The paper aims to examine the relationship between the declared level of engagement in personal data protection and the time spent using smartphones and the Internet, as well as gender and participants’ saving attitudes. The study was conducted as a survey on data privacy practices, including configuring privacy settings, reading data protection clauses, and physically securing documents. The analysis of the collected data showed that individuals who spent more time online declared fewer protective behaviours, which may indicate the effect of privacy fatigue or the automation of decision-making. The test results revealed no significant differences between women and men in overall engagement with data protection. The findings suggest that educational interventions and the design of privacy protection tools should consider individuals who use digital technologies intensively.
Maritime piracy remains a persistent threat to global trade and maritime security, demanding innovative countermeasures. This paper explores the potential of blockchain technology as a transformative tool in enhancing maritime safety and combating piracy. With its decentralized, transparent, and tamper-resistant architecture, blockchain offers significant advantages in tracking vessels and cargo in real time, securing transport documentation, and automating processes through smart contracts. The study highlights real-world applications such as TradeLens, CargoX, Guardtime, and VeChain, which illustrate the technology’s utility in strengthening maritime logistics and anti-piracy efforts. Despite these benefits, the paper also addresses key implementation challenges, including the lack of standardized protocols, high initial costs, integration difficulties with legacy systems, and the need for international collaboration. Ultimately, the article argues that while blockchain is not a panacea, it holds substantial promise as a strategic asset in the fight against maritime piracy.
Purpose: The purpose of this article is to identify and assess key factors that impact customer data security in agile organizations. The study aims to determine priorities in data security management and to indicate patterns in how respondents perceive these factors. Design/methodology/approach: The study was conducted using a survey method on a sample of 303 respondents in April-May 2023. The results were subjected to multivariate correspondence analysis (MCA) to identify relationships and patterns between data security factors. Findings: The results indicate that factors such as data encryption systems, access control, real-time monitoring, and employee training are key. The MCA analysis revealed the interconnections between these factors and identified areas for further optimization in data security. Research limitations/implications: The study is limited to agile organizations and relies on subjective opinions of respondents. The results may be extended in the future to other types of organizations or through the use of mixed methods to deepen the analysis. Practical implications: The presented results can support organizations in developing effective customer data protection strategies. Recommended actions include implementing advanced security systems, regular audits and intensifying employee training. Social implications: Improving customer data security strengthens consumer trust and loyalty while contributing to a more secure digital environment. These activities also respond to societal expectations related to respect for privacy and ethics in data management. Originality/value: The article provides a unique perspective on the issue of customer data security in the context of agile organizations. The use of MCA analysis allowed for an in-depth assessment of patterns and relationships between factors, which enriches the literature on the subject and supports decision-making in organizations striving for operational agility. Keywords:
Purpose: The purpose of this study is to identify and analyze the key factors that enhance data security in outsourcing processes. The research aims to provide practical recommendations for organizations seeking to mitigate risks associated with the transfer and management of sensitive information in an outsourcing context. Design/methodology/approach: The study employed a quantitative approach, utilizing a structured survey conducted in 2023 on a sample of 723 respondents. The collected data were analyzed using multiple correspondence analysis (MCA) to identify patterns and relationships between variables related to data security practices. Findings: The research highlights that developing a comprehensive data security policy, employing advanced encryption technologies, conducting regular security audits, and fostering employee awareness significantly enhance data security in outsourcing processes. The findings emphasize the interconnectedness of these factors and their collective role in minimizing security risks. Research limitations/implications: The study is limited by its reliance on a single quantitative method and a uniform sample, which may not fully capture sectoral or regional variations in outsourcing practices. Future research should explore qualitative methods and a more diverse sample to deepen the understanding of contextual factors affecting data security. Practical implications: The study provides actionable insights for organizations to improve data security through structured policies, technological advancements, and targeted training programs. It underscores the importance of collaboration with outsourcing providers to ensure adherence to high security standards. Social implications: Improved data security in outsourcing processes enhances trust between organizations, clients, and stakeholders. It contributes to broader societal benefits by safeguarding personal and sensitive information, thereby reducing the likelihood of data breaches and their associated consequences. Originality/value: This study integrates theoretical perspectives with empirical findings, offering a comprehensive understanding of data security challenges in outsourcing. The use of MCA provides a novel approach to identifying the interrelations between key determinants, delivering valuable insights for both academics and practitioners in the field.
