Management Information Systems Commons^™

Contingency Planning Amidst A Pandemic, Natalie C. Belford

KSU Proceedings on Cybersecurity Education, Research and Practice

Proper prior planning prevents pitifully poor performance: The purpose of this research is to address mitigation approaches - disaster recovery, contingency planning, and continuity planning - and their benefits as they relate to university operations during a worldwide pandemic predicated by the Novel Coronavirus (COVID-19). The most relevant approach pertaining to the University’s needs and its response to the Coronavirus pandemic will be determined and evaluated in detail.

Developing An Ai-Powered Chatbot To Support The Administration Of Middle And High School Cybersecurity Camps, Jonathan He, Chunsheng Xin

KSU Proceedings on Cybersecurity Education, Research and Practice

Throughout the Internet, many chatbots have been deployed by various organizations to answer questions asked by customers. In recent years, we have been running cybersecurity summer camps for youth. Due to COVID-19, our in-person camp has been changed to virtual camps. As a result, we decided to develop a chatbot to reduce the number of emails, phone calls, as well as the human burden for answering the same or similar questions again and again based on questions we received from previous camps. This paper introduces our practical experience to implement an AI-powered chatbot for middle and high school cybersecurity camps …

Factors That Influence Hipaa Secure Compliance In Small And Medium-Size Health Care Facilities, Wlad Pierre-Francois, Indira Guzman

KSU Proceedings on Cybersecurity Education, Research and Practice

This study extends the body of literature concerning security compliance by investigating the antecedents of HIPPA security compliance. A conceptual model, specifying a set of hypothesized relationships between management support, security awareness, security culture; security behavior, and risk of sanctions to address their effect on HIPAA security compliance is presented. This model was developed based on the review of the literature, Protection Motivation Theory, and General Deterrence Theory. Specifically, the aim of the study is to examine the mediating role of risk of sanctions on HIPAA security compliance.

Towards An Assessment Of Pause Periods On User Habituation In Mitigation Of Phishing Attacks, Amy Antonucci, Yair Levy, Martha Snyder, Laurie Dringus

KSU Proceedings on Cybersecurity Education, Research and Practice

Social engineering is the technique in which the attacker sends messages to build a relationship with the victim and convinces the victim to take some actions that lead to significant damages and losses. Industry and law enforcement reports indicate that social engineering incidents costs organizations billions of dollars. Phishing is the most pervasive social engineering attack. While email filtering and warning messages have been implemented for over three decades, organizations are constantly falling for phishing attacks. Prior research indicated that attackers use phishing emails to create an urgency and fear response in their victims causing them to use quick heuristics, …

Automated License Plate Recognition Using Existing University Infrastructure And Different Camera Angles, Andre Calitz, Matthew Hill

The African Journal of Information Systems

Number or license plate recognition has become an essential technology for traffic and security applications. Providing access control at any organization or academic institution improves the level of security. However, providing security personnel to manually control the access of vehicles at an academic institution is costly, time-consuming, and to a limited extent, error prone. This study investigated the use of an automated vehicle tracking system, incorporating experimental computer vision techniques for license plate recognition that runs in real-time to provide access control for vehicles and provide increased security for an academic institution. A vehicle monitoring framework was designed by using …

The Form, Function And Materiality Of Portable It In Inter-Organizational Control, Gamel O. Wiredu

The African Journal of Information Systems

Extant explanations of inter-organizational (IO) control are based on functional assumptions of information technology (IT) at the expense of structural assumptions. By focusing on structural assumptions, this paper explains how and why the formal and material properties of portable IT shape IO control. Based on analysis of portable IT mediation between a government agency and traders for tax administration, it was found that portable IT, with the support of the IO structure, reduces IO control. This occurs because portable IT invites users to subvert its connectivity and visibility with the support of the IO structure. Portable IT and IO structures …

Clarifying Is Project Complexity Through Factor Analysis, Nazeer Joseph, Carl Marnewick

The African Journal of Information Systems

Research shows that the information systems domain is underrepresented in project complexity as it has only eight percent representation within the project complexity landscape. Emphasis is placed mostly on generic project management and engineering project management. This begs the question of how well IS project complexity is understood in literature? The goal of this research is to perform the groundwork for developing new theoretical foundations for information systems (IS) project complexity by enriching previous work. Complexity theory was applied to develop a comprehensive theoretical model for IS project complexity. The IS project complexity (ISPC) model was developed and revealed that …

A Coordinated Communication & Awareness Approach For Information Security Incident Management: An Empirical Study On Ethiopian Organizations, Keshnee Padayachee, Elias Worku

