Wyniki wyszukiwania - BazTech

1

Analysis of modern tools, methods of audit and monitoring of database security

Mykhailyshyn Kateryna, Harasymchuk Oleh, Deineka Oleh, Dreis Yurii, Shulha Volodymyr, Pepa Yuriy

Informatyka, Automatyka, Pomiary w Gospodarce i Ochronie Środowiska

|

2025

|

T. 15, nr 4

124--129

EN

The mismatch between modern technological innovations and traditional approaches to information security can significantly affect the effectiveness of database monitoring systems. This paper examines the ethical and legal aspects of database monitoring, taking into account current regulatory requirements and the importance of maintaining data confidentiality. The study also evaluates the use of each tool to determine their effectiveness in real-world conditions, the possibility of improving the functional characteristics of monitoring systems, their adaptation to new technologies and increasing the overall level of information protection.

PL

Niedopasowanie nowoczesnych innowacji technologicznych do tradycyjnych podejść do bezpieczeństwa informacji może znacząco wpłynąć na skuteczność systemów monitorowania baz danych. W niniejszym artykule zbadano etyczne i prawne aspekty monitorowania baz danych, biorąc pod uwagę obecne wymogi regulacyjne i znaczenie zachowania poufności danych. W badaniu oceniono również wykorzystanie każdego narzędziaw celu określenia ich skuteczności w warunkach rzeczywistych, możliwości poprawy cech funkcjonalnych systemów monitorowania, ich dostosowaniado nowych technologii i zwiększenia ogólnego poziomu ochrony informacji.

2

The Impact of Data Governance on Data Management in the South African Construction Industry

Tambwe Ornella Tanga, Aigbavboa Clinton Ohis, Akinradewo Opeoluwa Israel, Stephen Seyi Segun

Applied Cybersecurity & Internet Governance

|

2025

|

Vol. 4, No. 1

art. no. 13, s. 1-24

EN

The construction sector project, from start to finish, can be overwhelming because of the large amount of data produced. This data must be managed effectively to ensure the project’s successful completion. One key way to do this is through data governance (DG), an aspect often overlooked. This study aimed to assess how data governance affects data management in the South African construction industry. A quantitative research approach was used, collecting data from various construction professionals via a Google Forms survey distributed through platforms such as LinkedIn. Participants included quantity surveyors, architects, construction project managers, construction managers, and engineers working in firms based in South Africa’s Gauteng province. A simple random sampling technique was used to ensure equal representation. Out of 300 surveys sent out, 200 were completed and returned. The data was analysed using exploratory factor analysis, standard deviation, and mean item score. The concept of data governance is based on the Data Management Body of Knowledge, which stresses accountability for all data management activities. Findings indicated that data governance mainly influences data management through data maturity assessments and data policies. The study concluded that when these elements are well integrated into data management practices, they can greatly improve the effectiveness of construction project data management, especially when stakeholders are involved in the governance process. Therefore, it is recommended that data policies, such as the Protection of Personal Information Act, be incorporated into construction regulations and codes of practice.

3

Wyzwania i perspektywy wdrożenia efektywnej kryptografii postkwantowej

Bajor Michał, Chołda Piotr, Gdowski Bartłomiej, Karcz Daniel, Niemiec Marcin, Opiłka Filip, Stypiński Miłosz, Szczepaniak Wojciech

Przegląd Telekomunikacyjny + Wiadomości Telekomunikacyjne

|

2024

|

nr 4

147--150

PL

Kryptografia postkwantowa oferuje rozwiązania mające na celu ochronę danych przed potencjalnymi zagrożeniami wynikającymi z rozwoju komputerów kwantowych. Niniejszy artykuł analizuje globalne wysiłki i strategie wdrożenia tego rozwiązania, skupiając się na działaniach Unii Europejskiej oraz postępie prac w Polsce. Szczególną uwagę poświęcono projektowi PQ- REACT, który ma na celu rozwój i implementację zaawansowanych algorytmów postkwantowych w systemach teleinformatycznych i infrastrukturze krytycznej.