Purpose: This study aims to explore the critical role of data security in continuous improvement within Industry 4.0 settings. It focuses on identifying how robust data security practices enable organizations to enhance operational efficiency, foster innovation, and protect sensitive information assets. Additionally, the research highlights the interplay between technological advancements, regulatory compliance, and proactive risk management in achieving sustainable organizational growth. Design/methodology/approach: The research adopts a mixed-method approach to investigate the role of data security in continuous improvement within Industry 4.0. A comprehensive literature review was conducted to identify key theoretical frameworks and best practices related to cybersecurity and continuous improvement. The study also incorporates case analysis of Industry 4.0 technologies, such as IoT, AI, and big data analytics, highlighting their integration with data security strategies. By analyzing real-world applications and leveraging predictive analytics and compliance audits, the research demonstrates how secure data practices can enhance organizational performance and foster innovation. Findings: The study identifies that data security is an indispensable component of continuous improvement in Industry 4.0. Secure data practices enhance decision-making, promote operational resilience, and enable proactive risk mitigation. Moreover, they support compliance with regulatory frameworks, such as GDPR and ISO 27001, while fostering a culture of innovation and trust among stakeholders. The findings also reveal significant challenges, including technological complexity, resource constraints, and rapidly evolving cyber threats. Research limitations/implications: The research is limited by the availability of empirical data on specific Industry 4.0 applications. Future studies could expand on the practical implementation of data security measures across diverse industries and explore the economic implications of continuous improvement strategies. Additional research on emerging technologies, such as blockchain and quantum computing, could further enrich the understanding of secure data management. Practical implications: The study provides actionable insights for businesses seeking to integrate data security into their continuous improvement processes. It emphasizes the importance of investing in advanced security technologies, workforce training, and compliance frameworks to enhance organizational resilience. These recommendations are particularly relevant for enterprises navigating the complexities of Industry 4.0. Originality/value: This paper contributes to the literature by linking data security directly with continuous improvement in Industry 4.0. It offers a novel perspective on the strategic importance of secure data practices, supported by both theoretical insights and practical applications. The findings are valuable to researchers, policymakers, and industry leaders focused on sustainable growth and technological innovation.
Digital technologies have transformed the business, including changes in Human Resources practices. As data-driven and evidence-based decision-making takes place, integrating HR analytics becomes essential for improving performance and strategic HR management. The dark side of HR analytics is yet to be explored, means the potential negative uses and ethical problematic consequences of analytics applications in HRM. This research aims to investigate the effect of data security concerns on Human Resource Analytics applications usage through the theoretical lens of Privacy Calculus Theory. Furthermore, to investigate the mediating role of perceived risk between data security concerns and HRA. This research aims to examine the moderating role of digital transparency clarity between perceived risk and HRA applications usage. The theoretical model of data security under the dark side of HR analytics that may impact HRA usage is grounded in the literature’s suggestions for future research. Using a purposive sampling technique, the data were gathered from 223 HR professionals working in Pakistan’s Telecom industry. The SmartPLS V4 was used to analyze the gathered data [...]
This paper presents a statistical analysis of the enhanced SDEx (Secure Data Exchange) encryption method, using a version that incorporates two session keys. This method has not previously been combined with the BLAKE3 hash function. The statistical analysis was conducted using the NIST Statistical Test Suite. Several real-world sample files were encrypted using the proposed method and then subjected to statistical analysis through selected tests from the NIST suite. These tests aimed to determine whether the resulting ciphertexts meet the criteria for pseudorandomness. Additionally, compression tests were performed using WinRAR, which confirmed that the ciphertexts are not compressible.
