Reviewerly/exHarmony huggingface dataset:
Enabling fine-grained access control in information sharing with structured data formats

The ongoing need for societal and industrial digital transformation requires rapidly expanding networks of interconnected organizations and dictates an increasing role for cybersecurity in information sharing. A typical setup consists of multiple stakeholders working closely together and needing efficient channels for sharing relevant information in a secure manner. This is especially prevalent with complex modern supply chains and critical information infrastructures. They often comprise of numerous co-operating organizations, people and in some cases smart devices having different levels of access to a variety of information. Granular access control plays a vital role when distributing information efficiently between stakeholders without revealing sensitive pieces of data to unwanted third parties. This article presents a novel framework for enabling fine-grained access control to share information efficiently and securely in these situations. Our motivation and use case for the framework originates from the secure sharing of cyber incident information in the maritime logistics industry. We present a novel solution to this problem by developing an information sharing platform and a meta-model, demonstrated using an implementation with structured JSON data formats, while supporting previously researched attribute-based encryption schemes. The proposed framework provides a broader context to the fine-grained data access control challenge in addition to the technical implementation.
Cultural Influences on Information Security

Humans are by far the weakest link in the information security chain. Many in the information security industry advocate for a technical solution to this problem. Unfortunately, technology does not hold the answer to solving the human problem. Instead, it is important to better understand the problem and find new ways of training individuals, so they have a better security mindset and make better security minded decisions. The security challenges associated with human factors have been widely studied in previous literature and different research groups. Prior research has shown that both human behavioural factors and social media usage factors can be used to better assess a person’s susceptibility to cybercrime. We know that humans are multi-faceted beings who are swayed by many factors. In addition to behavioural factors and social media factors, humans are predisposed by cultural influences. This paper begins the process of understanding how culture influences a person's ability to make positive cybersecurity decisions in a world that is full of data being thrown at them. The end goal of this research is to use culture, along with behaviour and social media usage as new metrics in measuring a person’s susceptibility to cybercrime. This information can then be used by information security practitioners and researchers to better prepare individuals to defend themselves from cyber threats. This paper is the start of the research process into how culture impacts a person’s susceptibility to cybercrime. It shows the significance of identifying what specific aspects of culture impact how someone makes a decision. This can help mitigate social engineering attacks by better understanding the influencing factors which control an end user. The authors will continue their work on this project to develop new Information Awareness (IA) training programmes that work to modify an individual's behaviour, while taking into consideration their behaviours, social media usage and culture.
Agile Methods For Improved Cyber Operations Planning

Cyber Ranges provide an interactive simulated environment of hardware and software for simulation. This closed environment provides a safe and legal environment where cyber warfighters can refine their skills. They enable mock cyber mission rehearsal of operation playbooks. Simulated cyber capabilities in the cyber range parallel the intelligence, surveillance, and reconnaissance (ISR), Order of Battle (OOB), and battle damage assessment (BDA) in a closed, safe environment for experimentation. Scrum has been used in collegial cyber competitions with success because it has allowed Capture-the-Flag cyber games to create quicker simulations. Defense Innovation Units (DIUs) are using agile Scrum processes to numerous warfighting areas in order to make them more agile. This research argues that the agile software development processes could be used to optimize the planning and execution of offensive, defensive, and operation and maintenance (O&amp;M) of cyber warfare simulations within cyber ranges. O&amp;M can be done quicker, new exploitable modules can be includer more rapidly, and the capability can be reconstituted to the appropriate skill level for the next set of trainees quicker. The White team as maintainers of the networks, systems, applications and cyber tools select the CVE exploits and spend an enormous amount of time installing and configuring these capabilities for the next set of trainees. Quite often, there are different skill levels which require multiple builds and the ability to refresh the cyber range with varying levels of cyber trainee complexity. This requirement to restore the cyber range quickly with a variety of builds, varying levels of difficulty, and ensure the experiential learning is maximized with the best availability lends to agile methods such as Scrum could lend to improvements with cyber operations. This research will illustrate how a cyber range could leverage agile Scrum processes to provide an improved cyber range environment quicker and with more capabilities.
The Concept of Comprehensive Security as a Tool for Cyber Deterrence