The African Journal of Information Systems

The coordination of communication and awareness efforts in the process of Information Security Incident Management (ISIM) has been identified as a critical means of enhancing information security protection in organizations. This paper aims to explore the nuances of organizational information security with respect to the coordination of communication and awareness efforts among organizational stakeholders towards achieving a shared, interactive, and participatory ISIM. According to the findings of the study in the organizations sampled, it has been identified that reporting, communication, and awareness efforts within ISIM were found to be largely uncoordinated. The exploratory findings provided a rationale for the proposal …

Predicting Factors Contributing To Road Traffic Accident And Implying Driver’S Driving Behavior In Addis Ababa City,, Shimelis Shiferaw Deneke Mr., Shimelis Shiferaw Deneke Mr, Abdurahman Ali Endalkachew Mr, Shimelis Shiferaw Deneke, Abdurehman Ali

African Conference on Information Systems and Technology

This study tries to uncover which factor could be associated with Addis Ababa City rode traffic accident and implicate drivers driving behaviors based on the data collected from post-accident. Which is the capital city of Ethiopia. The main objective of this research is Appling data mining technique to explore on factors that could associated with drivers related factors with road traffic accident to provide an insight way to reduce road traffic accident. The data was collected from road traffic accident from the real-world data collected at accident time in Addis Ababa City/Ethiopia. Totally 4285 datasets with 20 attributes were used. …

Business - It Strategic Alignment Improvement Framework: A Case Study On An Ethiopian Bank, Menelik Belete, Yonas Hagos

African Conference on Information Systems and Technology

In recent years, the bank sector is heavily relies on IT and has been investing a lot to easily reach their customer and gain the competitive advantages. Unfortunately, due to alignment gap between the business and IT strategy, they were not able to maximize their IT return value. The purpose of this study is finding internal and external challenges that hinders business and IT strategy alignment in the context of an Ethiopian Bank, A. The study conducted as a qualitative case study. The main finding shows that vendor dependency, lack of proper system evaluation, lack of clear national regulation, external …

Adoption And Challenges Of Mobile Banking Systems In Ethiopia: The Case Of Cooperative Bank Of Oromiya, Ebisa Beyene

African Conference on Information Systems and Technology

The incorporation of information system into organizations for the purpose of getting competitive advantage, easing workload, providing intangible (soft) work place and coping up with technological advancement has become an indispensable for organizations. Due to these many companies (like banks) are getting advantages of information communication technology implementation like Mobile Banking (M-banking), Internet banking, Automatic Teller Machine, etc. Accordingly Ethiopian commercial banks have implemented Mbanking system into their service system. This research examine adoption of M-banking system in Ethiopia focusing on Cooperative bank of Oromiya with respect to the challenges which can influence the bank from taking advantage and expected …

Information Technology Disaster Recovery Plan (Itdrp) Framework For Banks In Ethiopia, Nigussie Tariku, Lemma Lessa

African Conference on Information Systems and Technology

IT services and solutions in the banking sector should be protected to keep the business continuity in a disastrous scenario. This study aims to develop an Information Technology Disaster Recovery Plan (IT DRP) framework in the case of Ethiopian Banks. Qualitative case study method is employed to investigate current best practices and challenges in Ethiopian banks. The findings indicated that Banks do not have IT DRP in place. Lack of framework, lack of focused group, lack of experiences, and lack of standardization are some of the challenges identified. Accordingly, the IT DRP framework is proposed for Banks of Ethiopia. The …

Factors Affecting Mobile Payment Adoption By Merchants In Ethiopia, Firehiwot Abebe, Lemma Lessa

African Conference on Information Systems and Technology

Nowadays the world witnessed a rapid growth in mobile commerce and widespread use of mobile devices. The growth of mobile commerce depends on widely accepted mobile payment systems. However, this trend is not well experienced in developing countries like Ethiopia. Even though merchants somehow benefited from the rapid growth in electronics commerce and use of mobile devices in ecommerce, they still hesitate to effectively employ in their day to day transactions. Little research has been conducted to examine and explain the merchants' views on the new payment technology. In this paper, we explore the factors that affect merchants’ adoption of …

Malaware Defensive: A Game To Train Users To Combat Malware, Tyler Moon, Tamirat Abegaz, Bryson Payne, Abi Salimi