In today's digital age, the protection of personal and confidential customer data is paramount. With the increasing volume of data being generated and processed, organizations face significant challenges in ensuring that sensitive information is adequately protected. One of the critical steps in safeguarding this data is the detection and classification of personal and confidential information within text documents. This process involves identifying sensitive data, classifying it appropriately, and storing the results in a semi-structured format such for further analysis and action. The need for detecting and classifying sensitive data is driven by regulatory compliance, data security, risk management, and operational efficiency. Various methodologies, including rule-based systems, machine learning models, natural language processing (NLP), and hybrid approaches, are employed to detect and classify sensitive data. Large Language Models (LLMs) like GPT-3 and BERT, trained on extensive text data, are transforming data management and governance, areas crucial for SOC 2 Type 2 compliance. LLMs respond to prompts, guiding their output generation, and can automate tasks like data cataloging, enhancing data quality, ensuring data privacy, and assisting in data integration. These capabilities can support a robust data classification policy, a key requirement for SOC 2 Type 2.
PL
W dzisiejszej erze cyfrowej ochrona danych osobowych i poufnych informacji klientów jest niezwykle ważna. Wraz ze wzrostem ilości generowanych i przetwarzanych danych, organizacje stają przed znacznymi wyzwaniami w zapewnieniu odpowiedniej ochrony wrażliwych informacji. Jednym z kluczowych kroków w zabezpieczaniu tych danych jest wykrywanie i klasyfikacja danych osobowych i poufnych w dokumentach tekstowych. Proces ten obejmuje identyfikację wrażliwych danych, odpowiednią ich klasyfikację oraz przechowywanie wyników w ustrukturyzowanym formacie, takim jak JSON, w celu dalszej analizy i działań. Potrzeba wykrywania i klasyfikacji wrażliwych danych wynika z wymogów regulacyjnych, bezpieczeństwa danych, zarządzania ryzykiem i efektywności operacyjnej. Do wykrywania i klasyfikacji wrażliwych danych stosuje się różne metody, w tym systemy oparte na regułach, modele uczenia maszynowego, przetwarzanie języka naturalnego (NLP) oraz podejścia hybrydowe. Duże modele językowe (LLM), takie jak GPT-3 i BERT, szkolone na dużych zbiorach danych tekstowych, przekształcają zarządzanie danymi i ich nadzór, co jest kluczowe dla zgodności z SOC 2 Type 2. LLM odpowiadają na zapytania, kierując generowaniem ich wyników, i mogą automatyzować zadania, takie jak katalogowanie danych, poprawa jakości danych, zapewnienie prywatności danych i wspieranie integracji danych. Te możliwości mogą wspierać solidną politykę klasyfikacji danych, która jest kluczowym wymogiem dla SOC 2 Type 2.
In the era of growing popularity of cloud computing, ensuring data security in GIS (Geographic Information Systems) systems is becoming a key challenge. The purpose of this article is to analyze cloud data security practices and standards that can be used in GIS systems. The study used hazard and risk analysis methods, a literature review, interviews with experts and a case study. The results indicate that the most common threats to GIS data in the cloud include unauthorized access, ransomware attacks, and human error. Effective security practices include the use of advanced monitoring tools, data encryption, and the implementation of international standards such as ISO 27001, ISO 27017, and ISO 27018. The article concludes with recommendations for improving data security in the cloud and proposals for further research in this area.
Automatyka domowa szybko wykracza poza proste „jeśli - to”. Inteligentny dom przestaje jedynie reagować na zdarzenia - zaczyna przewidywać potrzeby domowników i optymalizować działanie urządzeń w czasie rzeczywistym. Sztuczna inteligencja i uczenie maszynowe analizują dane: z czujników, harmonogramy, prognozy pogody i profile zużycia energii, aby wcześniej uruchomić ogrzewanie, dopasować oświetlenie do pory dnia, czy wyregulować wentylację pod kątem jakości powietrza i komfortu termicznego. Kluczem nie jest już pojedyncza reguła, lecz model zachowania użytkownika oraz kontekst: pora doby, nasłonecznienie, obecność, taryfa energii. W artykule przyglądamy się, jak przejść od logiki reaktywnej do sterowania predykcyjnego (MPC/ML) w obszarach oświetlenia i HVAC, jakie wymagania stawiają aktualne normy oraz jak projektować instalacje, by były energooszczędne, bezpieczne cybernetycznie i przyjazne użytkownikowi.