EN

Post-quantum cryptography offers solutions aimed at protecting data from potential threats arising from the development of quantum computers. This article analyzes global efforts and strategies for implementing this solution, focusing on the actions of the European Union and the progress of work in Poland. Special attention is given to the PQ-REACT project, which aims to develop and implement advanced post-quantum algorithms in telecommunication systems and critical infrastructure.

4

Survey on effective disposal of e-waste to prevent data leakage

Victor Akila, Arunkumar Gurunathan, Rajkumar Soundrapandiyan, Selvanambi Ramani

Computer Assisted Methods in Engineering and Science

|

2024

|

Vol. 31, no. 2

187--212

EN

E-waste refers to electronic products that are of no use, not working properly, and either close to or at the end of their “useful life”. Companies generate large amounts of e-waste when they replace old and outdated IT hardware with new technologies. Disposing of this e-waste is not so simple, as it may contain a significant amount of intellectual property in the form of data. Timely elimination of these records and data is very crucial to secure it. E-waste cannot just be discarded due to associated data security, confidentiality, compliance and environmental risks and policies. Even after deleting data, it can still be prone to social engineering attacks by malicious individuals. Data leakage is the unauthorized transmission of data from within an organization to an external destination or recipient, and it can be transferred electronically or physically. Nowadays, protecting data is of upmost importance for organizations. However, organizations still fail at destroying confidential data from their end-of-life equipment. This article focuses on how to detect data leakage and try to find those responsible for doing so. Different Data Loss Prevention (DLP) techniques that are currently being used by many organizations are discussed and some suggestions are provided for developing more consistent DLP and overcoming the weaknesses prevalent in these techniques. Furthermore, this article discusses various algorithmic, logical, and methodological foundations and procedures followed for large-scale data disposal, determining when the life of data comes to an end.

5

Rozwój cyberprzestępczości a poczucie bezpieczeństwa użytkowników Internetu

Bujak Wojciech

Kwartalnik Bellona

|

2023

|

Nr 2

41--60

PL

W artykule przedstawiono wyniki badań nad wpływem cyberprzestępczości na poczucie bezpieczeństwa użytkowników Internetu. W badaniach wykorzystano metodologię wywiadu ankietowego, który przeprowadzono z dwiema grupami respondentów - studentami Akademii Sztuki Wojennej w Warszawie kierunku bezpieczeństwo informacyjne i cyberbezpieczeństwo oraz z żołnierzami Oddziału Specjalnego Żandarmerii Wojskowej niezwiązanymi z obszarem IT. W badaniach dążono do poznania, czy ankietowane grupy społeczne, całkowicie odrębne pod względem kwalifikacji w dziedzinie bezpieczeństwa cybernetycznego, mają świadomość zagrożeń cybernetycznych oraz wiedzę o narzędziach i praktykach stosowanych w celu zapobiegania przestępczości w przestrzeni cybernetycznej. Starano się również zweryfikować poczucie bezpieczeństwa badanych w związku z rozwojem cyberprzestępczości. Wykazano, że rozwój cyberprzestępczości istotnie wpływa na zmniejszenie poczucia bezpieczeństwa użytkowników Internetu.

EN

The article presents the results of research on the impact of cybercrime on the sense of security of Internet users. The research uses the methodology of a survey interview, which was conducted with two groups of respondents - students of the War Studies University in Warsaw, majoring in information security and cybersecurity, and with soldiers of the Special Branch of the Military Police not related to the IT area. The research sought to find out whether the surveyed social groups, completely separate in terms of qualifications in the field of cybersecurity, are aware of cyberthreats and the tools and practices applied to prevent crime in cyberspace. Attempts were also made to verify the respondents’ sense of security in connection with the development of cybercrime. It has been shown that the development of cybercrime significantly reduces the sense of security of Internet users.

6

Protection of personal data using blockchain

Madejczyk Maciej, Trejderowski Tomasz, Trejderowska Beata

Zeszyty Naukowe Wyższej Szkoły Technicznej w Katowicach

|

2022

|

T. 14

89--100

EN

The presented document is a scientific and technical proposal of the possibility of using blockchain in the process of protection of personal data on the Internet and inside IT systems. The key aspects of this proposal along with most pros and cons are discussed within this article. A brief discussion of prototype of proposed solution is also included.

