IJCIS : International Journal of Computing and Information Security

Behavarioural Compliance Towards Information Security

2022-06-15T06:49:51-07:00

Auditing has always played an important role in the business environment. With the introduction of information technology and the resulting security challenges that organizations face daily, it has become essential to ensure the security of the organization’s information and other valuable assets. However, one aspect that auditing does not cover effectively is that of the behaviour of the employee, which is so crucial to any organization’s security. The objective of this paper is to explore the potential problems concerning the attempt to audit the behaviour of the employee. It will be demonstrated that it is extremely difficult to audit human behaviour and so an alternative method to be behavioural auditing needs to be found, where policing the employee is not necessary, but instead a softer, more informal approach is used to change the culture to a more information security conscious one.

Knowledge Sharing and Decision Support System

2022-06-15T06:42:02-07:00

In a scenario where Healthcare organizations tend to rapid decentralization, with multiple actors involved in the care delivery processes, the importance for professionals to collaborate, access and share data and knowledge becomes more and more stringent. New technologies have improved the ability of electronically storing, transferring and sharing medical data; at the same time, they also create serious questions about who has access to this information and how it is protected. The aim of Doc@Hand is to support healthcare professionals in this changing environment, by providing a set of IT tools that help reducing the time and associated costs to collect the information and knowledge required, and, more crucially, [1] in making the best use of it for a more informed decision making (diagnoses, therapies, protocols).

Waves Of Information Security

2022-06-15T06:59:52-07:00

In a previous article [1] the development of Information Security up to the year 2000 was characterized as consisting of three waves: the technical wave, the management wave, and the institutional wave. This paper continues this development of Information Security by characterizing the Fourth Wave – that of Information Security Governance.

Data Modelling Predictive Preparation

2022-06-15T06:46:09-07:00

Predictive modelling is aimed at developing tools that can be used for individual prediction of the most likely value of a continuous measure, or the probability of the occurrence (or recurrence) of an event. There has been a huge increase in popularity of developing tools for prediction of outcomes at the level of the individual patient. For instance, a recent review identified a total of 363 articles that described the development of prediction models for the risk of cardiovascular disease in the general population alone

Ensuring Distributed Culpability for Provenance Sharing in the cloud

2022-04-05T09:20:03-07:00

Cloud computing infrastructure is a new skill for sharing information Technology and data based services over the information super highway. Society, industry and science are being developed by essential new skills for information sharing. The major aspect for crosscutting question is recording and managing provenance, or information about the derivation, context, origin, or history of data. We postulate that data provenance will perform a vital role in developing advanced digital setups. Several researches have been conducted by focusing on managing, recording mechanisms or by means of provenance information. In this paper, we present the implementation of an automatic collection and storage of data provenance, by developing provenance collection and storage model. We also designed uniform interface with provenance triggering protocol for sending provenance to more than one cloud at the same time. To satisfy the basic models that define data provenance and relate it to security goals such as confidentiality, integrity and availability (CIA), we deployed security implementation on data provenance using Shamir’s secret sharing principle.