Cyber deterrence is often studied from the point of view of deterrence by punishment or offensive cyber strategies. A vast amount of studies claim that deterrence in cyberspace can never be successful with cyber means alone due to technical challenges and the problem of attribution. Some scholars argue that cyber resilience is an essential part of cyber deterrence, since not every cyberattack can be countered. These reviews are usually technical and concentrate on investigating the balance of offensive and defensive cyber strategies. The technical view leaves gaps in the physical and cyber-persona layers of cyberspace. This paper examines resilience from a societal perspective and reflects on the findings of cyber deterrence theories. The Concept of Comprehensive Security (CCS) is a Finnish model for building and sustaining resilience in society. Preparation for disruptive situations is carried out with the operating principle of overall safety, where society´s vital functions are protected in collaboration between the authorities, the business world, organisations, and citizens. The growing importance of cyber security has led to emphasising the importance of cyber resilience in the Concept of Comprehensive Security. This study investigates the possibilities to utilize the CCS as a tool for cyber deterrence and aims to create a new perspective on the international academic discussion of cyber deterrence. The research method is content analysis. The investigated material consists of Finnish CCS documents, as well as academic cyber deterrence and cyber resilience literature. The characteristics of the CCS are compared to the factors found in the cyber deterrence material to answer the research question. The key observation presented in this study is that a comprehensive approach to building resilience in the society is essential for the credibility of cyber deterrence. Resilience in cyberspace should be viewed from the perspective of every layer, including logical, physical and cyber-persona layers.
Cybersecurity in Mozambique: Status and Challenges

Digital technologies became one of the most important components of societies day to day life. In Africa, they brought several benefits as well as challenges. For instance, the number of cyber-crimes and cyber-attacks are increasing. Yet, not all 54 African countries have implemented proper cybersecurity measures such as the adoption of national cybersecurity strategy, technical and organizational measures, development of cyber capacity and fostering national and engaging in regional and international cooperation. However, the adoption of these measures are vital and imperative. Mozambique is one of these countries where these measures are lacking. Therefore, the aim of this paper is to give an overview of the current state of cybersecurity in Mozambique considering all of the aspects mentioned above. Additionally, this paper also aims to present some best practices that Mozambique can adopt to improve and intensify its cybersecurity commitments. The proposed recommendations are based on internationally recognized frameworks and models developed by entities such as the European Union Agency for Cybersecurity (ENISA), International Telecommunication Union (ITU) and African Union (AU).
Smart Terminal System of Systems’ Cyber Threat Impact Evaluation

Systems of system-level thinking is required when the purpose is to develop a coherent understanding of the ecosystem where every user and system requirements are divided into specific parts. The smarter project, as a part of the Sea4value program of DIMECC, aims to develop harbor operations, including passenger and cargo transportation, in a way that port processes will improve, emissions will decrease, and overall security will enhance in smart ports. This paper describes cyber-attack impacts against the Smart terminal system of systems in the cyber realm by utilizing the MITRE ATTACK® framework to map the objectives of threat actors. The Smart Terminal system environment includes ICT, ICS networks and components, communication systems, and port service systems. Internal and external threat sources or actors are hard to divide exactly because of the diversity of the threats. Hybrid threats challenge maritime domain awareness globally. The cyber threat impacts on IT and OT environments are connected to each other because of the use of internal and external networks that impact each other by combining vulnerabilities and threats. Well-working port and terminal operations require not only protected operational systems or sensor systems, but human errors must also be minimized. Objectives of threat actors are presented, categorized, and listed. Threat scenarios illustrate that cyber threats and risks are mainly similar in the maritime global-linked port community and basic hinterland trade. The networked supply chain of the business causes evolving and combined threat scenarios. European and international standards, regulations, policies, recommendations, and, e.g., guidelines by the IMO, set new cyber-threat requirements for port and terminal services and facilities. Therefore, overall security must be considered when cyber-security is the development area. Information exchange in an understandable form is essential for maintaining business continuity. Threat information has to be transferred among stakeholders as well as cyber security codes have to be followed in the port operations of partners that are involved, for example, in operational and system-level actions. Digitalization in smart ports and terminals enhances the capacity to handle cargo and passengers more efficiently, but cyber threats evolve.
Digital Forensic Readiness Model for Internet Voting