PL

Prezentowany artykuł podejmuje dyskusję nad naukowymi i technicznymi możliwościami wykorzystania sieci blockchain w procesie ochrony danych osobowych. W artykule przedstawiono kluczowe aspekty proponowanego pomysłu, jak również większość zalet i wad. Zawarto również krótkie omówienie możliwego prototypu proponowanego rozwiązania.

7

The role of codes of conduct in the eu data protection framework

Drobek Piotr

GIS Odyssey Journal

|

2022

|

Vol. 2, no. 2

129--146

EN

The paper presents the legal nature and functions of codes of conduct in EU data protection law. The General Data Protection Regulation (GDPR) contains much more extensive provisions on codes of conduct than previous Directive 95/46/EC, giving them a potentially much more significant role in the EU data protection regime. The GDPR specifies codes of conduct as co-regulatory instruments whose compliance by controllers and processors has significant legal consequences. They are primarily intended to facilitate compliance with the GDPR by controllers and processors from a specific sector or to perform similar processing operations. It is, therefore, essential to identify the legal nature of the codes of conduct, the legal consequences of adhering to them, and their function in the EU data protection model. The theoretical analysis of EU data protection codes of conduct considers legal and regulatory theory perspectives.

8

Selected applications of the blockchain network in the Economy 4.0

Karski Kamil

Zeszyty Naukowe. Organizacja i Zarządzanie / Politechnika Śląska

|

2021

|

z. 150

57--68

EN

Purpose: The paper focuses on a trial of defining the assumptions of the fourth industrial revolution and presenting selected applications of modern Blockchain technology. The aim of this article is to draw attention to the growing importance of modern technologies having a significant impact on the development of the world economy and to show the opportunities of their potential introduction to the market. Design/methodology/approach: The article is both theoretical and empirical. Literature research allowed to determine main pillars that Industry 4.0 is based on. From among them, the invention was selected, which has a wide range of impact both on the production environment and on the society. Findings: The article shows the essence of new technologies in the Industry 4.0 and the selected applications of one of them. The article defines the impact of new technologies on economic development and provides a general research of new technologies in new World Economics. Research limitations/implications: Blockchain network is a dynamically developing technology that can be, used in many different areas of life, unfortunately it is still in its infancy and its implementation is very slow. Practical implications: One of the applications of the Blockchain network is the implementation to production systems that make order management more flexible and guarantee non-failure production which is also encrypted. Social implications: Blockchain technology could redefine how people are using public services as daily bases. Originality/value: The article contains description of new technology in modern economics. The article may be useful for researchers working on that subject and or the practitioners trying develop production or services using such invention for their clients.

9

The role of big data in Industry 4.0 in mining industry in Serbia

Tylečková Eva, Noskievičová Darja

System Safety : Human - Technical Facility - Environment

|

2020

|

Vol. 2, nr 1

166--173

EN

The current age characterized by unstoppable progress and rapid development of new technologies and methods such as the Internet of Things, machine learning and artificial intelligence, brings new requirements for enterprise information systems. Information systems ought to be a consistent set of elements that provide a basis for information that could be used in context to obtain knowledge. To generate valid knowledge, information must be based on objective and actual data. Furthermore, due to Industry 4.0 trends such as digitalization and online process monitoring, the amount of data produced is constantly increasing – in this context the term Big Data is used. The aim of this article is to point out the role of Big Data within Industry 4.0. Nevertheless, Big Data could be used in a much wider range of business areas, not just in industry. The term Big Data encompasses issues related to the exponentially growing volume of produced data, their variety and velocity of their origin. These characteristics of Big Data are also associated with possible processing problems. The article also focuses on the issue of ensuring and monitoring the quality of data. Reliable information cannot be inferred from poor quality data and the knowledge gained from such information is inaccurate. The expected results do not appear in such a case and the ultimate consequence may be a loss of confidence in the information system used. On the contrary, it could be assumed that the acquisition, storage and use of Big Data in the future will become a key factor to maintaining competitiveness, business growth and further innovations. Thus, the organizations that will systematically use Big Data in their decision-making process and planning strategies will have a competitive advantage.