Journal of Cybersecurity Education, Research and Practice

Several research findings indicate that basic cyber hygiene can potentially deter the majority of cyber threats. One of the ways cybersecurity professionals can prepare users to ensure proper hygiene is to help them develop their ability to spot the difference between normal and abnormal behavior in a computer system. Malware disrupts the normal behavior of a computer system. The lack of appropriate user training has been one of the main reasons behind the exposure of computer systems to threats, from social engineering to viruses, trojans, and ransomware. Basic knowledge about common behavioral characteristics of malware could help users identify potentially …

A Conceptual Information Technology Project Management Assurance Framework, Elizabeth Mkoba, Carl Marnewick

The African Journal of Information Systems

Over the last decade, information technology (IT) projects have continued to fail at an alarming rate. Project managers are still battling to manage and deliver successful IT projects in organizations. The conceptual information technology project management assurance framework developed consists of project assurance processes. The conceptual framework was validated through a survey of 121 IT project managers from organizations in seven African countries. The purpose of this paper is to present research findings on how well project assurance processes are implemented and their importance in achieving a successful IT project outcome in organizations. The findings indicate that most project assurance …

Causes Of Challenges In Implementing Computer-Based Knowledge Management Systems In Healthcare Institutions: A Case Study Of Private Hospitals In Johannesburg, South Africa, George Maramba, Alfred Coleman, Felix F. Ntawanga

The African Journal of Information Systems

The advent of computer-based knowledge management systems has changed the world, especially in the way businesses operate, making them an integral aspect to modern economies and the drivers of success. Studies show that the implementation of computer-based knowledge management systems is challenging, particularly in healthcare institutions. This paper presents a study that was undertaken to identify the causes of challenges encountered when implementing computer-based knowledge management systems in healthcare institutions. A case was used as this study’s research methodology in which three private hospitals based in Johannesburg, South Africa, were utilized. Six participants, two from each private hospital, were purposively …

In-Service Biology Teachers’ Perceptions And Pedagogical Rating Of Two Mobile Learning Applications Recommended For Learning Biology In Nigerian Secondary Schools, Uchenna Udeani Prof, Jeremiah Nosakhare Akhigbe Mr

The African Journal of Information Systems

The study investigated in-service biology teachers’ perceptions of the instructional use of smartphones equipped with Biology Mobile Learning Applications (BMLAs) in the learning of biology concepts in Nigerian senior secondary schools and the pedagogical rating of two commercially available mobile learning applications recommended for learning biology. The study utilized a descriptive survey design. Data collected were analyzed using descriptive and inferential statistics. Findings gathered revealed that the in-service biology teachers had good perceptions of the instructional use of BMLAs and that these perceptions influence their pedagogical rating and selection of mobile applications. The study also revealed that demographic variables such …

Individual It Uses And Their Antecedents: A Social Theory Perspective, Jason Williams

PhD in Business Administration Dissertations

The use of information technology (IT) is foundational to modern work systems. However, the IT use construct is not fully understood and has not been clearly defined. Confounding the understanding of IT use are similar, yet often conflicting, conceptualizations, indicative of the jangle fallacy. The jingle fallacy is also found in the inconsistent measures employed to study the IT use construct. Consequently, the existing literature does show that there are multiple forms of use. Further, adoptive IT use has long been understood to be fundamentally different from post-adoptive IT use, but few theories have sought to bring these two concepts …

Cyberbullying Among University Students: The Kenyan Experience, Joshua R A Ndiege, Gabriel Okello, Patrick K. Wamuyu

The African Journal of Information Systems

Although considerable literature has grown around cyberbullying, there are still only limited studies on this within developing economies, especially African countries. In particular, studies on cyberbullying in Africa have failed to have a direct focus on the prevalence of this phenomenon among students in universities. Not only does cyberbullying have an emotional-social impact, it has ramifications on the learning process as well. This subject remains of utmost relevance within academia, and a number of institutions continue to grapple with its impact. The study reported here is an exploratory investigation of 396 students from one of the private universities within Nairobi, …

Divergent Student Views Of Cybersecurity, Susan E. Ramlo, John B. Nicholas

Journal of Cybersecurity Education, Research and Practice

Cybersecurity is a worldwide issue and concern. Prior studies indicate that many people do not use cybersecurity best practices. Although these prior studies used large-scale surveys or interviews, this study used Q methodology [Q] because Q provides greater insight than Likert-format surveys. In fact, Q was created to scientifically study subjectivity. Within a Q study, various stages as well as philosophical, epistemological, and ontological principles represent a complete methodology. At first, Q researchers collect items that represent the broad range of communications about the topic (called the concourse). Although the items can be pictures, scents, or other means of communication, …

