently, Tsai et al. proposed an improved password authentication scheme for smart card. Their scheme is more secure than the other previous schemes. In this paper, we show Tsai et al.'s scheme is vulnerable to password guessing attack and has computational overhead. Furthermore, we propose an enhanced password authentication scheme to eliminate the security vulnerability and enhance the overhead. By presenting concrete analysis of security and performance, we show that the proposed scheme cannot only resist various well known attacks, but also is more efficient than the other related works, and thus is feasible for practical applications.

In this paper I will argue that establishing and maintaining practices promoting privacy and accountability will typically trump security concerns.  While it is true that in specific instances security may outweigh privacy, this is not true once we glance upward to the level of practices.  Along the way I will present and critique four prominent pro-security arguments entitled: “Just Trust Us,” “Nothing to Hide,” “the Consent Argument,” and “Security Trumps.”

Consumer concerns over the safety of their personal information and the violation of their privacy rights are described as being the single overwhelming barrier to rapid growth of e- commerce. This paper explores the problems for e-commerce users when there is collection, use, and disclosure of personal information that are based on implied consent in e- commerce transactions. It questions the assumption that consent is sufficient to waive privacy interests in relation to e-commerce transactions. It will argue that consent should not necessarily be sufficient to waive privacy interests, and that the collection, use and/or disclosure of personal information should be subject to regulation.

I have argued elsewhere that individuals have moral privacy rights that limit the surveillance activities of governments. While not absolute, privacy rights shield individuals from the prying eyes and ears of neighbors, corporations, and the state. The question that I will consider in this article is one of balance when are security interests weighty enough to overbalance individual privacy rights? Before defending my own account, I will critique three rival views. One way to strike a balance between privacy and security is to let those in power decide. In most cases, these individuals seek public office for noble purposes—we should let them decide how best to protect privacy and security. I call this position “just trust us.” A second view minimizes privacy interests by calling into doubt the activities privacy may shield. This view, called “nothing to hide,” maintains that individuals should not worry about being monitored. Only those who are engaged in immoral and illegal activity should worry about government surveillance. Similar to “nothing to hide” is the view that “security trumps.” This latter account holds that security interests are—by their nature weightier than privacy claims. After offering a critique of these attempts at balancing, I will defend my own account. I will argue that by insisting on judicial discretion for issuing warrants, demonstrating probable cause for an intrusion, and allowing public oversight of the process and reasoning involved, we may promote both privacy and security. Finally, in the concluding section I will consider the WikiLeaks movement and its impact on accountability.

Today business environment is highly dependent on complex technologies, and information is considered an important asset. Organizations are therefore required to protect their information infrastructure and follow an inclusive risk management approach. One way to achieve this is by aligning the information security investment decisions with respect to organizational strategy. A large number of information security investment models have are in the literature. These models are useful for optimal and cost-effective investments in information security. However, it is extremely challenging for a decision maker to select one or combination of several models to decide on investments in information security controls. We propose a framework to simplify the task of selecting information security investment model(s). The proposed framework follows the " Context, Content, Process " approach, and this approach is useful in evaluation and prioritization of investments in information security controls in alignment with the overall organizational strategy.

The author deals with the issues of the right to privacy and the right to anonymity in the framework of freedom and security. In this regard, the author gives definitions and characteristics of privacy and anonymity, indicating the differences in the meaning of these two terms. Then, the author points to the importance of protecting the right to privacy and anonymity in today's virtual world, for the enjoyment of fundamental freedoms and human rights, both at online and offline sphere. In addition, the author brings in relation right to privacy and the right to anonymity with security, in the sense that protection of privacy and anonymity on the Internet provides enormous opportunities for criminal activities that endanger all levels of security, ranging from individual, public, societal, economic, financial, and similary, all the way to national security. The aim of the paper is that through consideration of these issues defines guidelines for the development of legal frameworks that will ensure the balance between privacy and anonymity on the Internet and requires from the state to protect security.

Key words: privacy, anonymity, freedoms, rights, security.

This submission seeks to respond to the terms of reference raised by Parliamentary Joint Committee on Intelligence and Security in its Review of the Mandatory Data Retention Regime prescribed by Part 5-1A of the Telecommunications (Interception and Access) Act 1979 (CTH) (‘TIA Act’).
As scholars working at the intersection of law and technology, we are somewhat comforted to see the review of the Data Retention Regime, led by the Joint Committee and mandated by legislation, as we believe that reform in this area is important for Australia.