10

Assessment of employees level of awareness in the aspect of information security

Pałęga Michał, Knapiński Marcin

System Safety : Human - Technical Facility - Environment

|

2019

|

Vol. 1, nr 1

132--140

EN

The strategic importance of information for the functioning of each economic entity forces entrepreneurs to properly protect them against loss, unauthorized disclosure or unauthorized modification. Hence, organizations build complex security systems taking into account state-of-the-art technical solutions, while belittling often the most important element, which is the human factor. It should be emphasized that it is the intentional or accidental actions of the human that can lead to the loss of information security. In addition, it is also the potential of human capabilities and skills can provide an effective defense against the failure or technical security. The article presents the basic stages of human resource management in the aspect of information security. Complementing these considerations will be the presentation and discussion of the results of surveys aimed at assessing the level of employee awareness in the area of information security.

11

Algorithm for generating temporary password based on the two- factor authentication model

Nysanbayeva Saule, Wójcik Waldemar, Ussatova Olga

Przegląd Elektrotechniczny

|

2019

|

R. 95, nr 5

101--105

EN

The article describes methods for applying authentication based on the second factor for the use in an automated system. For automated control system, the model's two-factor authentication and consistent algorithm were developed to generate a temporary password by using mathematical functions. Implemented was the software implementation in the JavaScript programming language in console mode. The analysis of the software implementation of the proposed algorithm was performed.

PL

W artykule przedsawiono opracowane dwuskładnikowe uwierzytelnianie i spójny algorytm do użytku w zautomatyzowanym systemie w celu wygenerowania tymczasowego hasła za pomocą funkcji matematycznych. Wdrożono implementację oprogramowania w języku programowania JavaScript w trybie konsoli oraz przeprowadzono analizę implementacji.

12

Safety Mechanisms in Relational Database as Part of the IT System of the Enterprise

Berski Szymon, Bilau Martyna

New Trends in Production Engineering

|

2019

|

Vol. 2, Iss. 2

12-23

EN

The work examines the effectiveness of the replication mechanism of the X production company database. In order to extend the functionality of the computer database of the enterprise, a model of its resource flow was created and an intensional and extensional part was created for a test database based on real enterprise resources. The model has been simplified to 3-rd normal form. The implementation was done in the MySQL database system. Two different operating systems were selected for testing: Windows and Linux. The database management system (DBMS) is working under the GPL license. MySQL DBMS offers many security mechanisms, and to secure the database, system of users permissions to objects have been selected and also an encryption of access passwords for users and connections to servers was used. A replication engine based on the binary log and the model "main server and backup server" was used to create a copy of the enterprise data.

13

Generators of one-time two-factor authentication passwords

Ussatova Olga, Nyssanbayeva Saule

Informatyka, Automatyka, Pomiary w Gospodarce i Ochronie Środowiska

|

2019

|

T. 9, nr 2

60--63

EN

The paper presents algorithms for generating a one-time two-factor authentication passwords where application of trigonometric functions have been considered. To protect the opening of a one-time password, a secret string is read that consists of a sequence of randomly generated characters. The second factor is due to the fact that that the code has a certain validity period. The presented password generators allow the formation of secret words and trigonometric functions that the proposed two-factor authentication method consists of. The algorithm presented was implemented in Java Script. The algorithm includes blocks for checking randomly generated words and functions.

PL

W pracy przedstawiono algorytmy generowania jednorazowych, dwuczynnikowych haseł uwierzytelniających, w których uwzględniono zastosowanie funkcji trygonometrycznych. Aby chronić otwarcie jednorazowego hasła, odczytywany jest tajny ciąg składający się z sekwencji losowo generowanych znaków. Drugi składnik wynika z faktu, że kod ma określony okres ważności. Przedstawione generatory haseł umożliwiają tworzenie tajnych słów i funkcji trygonometrycznych, z których składa się proponowana metoda dwuczynnikowego uwierzytelniania. Przedstawiony algorytm został zaimplementowany w Java Script. Algorytm zawiera bloki do sprawdzania losowo generowanych słów i funkcji.