Voting is an exercise of choosing a preferred candidate through a process called an election. In many countries, this exercise is a basic human right. In every election process, there are some pre-requisite processes and procedures which must be set up first. These are essential in the pre-vote-casting stage, during vote-casting and post-vote-casting stage. Electoral disagreements amongst stakeholders and parties of interest are usually experienced in each of the above-mentioned voting process stages. The main points of conflict in an election process are vote rigging and vote fraud. Failure to amicably mitigate these issues can result in a criticised/rejected election result. Therefore, this research aims to address the problem of vote rigging and vote fraud allegations in an election process. The resolution thereof is achieved through the introduction of an online based voting system which is supported by a digital forensic readiness mechanism. Online voting system gives citizens the flexibility to use internet-enabled devices such as cell phones and laptops to cast their votes in a safe, secrete and secure protocol. To address the problem of vote rigging and vote fraud, the online voting system is integrated with cyber security and vote protection mechanisms. The cyber security and vote protection mechanism is based on Blockchain algorithms. A Blockchain-based voting process is a peer-to-peer mechanism where a decentralised database is used to store data. Tokens move directly from one peer (voter) to another peer (candidate). The results are tallied by counting the number of tokens paid to each candidate. Each voter is allocated a Bitcoin token and each candidate is allocated a Bitcoin address. During vote casting, the voter transfers their Bitcoin token into the wallet of a registered candidate. At the end of the voting process, the total number of Bitcoin tokens transferred to each candidate is counted and tallied up. The wallet is loaded with only one Bitcoin token, hence there is no possibility of double voting. The model ensures vote security, anonymity, auditability, accountability, accuracy and uniqueness.
Bibliometric Analysis of Malaysian Authorship: Trends, Patterns, And Prospects

Bibliometric analysis has emerged as a crucial instrument for interdisciplinary scholars who aim to comprehend the complex terrain of scientific knowledge. The current study employed a bibliometric analysis to scrutinise bibliometric publications by Malaysian authors. The bibliometric datasets utilised in this study were collected from the Scopus and Web of Science (WoS) databases. The obtained datasets were subjected to analysis and visualisation through the utilisation of ScientoPy and VOSviewer. The results suggest that Malaysian authors have actively participated in producing bibliometric papers in both Web of Science (WoS) and Scopus databases. Ahmi A. from Universiti Utara Malaysia and Lim W.M. from the Swinburne University of Technology, Sarawak, have published 27 and 25 works, making them the most prolific authors. The terms “CiteSpace”, “artificial intelligence”, “PRISMA”, “machine learning”, “systematic literature review”, “Biblioshiny”, “Bibliographic coupling”, and “performance analysis” have garnered significant attention in academic circles in 2022. This study presented that India and the United Kingdom exhibit parity in co-author affiliations with Malaysian authors. The most commonly employed author keywords by previous researchers were “bibliometric analysis”, “research evaluation”, “scientometrics”, “citation analysis”, and “co-authorship analysis”. Future research endeavours could concentrate on delving deeper into these subjects and scrutinising novel topics and domains of interest in bibliometric analysis.
CD-Blink: An External Disk Drive Based Covert Channel

Secure devices, files, and networks are often air-gapped to prevent unauthorized access to sensitive information.The proliferation of complex cybercrimes and covert channels has created a need for tightened security beyond standard practices.In this paper, we introduce CD-BLINK, a method of exfiltrating data via modulation of the read/write LED on a CD drive from an air-gapped network.With optical disks being almost obsolete and the commonplace of blinking lights, CD-BLINK can remain covert and unsuspicious.We provide an implementation and benchmarking of this channel using Morse, On-Off-Keying, and Binary Frequency Shift encoding using a USB-based drive.This method is best suited for the exfiltration of passwords, usernames, keys, and other credentials due to its relatively low bandwidth.
SOCIAL MATURITY – THE QUALITY OF PERSONALITY DEVELOPMENT

In the pedagogical analysis of the category «social maturity of the personality», we proceed from the thesis that the unity of the surrounding world and its evaluations are ultimately determined by its practical, transformative activity as an active subject of social processes.In the study of the effectiveness of the system of pedagogical influences as the main indicator of the personality holistic development, a category should appear that can be compared with the general influence of the social environment in relation to education. Such category is the social maturity of the personality. The social maturity of the personality includes the concept of «education». It reflects the connection with the content of the local education system of the educational institution.As a pedagogical phenomenon, the social maturity of the personality is revealed when its development is studied in connection with the content of objective and subjective factors.Practically all changes in the structure of the social maturity of the personality occur in a certain order in connection with the purposefulness of education. Therefore, researchers are not interested in the development of neoplasms in the personality structure, but their dependence on the system of pedagogical influences in unity with the factors of the social environment that determine them.In this regard, the social maturity of the personality is characterized primarily by those qualities that activate the self-regulation of social behavior and human activity in specific socio-historical conditions. Social maturity is the result of the formation of these personal qualities by means of education in the conditions of specific social environment and which is materialized in socially significant activities.The social maturity of the personality at each stage of his / her development reveals the ability to determine a certain ratio of self-determination, activity and responsibility in various life types. In fact, such processes appear on the basis of education, which in turn contribute to the development of the personality mental characteristics, lead to the emergence of new qualities in accordance with the organized influence of educators and the social environment factors.
The features of the application of malware by the special services of the aggressor country