The U.S. Department of Health and Human Services (HHS) and the Office for Civil Rights (OCR) enforce federal civil rights laws. This study analyzed the collected data on healthcare data breaches, which affected over 392 million records in the USA from 21 October 2009 until 19 April 2024, using text mining. Using Latent Dirichlet Allocation (LDA) and the Elbow methods, five major topics for text mining analysis were established. The analysis allowed to identify key breach reasons for targeting effective remedial actions and increasing data security awareness.
The main objective of the article is to conceptualise and operationalise a variable relating to a set of actions in all fields of human activity that reduce the risk of unauthorised use of personal data. In contrast to the approach focusing exclusively on technical ways of securing data, the proposed construct refers to a general reasonable caution in the disposal of one’s own personal data excluding technical aspects. Commitment to protecting one’s own personal data was operationalised using the author’s validated index. The high reliability coefficient (Cronbach’s alpha = 0.85) predisposes the developed tool for use in research on personal data security. In addition, a factor analysis was carried out in the article, allowing a rejection of the hypothesis that the variable in question has at least two independent dimensions, each of which includes activities carried out in the real or virtual world.
This article presents the results of a quasi-experimental study aimed at demonstrating the relationship between a unit educational activity in the form of a lecture on personal data risks and the level of commitment to ensuring the security of one’s own personal data. A proprietary tool with a high reliability index was used to measure the level of commitment – the dependent variable in this research. In the process of operationalizing the variable, use was made of the theory of attitude components. The studies, which were carried out according to the research plan involving a control group and only the final measurement, did not confirm the hypothesis that people subjected to educational activities would declare greater concern for their own data, and the connection was found to be small yet statistically significant.
The paper presents a laboratory model of a novel device for irreversible destruction of Flash memory. In the paper a short literature review on the topic of Flash memory destruction was performed. A basic description of laboratory model was given. Results of tests for the functionality of the Flash destruction device were presented. Tests proved usefulness of proposed solution.
PL
W artykule przedstawiono laboratoryjny model nowatorskiego urządzenia do nieodwracalnego niszczenia pamięci Flash. W artykule dokonano krótkiego przeglądu literatury na temat niszczenia pamięci Flash. Podano podstawowy opis modelu laboratoryjnego. Zaprezentowano wyniki badań funkcjonalności urządzenia niszczącego Flash. Testy wykazały przydatność zaproponowanego rozwiązania.
This research paper conducts a systematic review of the integration of blockchain technology with Enterprise Resource Planning (ERP) systems, a burgeoning field at the intersection of advanced technology and business management. The primary objective is to bridge the knowledge gap by synthesizing existing literature, providing insights into the current state, challenges, and potential of blockchain in enhancing ERP systems. The study follows a structured methodology involving four key stages: Literature Retrieval, Literature Screening, Biblio-metric Analysis, and Content Analysis. A comprehensive literature search in the Scopus database resulted in the identification and analysis of 250 scholarly articles, narrowed down to 66 relevant publications. The findings highlight a significant trend towards decentralized ERP solutions, driven by blockchain’s promise of enhanced security, transparency, and efficiency. Key areas impacted by blockchain integration include supply chain management, accounting, security, traceability, purchasing, and process automation within ERP systems. The bibliometric analysis reveals a growing academic interest in this domain, with a focus on scalability, data security, and interoperability. However, the integration faces challenges such as technical complexity, cultural resistance, and regulatory uncertainties. The study concludes that while blockchain presents transformative opportunities for ERP systems, realizing this potential requires overcoming substantial technical and organizational hurdles. Future research should concentrate on developing scalable, interoperable blockchain solutions, tailored to specific industry needs and compliant with regulatory standards, thereby facilitating widespread adoption and maximizing the benefits of blockchain in ERP systems.