14

Współczesne zagrożenia dla przetwarzania danych osobowych w kontekście RODO i sprawy Facebook : Cambridge Analytica

Klepacz Tomasz, Przyjemski Władysław

Autobusy : technika, eksploatacja, systemy transportowe

|

2019

|

R. 20, nr 10-11

29--35

PL

W artykule przedstawiono współczesne zagrożenia wynikające z przetwarzania danych osobowych w systemach komputerowych z wykorzystaniem technik Big Data na przykładzie wydarzenia o największej w ostatnich latach wadze – Facebook – sprawa Cambridge Analytica. Dzięki ujawnieniu sprawy opinia publiczna otrzymała informacje o metodach wykorzystywanych w przetwarzaniu danych osobowych, ich potencjalnej skuteczności w marketingu biznesowym i politycznym, a także skali i łatwości dostępu do nich. To, co przez wiele lat było oczywiste dla każdego użytkownika Internetu, że wiele drobnych informacji o jego działalności jest gromadzonych przez dostawców różnego rodzaju usług, stało się oczywistością. Użytkownicy otrzymują obecnie szeroki zakres informacji, dostępny dzięki konsolidacji danych przez kilku głównych potentatów oraz ogromnej, powszechnie dostępnej, mocy obliczeniowej. Pozwala to oddziaływać na zachowanie i postawy osób, których dane dotyczą. Przestraszyło to zarówno zwykłych obywateli, jak i rządy. Artykuł stanowi próbę odpowiedzi na pytanie, czy ogólne, unijne rozporządzenie o ochronie danych może przeciwdziałać istniejącym zagrożeniom.

EN

The article presents contemporary threats resulting from the processing of personal data in computer systems using Big Data techniques on the example of an event with the largest in recent years weight – Facebook – Cambridge Analytica case. Thanks to the disclosure of the case, the public opinion received information about the methods used in the processing of personal data, their potential effectiveness in business and political marketing as well as the scale and ease of access to them. What for many years was obvious to every Internet user, that a lot of small pieces of information about his activity is collected by suppliers of various types of services has become a matter of course. However, users now get information what, by consolidating data from several major tycoons, thanks to the huge computing power commonly available, Big Data techniques, machine processing and artificial intelligence can be done with them. How seriously the behavior and attitudes of the data subjects can be influenced. It frightened both ordinary citizens and governments. The article is an attempt to answer whether the EU General Data Protection Regulation is able to respond to new threats.

15

Deriving workflow privacy patterns from legal documents

Robak Marcin, Buchmann Erik

Annals of Computer Science and Information Systems

|

2019

|

Vol. 18

555-563

EN

The recent General Data Protection Regulation (GDPR) has strengthened the importance of data privacy and protection for enterprises offering their services in the EU. Important part of intensified efforts toward better privacy protection is enterprise workflow redesign. It has been already found that the privacy level can be raised with applying the privacy by design principle when re(designing) workflows. A conforming and promising approach is to model privacy relevant workflow fragments as Workflow Privacy Patterns (WPPs) which provide abstract, ‘best practices‘ solution proposals to problems recurring in privacy-aware workflows. WPPs are intended to support process developers, auditors and privacy officers by providing pre-validated patterns that correspond with existing data privacy regulations. However, it is unclear yet how to obtain WPPs with an appropriate level of detail. In this paper, we will introduce our approach to derive WPPs from legal texts and other descriptive regulations. We propose a structure of a WPP, which we derive from pattern approaches from other research areas. We also show the steps for designing a WPP. We think that this approach can be an valuable input towards supporting privacy in enterprises.

16

Instrument design for cyber risk assessment in insurability verification

Bartolini D. N., Ahrens A., Zascerinska J.

