Security Risks

Organizations invest heavily in technical controls for their Information Assurance (IA) infrastructure. These technical controls mitigate and reduce the risk of damage caused by outsider attacks. Most organizations rely on training to mitigate and reduce risk of non-technical attacks such as social engineering. Organizations lump IA training into small modules that personnel typically rush through because the training programs lack enough depth and creativity to keep a trainee engaged. The key to retaining knowledge is making the information memorable. This paper describes common and emerging attack vectors and how to lower and mitigate the associated risks.

The current Covid-19 pandemic has benefited digital payment platforms. This digitalization resulted in ease of doing transactions and protection from virus and germs but while increasing usage of digital payments, it has led to a serious question of how safe are these transactions? This concern acted as a motivator to identify risks associated with mobile payments. The study primarily focuses on data privacy and security issues associated with mobile payments from the customer’s (Gen Y) perspective. The findings revealed that digital payment transactions involved various factors and it is crucial for app developers to take into cognizance the following: develop a sense of trust among the app users and security provisions by deploying novel technology interventions (for maintaining data privacy). This was further substantiated by the survey conducted, wherein data privacy was an area of prime concern and required interventions from both app providers and the government. There should be some strong policies from government regarding storage and usage of personalized data by app owners.

The growth in online transactions is accompanied with an increase in the incidences of fraud. In the online marketplace, fraudsters are using sophisticated malware to take over accounts and commit fraud related activities. At the global level, online fraud is rampant with high financial losses for customers and online merchants. In Kenya, the scope of online fraud is still small, however, the increasing adoption of e-commerce is anticipated to increase fraud related incidences. Based on this, this study reviewed literature on challenges associated with internet fraud and best practices that can be adopted by online merchants. It was shown that the challenges are related to the use of improper theft and security measures by online merchants, the increase of mobile devices and lack of customer awareness of security risks in online transactions. To prevent internet fraud, organizational, consumer, and technical measures have to be adopted by online merchants in Kenya.

Inherent in any organization are security risks and barriers that must be understood, analyzed, and minimized in order to prepare for and perpetuate future growth and return on investment within the business. Likewise, company leaders must determine the security health of the organization and routinely review the potential threats that are ever changing in this new global economy. Once these risks are outlined, the cost and potential damage must be weighed before action is implemented. This paper will address the modern problems of securing information technology (IT) of a mechanical engineering enterprise, which can be applied to other modern industries.

In this work an analysis of the sandbox features offered by Comodo Internet security was performed.  The features such as Virtual Desktop as well as running the browser in a sandboxed environment were reviewed and tested by means of a deliberate interaction with malicious software.

Impact of COVID-19 on law enforcement might be early to assess
before the pandemic is over, but crime patterns have changed in all criminal areas.
Huge amount of people are working from home now, far from the comfort of up-to date security systems. Cybercriminals around the world undoubtedly are taking advantage on this world crisis.
Besides home office, also home schooling has been implemented step by step, having children more and more often available in the online environment.

This study attempted to examine the emerging security risks brought about by the e-hail taxi mode of transportation. It argues that despite the fact that the security risks associated with traditional taxi transportation still apply to e-hail taxi services, there are emergent risks that are unique to the app-based taxi hailing services. It further contends that as evidenced by the reactionary way of addressing security issues arising form usage of the service, it is clear that security was not a factor during conceptualisations, development and operation of the app-based taxi service. The study conducted a survey of uber customers and drivers in Nairobi County Kenya, and data was collected from 400 respondents with 85% response rate. Majority of the respondents indicated that they somewhat often (32.23%), agreed that Uber is more convenient (58.76%), indicated that Uber offers more business and job opportunities (86.46%). Despite the positive opinions by the respondents, 65.31% opin...

Inherent in any organization are security risks and barriers that must be understood, analyzed, and minimized in order to prepare for and perpetuate future growth and return on investment within the business. Likewise, company leaders must determine the security health of the organization and routinely review the potential threats that are ever changing in this new global economy. Once these risks are outlined, the cost and potential damage must be weighed before action is implemented. This paper will address the modern problems of securing information technology (IT) of a mechanical engineering enterprise, which can be applied to other modern industries.

This study attempted to examine the emerging security risks brought about by the e-hail taxi mode of transportation. It argues that despite the fact that the security risks associated with traditional taxi transportation still apply to e-hail taxi services, there are emergent risks that are unique to the app-based taxi hailing services. It further contends that as evidenced by the reactionary way of addressing security issues arising form usage of the service, it is clear that security was not a factor during conceptualisations, development and operation of the app-based taxi service. The study conducted a survey of uber customers and drivers in Nairobi County Kenya, and data was collected from 400 respondents with 85% response rate. Majority of the respondents indicated that they somewhat often (32.23%), agreed that Uber is more convenient (58.76%), indicated that Uber offers more business and job opportunities (86.46%). Despite the positive opinions by the respondents, 65.31% opined that Uber portend security risks. Majority indicated that the following risks are likely; abductions (40.82%), carjacking (40.82%), sexual harassment (38.14%), murders (35.71%), robbery (41.84%) and burglaries (34.69%). However, a majority of 28.57% thought that hackings into sensitive customer and company data was less likely. Furthermore, 57.14% of the respondents felt that the regulatory framework for app-based taxi hailing system were not sufficient to guarantee safety and security while 75.51% were optimistic that the e-hail transport industry will take meaningful security mitigation measures from the lessons they have learned. Finally, 92.93% of the respondents felt that government authorities should do more in regulating app-based services such Uber while 85.86% opined that founders and managers of e-hail taxi services should be held responsible for security lapses. The study recommends that a review of existing traffic laws and criminal laws be done to take care of the emerging security risks associated by app-based service providers.

ABTRACT Wireless Sensor Network (WSN) has become an emerging technology of wireless communication and computing. Wireless Sensor Network is a self-configured, infrastructure-less wireless network which comprises of a few to large number of spatially distributed autonomous sensor nodes and a base station. The function of the base station is to interface user and network. A sensor node combines hardware and software. The main deployment of sensor network is sensing, data processing and transmitting data. WSN has different application in enemy intrusion detection in the battlefield in the military application, medical field, atmospheric disaster, agricultural and industrial applications. In Wireless sensor network each node is a battery-operated low power device and operated in ad-hoc principle, which indicates network power is mainly dependent on rate of energy consumption. Ad-hoc networking nature of WSN allows the attacker for different types of attacks from passive eavesdropping to active attacks. As WSN requires hop by hop routing to transport the packets to the destination, any intermediate node acting maliciously can drop, modify or misguide the traffic traversing through it. Confidentiality, authenticity, integrity, data freshness and quality of service (QoS) are the most important issues for wireless sensor nodes. An attacker may collect and destroy sensitive information if the transmission is not properly encrypted. However, avoiding collision and providing cooperation among the nodes during the transmission are done by using medium access control protocols. This paper focuses on the security threats on the resource restricted design and deployment characteristics along with the requirements to design a secured WSN system. In this paper wormhole attacks, black hole attacks, Sybil attacks, hello flood attack, denial of service attacks and private attacks are investigated. In this paper different link layer attacks are also discussed. Not only does this document about the popular attacks in different layers of WSN, but also provides some remedies against these attacks.