E-waste refers to electronic products that are of no use, not working properly, and either close to or at the end of their “useful life”. Companies generate large amounts of e-waste when they replace old and outdated IT hardware with new technologies. Disposing of this e-waste is not so simple, as it may contain a significant amount of intellectual property in the form of data. Timely elimination of these records and data is very crucial to secure it. E-waste cannot just be discarded due to associated data security, confidentiality, compliance and environmental risks and policies. Even after deleting data, it can still be prone to social engineering attacks by malicious individuals. Data leakage is the unauthorized transmission of data from within an organization to an external destination or recipient, and it can be transferred electronically or physically. Nowadays, protecting data is of upmost importance for organizations. However, organizations still fail at destroying confidential data from their end-of-life equipment. This article focuses on how to detect data leakage and try to find those responsible for doing so. Different Data Loss Prevention (DLP) techniques that are currently being used by many organizations are discussed and some suggestions are provided for developing more consistent DLP and overcoming the weaknesses prevalent in these techniques. Furthermore, this article discusses various algorithmic, logical, and methodological foundations and procedures followed for large-scale data disposal, determining when the life of data comes to an end.
Rapid development of online medical technologies raises questions about the security of the patient’s medical data.When patient records are encrypted and labeled with a watermark, they may be exchanged securely online. In order to avoid geometrical attacks aiming to steal the information, image quality must be maintained and patient data must be appropriately extracted from the encoded image. To ensure that watermarked images are more resistant to attacks (e.g. additive noise or geometric attacks), different watermarking methods have been invented in the past. Additive noise causes visual distortion and render the potentially harmful diseases more difficult to diagnose and analyze. Consequently, denoising is an important pre-processing method for obtaining superior outcomes in terms of clarity and noise reduction and allows to improve the quality of damaged medical images. Therefore, various publications have been studied to understand the denoising methods used to improve image quality. The findings indicate that deep learning and neural networks have recently contributed considerably to the advancement of image processing techniques. Consequently, a system has been created that makes use of machine learning to enhance the quality of damaged images and to facilitate the process of identifying specific diseases. Images, damaged in the course of an assault, are denoised using the suggested technique relying on a symmetric dilated convolution neural network. This improves the system’s resilience and establishes a secure environment for the exchange of data while maintaining secrecy.
Data security in cloud services is achieved by imposing a broad range of privacy settings and restrictions. However, the different security techniques used fail to eliminate the hazard of serious data leakage, information loss and other vulnerabilities. Therefore, better security policy requirements are necessary to ensure acceptable data protection levels in the cloud. The two procedures presented in this paper are intended to build a new cloud data security method. Here, sensitive data stored in big datasets is protected from abuse via the data sanitization procedure relying on an improved apriori approach to clean the data. The main objective in this case is to generate a key using an optimization technique known as Corona-integrated Archimedes Optimization with Tent Map Estimation (CIAO-TME). Such a technique deals with both restoration and sanitization of data. The problem of optimizing the data preservation ratio (IPR), the hiding ratio (HR), and the degree of modification (DOM) is formulated and researched as well.
The article is devoted to the development of an information system for automating business processes of a modern enterprise with ensuring stability and reliability, which are implemented by the applications developed by the authors. Goal is to develop improvements to the core digitalization processes of enterprises for sustainable functioning. The authors carried out a deep analysis and described the main stages of the enterprise digitalization process: the process of document approval, business processes of personnel management, etc. The architecture of the information system, a description of business processes and the principles of reliability and fault tolerance of the system being developed have been developed. The developed desktop-client application provides connection to the information system with the help of working computers of the enterprise through a local network with access to the application server. This allows you to reduce damage from accidental or deliberate incorrect actions of users and administrators; separation of protection; a variety of means of protection; simplicity and manageability of the information system and its security system.