Informatyka, Automatyka, Pomiary w Gospodarce i Ochronie Środowiska

|

2018

|

T. 8, nr 3

7--10

EN

Cyber risk assessment for insurability verification has been paid a lot of research interest as cyber insurance represents a new dynamic segment of market with considerable growth potential for insurers. As customer’s practices and processes consistently lead to the final overall result, customer's behaviour has to be described in detail. The aim of the present paper is to design an instrument (questionnaire) for customer’s cyber risk assessment in insurability verification. The method for building an instrument (questionnaire) is empirical research. Empirical research is based on use of empirical evidence. A questionnaire with 11 questions is proposed.

PL

Ocena ryzyka związana z bezpieczeństwem cybernetycznym jest przedmiotem dużego zainteresowania badawczego, ze względu na to, że bezpieczeństwo cybernetyczne stanowi nowy, dynamiczny segment rynku o znacznym potencjale wzrostu dla ubezpieczycieli. Ponieważ praktyki i procesy klienta w ciągły sposób wpływają na końcową ocenę, zachowanie klienta musi być szczegółowo opisane. Celem niniejszego artykułu jest opracowanie instrumentu (kwestionariusza) do oceny ryzyka cybernetycznego klienta w ramach weryfikacji ubezpieczenia. Metoda budowy instrumentu (kwestionariusz) to badania empiryczne. Badania empiryczne opierają się na wykorzystaniu dowodów empirycznych. Zaproponowano kwestionariusz składający się z 11 pytań.

17

Tokenization as a data security technique

Ogigau-Neamtiu F.

Zeszyty Naukowe AON

|

2016

|

nr 2(103)

124--135

EN

Nowadays, organisations, especially those which embrace the modern cloud computing technology, are facing the complex challenge of securing their data assets while providing modern IT services. Classical solutions for ensuring data security have consistent limitations in modern platforms due to factors like data sharing requirements, multi-tenancy, dynamic environment, high availability and reliability requirements, etc. One approach to address this problem is to implement encryption mechanisms which will provide the required security, but they depend on substantial investments in hardware and/or software and add supplementary complexity to those systems. This article analyses tokenization as an alternative strategy for ensuring data security in modern cloud computing systems by implementing mechanisms to hide sensitive data and restrict access to it. Tokenization systems are more easy to implement and can be used extensively for ensuring data security in IT systems.

18

Inspektorzy danych osobowych nowym wyzwaniem dla samorządów?

Lewandowski T.

Przegląd Komunalny

|

2016

|

nr 7

58--59

PL

Parlament Europejski 14 kwietnia 2016 r. zatwierdził nowe unijne przepisy dotyczące ochrony danych, które mają zapewnić przede wszystkim wysoki poziom ochrony danych w calej UE oraz jej dostosowanie do współczesnych wyzwań ery cyfrowej. Zmiany niosą za sobą implikacje również dla organów publicznych, w tym jednostek samorządu terytorialnego.

19

New challenges in network security

Bilski T.

Przegląd Elektrotechniczny

|

2016

|

R. 92, nr 12

228--232

EN

The purpose of the paper is to point out different security issues of network evolution and to point out new threats related to the network evolution. We will discuss such issues as: complexity of security tools, IPv4/IPv6 transition, new modes of operation, IoT (Internet of Things), BYOD (Bring Your Own Device), cloud computing, SDN (Software Defined Network), wireless transmission. The paper should be of interest to different groups of people, among them are researchers and designers in the security area, policy makers and users of modern networks.

PL

Celem jest wskazanie aspektów bezpieczeństwa związanych z ewolucją sieci komputerowych. Przedstawiono takie zagadnienia jak: złożoność narzędzi bezpieczeństwa, przejście z IPv4 na IPv6, nowe tryby działania, Internet Rzeczy, BYOD (Bring Your Own Device), przetwarzanie w chmurach, SDN (Software Defined Network), transmisja bezprzewodowa. Artykuł powinien zainteresować różne grupy, w tym: osoby badające i projektujące zabezpieczenia, twórców polityk bezpieczeństwa i użytkowników sieci.

20

Uwzględnianie ochrony danych w fazie projektowania

Mystek K.

Medical Robotics Reports

|

2016

|

vol. 5

54--56