The concepts and characteristics of malware are defined. The forms of malware are highlighted. The threats associated with the spread of malicious software have been identified. The role and place of the special services of the russian federation regarding the spread of malicious software in the context of cyberattacks involving hackers and cybercriminals are detailed. The targets have been scaled based on the results of the criminal activity of russian hackers. The objects of hacking attacks ordered by the Kremlin in global dimensions have been identified. The examples of malicious actions of russian cybercriminals and the results of their consequences for some EU countries and the USA are given. The plan and the directions of its implementation by the aggressor state in the cyberspace of Ukraine are revealed. The modern initiatives of the world community regarding the systematic and coordinated fight against ransomware with the participation of Ukraine are outlined. A forecast regarding the further situation development, directions and emphasis of the activities of hackers and cybercriminals on behalf of the russian special services in the conditions of cyberwar was made.
Smart Leadership for E-Learning for disabilities in the light of international experiences and the possibility of benefiting from it in the State of Kuwait

The study aims to know the smart leadership of E-Learning for disability in the light of international experiences and the possibility of benefiting from it in the State of Kuwait. The study followed the developmental analytical method. The study addressed several questions that include several axes, namely: the concept of E-Learning, and terminology related to online education, also the advantages and disadvantages of E-Learning.In addition to knowing how educational schools of disability faced the Covid -19, And what is the standpoint of teachers regarding E-Learning of student disability, and what are the international experiences of E-Learning for people with disabilities, and the possibility for the State of Kuwait to benefit from them.Finally, we have to know how smart leadership was activated to implement E-Learning for disabilities in the light of international experiences; The study reached the most important results as follows.Pay attention to good educational planning helps to harmonize the educational outcomes with the requirements of the labor market efficiently and effectively without wasting time and human energies. It also requires decision makers to pay attention to developing leaders with smart leadership qualities to implement E-Learning effectively.Therefore, it is possible to suggest an educational scheme that helps to implement smart Leadership for E-Learning for the category of persons with disabilities. Among the most important recommendations is the adoption the E-Learning smart leadership scheme to follow up E-Learning in special education and the approved programs in schools of Disabilities.Keywords: smart leadership, people with disabilities, E-Learning, the State of Kuwait.
Artificial Intelligence based Arabic-to-English machine versus human translation of poetry: An analytical study of outcomes

This study discusses the discrepancies between a machine translation and a human translation of Arabic poems to English. The dataset comprises two Arabic poems, Nothing of Note, and One Day. Each of these have English translations achieved by one or more translators working in unison to ensure close translation of the original. The researcher then generated the Artificial Intelligence (AI)-based Machine Translation (MT) versions of these and conducted a critical linguistic examination of the two outputs. Results indicated that the MT fails to capture the cultural context for instance, in the poem, Nothing of Note, the protagonist is uprooted his salary is changed to "pounds," and the use of different adjectives in the MT creates a different meaning than the original. The human translation's use of conjunctive pairs in the same creates a lyrical continuance to the adjectival antonyms, which is not achieved in the MT. The poem's context is also lost in the MT, e.g., "the dust-dunned street" is changed to "dusty street," and "like time would not walk with him" is changed to "on the ground, as if he was walking, but time wasn't passing." Finally, MT establishes two protagonists, while the human translation does not. In the second analysis of the poem, One Day, the limitations of machine translation are stark in capturing the socio-cultural context of poetry. The critical linguistic analysis comparing human translation to MT, points out that the latter failed to capture the nuances of the poem, including the use of figurative language, historical references, and the genre of the poem. In conclusion, MT is unable to apply meaning beyond its database and lacks the ability to understand the cultural context in which the poetry was created and can therefore, not be a good tool for translation of Arabic poetry to English.