PL
Artykuł poświęcony jest opracowaniu systemu informatycznego do automatyzacji procesów biznesowych nowoczesnego przedsiębiorstwa z zapewnieniem stabilności i niezawodności, które są realizowane przez opracowane przez autorów aplikacje. Celem jest rozwijanie usprawnień podstawowych procesów cyfryzacji przedsiębiorstw dla zrównoważonego funkcjonowania. Autorzy przeprowadzili dogłębną analizę i opisali główne etapy procesu cyfryzacji przedsiębiorstwa: proces akceptacji dokumentów, procesy biznesowe zarządzania personelem itp. Zostały opracowane architektura systemu informatycznego, opis procesów biznesowych oraz zasady niezawodności i odporności na błędy tworzonego systemu. Opracowana aplikacja typu desktop-client zapewnia połączenie z systemem informacyjnym za pomocą pracujących komputerów przedsiębiorstwa poprzez sieć lokalną z dostępem do serwera aplikacji. Pozwala to na ograniczenie szkód wynikających z przypadkowych lub celowych nieprawidłowych działań użytkowników i administratorów; rozdzielenie ochrony; różnorodność środków ochrony; prostotę i łatwość zarządzania systemem informatycznym i jego systemu zabezpieczeń.
Budowanie oddolne, czyli transformacja energetyki w trybie innowacji przełomowej do elektroprosumeryzmu (TETIPE) wymaga integracji wielu obecnie odrębnych (silosowych) sektorów energetycznych. Są to sektory energii elektrycznej, ciepła, gazu, paliw ciekłych i stałych. Integracja realizowana w transformacji TETIPE doprowadzi do wygaszanie większości z nich, a to powoduje bardzo duży opór. W artykule proponuje się przeprowadzić transformację z wykorzystaniem osłon kontrolnych jednostek samorządu terytorialnego. Propozycja wynika, z jednej strony, z dużego dopasowania infrastruktury sieciowej do obszarów funkcjonowania samorządu, a z drugiej strony z możliwości wykorzystania doświadczeń samorządów w realizacji działań integrujących różne obszary, w tym mieszkańców, edukację, służbę zdrowia, ale również sektory energetyczne i przedsiębiorców. W artykule przedstawiono elektroprosumeryzację Polski za pomocą rozproszonych osłon kontrolnych powiązanych z jednostkami JST, w tym sposób pokrycia zapotrzebowania za pomocą źródeł OZE, oraz przedstawiono koszty krańcowe i średnioroczne wytwarzania energii w osłonach OK(JST). Opisano uwarunkowania wpływu osłon na sieć, zwłaszcza ze względu na rzeczywiste jej wykorzystanie przez rozproszone osłony elektroprosumenckie. Przedstawiono funkcjonalności wybranych rozwiązań technicznych przyłączanych na różnym poziomie napięć oraz zasygnalizowano kwestię wymiany danych i bezpieczeństwa. Opisano również przykłady oddolnych działań samorządów, weryfikujące koncepcję elektroprosumeryzmu.
EN
Bottom-up building i.e. energy transition in the mode of breakthrough innovation to electroprosumerism (TETIPE) needs inegration of many currently separate (silo) energy sectors. They are sectors of electrical energy, heat, gas, liquid and solid fuels. Integration realised in TETIPE transition will lead to phasing out of majority of these sectors and this will evoke resistance. Presented here is a suggestion to carry out the transition with the use of JST control front-ends. This suggestion arises, on the one hand, from the high level of network structure matching to JST functioning areas and, on the other, from possibility to making use of local governments in realisation of activities integrating various areas including inhabitants, education, health service and also energy and entrepreneurs' sectors. Brought forward is electroprosumerization of Poland with the help of distributed control front-ends connected with JSTs - including the method to meet demand for energy by means of RES sources - and shown are marginal and average annual costs of energy generation in OK(JST) front-ends. Described are coditions of the front-ends impact on networks, especially by virtue of their utilization by distributed electroprosumeric front-ends. Characterized are functionalities of selected technical solutions connected at various voltage levels and signalled is the issue of data exchange and security. Given are examples of JST grassroots activities verifying the concept of electroprosumerism.
JavaScript jest wyłączony w Twojej przeglądarce internetowej. Włącz go, a następnie odśwież stronę, aby móc w pełni z niej korzystać.