In this submission, we draw upon some of the research conducted by Technologies and Rule of Law stream researchers to make suggestions on how we think the current data retention regime should be reformed. We also seek to provide comparisons with the recent developments in other jurisdictions.

We note that our research does not relate to all questions raised in the terms of reference, and we only set out answers in relation to those matters where our research may be relevant.

We are grateful for the opportunity to present our views and hope this submission will assist the Committee in their important work on this subject. The opinions expressed in this submission are the views of the authors, and do not necessarily reflect or present the views or positions of the Allens Hub or UNSW Law.

The Internet today connects about 40% of the world population. Half of these are living outside the advanced economies, often in some countries that are quickly climbing the developmental ladder, with diverse populations and inarguable economic potentialities including Saudi Arabia. There are 20 million Internet users in Saudi Arabia by the end of 2016. This research examines the impact of the Internet, innovation, disruption and the dynamics that affect adoption of electronic commerce (e-commerce) in Saudi Arabia. The study further analyzes the influence of Internet security and its impact on the users' decision-making process. The data have gathered through questionnaires that disseminated to 2,823 Saudi Internet male and female users through email. The response rate was 23%. The important findings have discussed in this study that shows that there are significant factors that are influencing the adoption of e-commerce, including legal procedures to ease of doing business, ease of doing businesses and security features and controls introduced by the online vendors.

This paper argues that individuals do, in a sense, own or have exclusive claims to control their personal information and body parts. It begins by sketching several arguments that support presumptive claims to informational privacy, turning then to consider cases which illustrate when and how privacy may be overridden by public health concerns.

Nowadays, due to widespread participation of elementary school children in cyberspace activities, basic cybersecurity education and awareness is deemed necessary. Within this context, knowledge acquisition in this timely and important field has greater chances to be more fruitful when the learner is properly motivated. Also, it is anticipated to be more joyful when knowledge is acquired in the form of a digital game-based activity. The paper at hand discusses the development of a novel mobile app called CyberAware, destined to cybersecurity education and awareness. At present, the game is designed for K-6 children in order to support either or both formal or informal learning. Additionally, due to its mobile characteristics, the game can be experienced as an outdoor or classroom activity. Finally, opposite to similar studies found in the literature so far, our attention is not solely drawn to game’s technological aspects but equally to the educational factor. This is achieved throug...

Dans les processus logistiques, de nombreuses organisations (publiques et privees) sont impliquees, et chacune a potentiellement son propre outil de gestion de chaine logistique (Supply Chain Management). Cependant, elles sont amenees a travailler de pair sur le processus global; d'abord en terme de planification, puis en terme d'operation, avec une vue sur la gestion des interruptions et sur la gestion de la resilience. Du point de vue modelisation, RESCUEIT propose de representer une chaine logistique complete dans le domaine de la securite civile. Au niveau de la modelisation, le projet propose d’integrer les requis de securite. Il propose egalement une base de donnees de risques et mesures de reductions specifiques aux chaines logistiques. D'un point de vue requis, le projet propose d'identifier les parametres de securite adequates, et qui necessitent d'etre surveilles et pris en charge. Du point de vue de l’Internet des Objets, le projet propose d'amelio...

9th International Conference of Managing Information Technology (CMIT 2021) will act as a major forum for the presentation of innovative ideas, approaches, developments, and research projects in the areas of information technology and management.

Il 15 ottobre 2019 si è tenuto un interessante confronto presso il Parlamento UE, organizzato dal Supervisore europeo (EDPS) e dall'Osservatorio679, ​ sul tema dei modelli di certificazione ai sensi del GDPR​ , nel contesto del principio di accountability. L'iniziativa italiana aveva come obiettivo quello di dare nuovo impulso alla conclusione dell'articolato processo di impostazione di tutti gli elementi necessari per l'approvazione dei criteri di certificazione da parte delle autorità di supervisione competenti (per l'Italia, il Garante privacy) nonchè per l'accreditamento degli schemi e degli enti di certificazione in tale ambito (in Italia, da parte di Accredia). Sintesi Il panel dell'evento su "Data protection certification models". Nella presentazione del programma dell'evento veniva sottolineato come «​ (c)on i principi di consapevolezza e accountability, fortemente richiamati dal GDPR, il Titolare è chiamato a "garantire" ed essere in grado di "dimostrare" che il trattamento è conforme al regolamento. Cosa fare per raggiungerlo? Quali elementi dovrebbero essere considerati? Come gestire i rischi impliciti? Il rischio è un concetto trasversale nel regolamento, che abbraccia il rischio per i diritti e la libertà e il rischio per le operazioni di trattamento. Come può essere gestito?​ ».