Teaching About The Dark Web In Criminal Justice Or Related Programs At The Community College And University Levels., Scott H. Belshaw, Brooke Nodeland, Lorrin Underwood, Alexandrea Colaiuta

Journal of Cybersecurity Education, Research and Practice

Increasingly, criminal justice practitioners have been called on to help solve breaches in cyber security. However, while the demand for criminal justice participation in cyber investigations increases daily, most universities are lagging in their educational and training opportunities for students entering the criminal justice fields. This article discusses the need to incorporate courses discussing the Dark Web in criminal justice. A review of existing cyber-criminal justice programs in Texas and nationally suggests that most community colleges and 4-year universities have yet to develop courses/programs in understanding and investigating the Dark Web on the internet. The Dark Web serves as the …

An Assessment Of Practical Hands-On Lab Activities In Network Security Management, Te-Shun Chou, Nicholas Hempenius

Journal of Cybersecurity Education, Research and Practice

With the advancement in technology over the past decades, networks have become increasingly large and complex. In the meantime, cyberattacks have become highly sophisticated making them difficult to detect. These changes make securing a network more challenging than ever before. Hence, it is critical to prepare a comprehensive guide of network security management for students assist them in becoming network security professionals.

The objective of this paper is to introduce a variety of techniques related to network security management, such as Simple Network Management Protocol (SNMP), event management, security policy management, risk management, access control, and remote monitoring. With the …

Editorial

Journal of Cybersecurity Education, Research and Practice

Editorial.

Enabling Factors And User Requirements For Microcredit Services Through Mobile Devices - Dar Es Salaam Tanzania Context., William Clifford Gomera, Jarkko Suhonen Dr., George Oreku Prof.

The African Journal of Information Systems

Microfinance institutions (MFIs) play a considerable role in providing capital to micro businesses (MBs) through microcredit services. However, the interplay between MFIs and MB owners has been hindered by several factors, such as challenges with information sharing. The current study aims at identifying the specific challenges of microcredit services in Dar es Salaam, Tanzania, and also at determining the enabling factors, preferred features, and general requirements for a mobile technology solution to support the interplay between MFIs and MBs. The participants in the study were 91 MB owners and 22 MFI officers, and the data for the study were collected …

Editorial, Michael E. Whitman, Herbert J. Mattord, Hossain Shahriar

Journal of Cybersecurity Education, Research and Practice

No abstract provided.

Gdom: Granulometry For The Detection Of Obfuscated Malware, John A. Aruta, N. Paul Schembari

Journal of Cybersecurity Education, Research and Practice

We describe the results of a master's thesis in malware detection and discuss the connection to the learning goals of the project. As part of the thesis, we studied obfuscation of malware, conversion of files into images, image processing, and machine learning, a process of benefit to both the student and faculty.

Malware detection becomes significantly more difficult when the malicious specimen is obfuscated or transformed in an attempt to avoid detection. However, computer files have been shown to exhibit evidence of structure when converted into images, so with image processing filters such as granulometry, it is possible to generate …

Making Good Decisions: An Attribution Model Of Decision Quality In Decision Tasks, Bethany Niese

PhD in Business Administration Dissertations

Decision-makers endeavor to obtain the decision quality which puts them in a position to reach their goals. In order to control or influence decision quality, the processes by which individuals form their beliefs must be understood. In addition, many decision makers rely on decision support technologies to help find patterns in data and make sense of the input, so these technologies must be considered in parallel with the processes.

There have been numerous studies conducted to illuminate the factors which affect decision quality, however, many of these studies focused on objective measures and factors. This approach ignores individual perception, belief, …

Effectiveness Of Tools In Identifying Rogue Access Points On A Wireless Network, Ryan Vansickle, Tamirat Abegaz, Bryson Payne

KSU Proceedings on Cybersecurity Education, Research and Practice

Wireless access points have greatly improved users' ability to connect to the Internet. However, they often lack the security mechanisms needed to protect users. Malicious actors could create a rogue access point (RAP), using a device such as the WiFi Pineapple Nano, that could trick users into connecting to an illegitimate access point (AP). To make them look legitimate, adversaries tend to setup RAPs to include a captive portal. This is very effective, since most public networks use captive portals as a means to provide genuine access. The objective of this study is to examine the effectiveness of RAP identification …

Automatic Security Bug Detection With Findsecuritybugs Plugin, Hossain Shahriar, Kmarul Riad, Arabin Talukder, Hao Zhang, Zhuolin Li

KSU Proceedings on Cybersecurity Education, Research and Practice

The security threats to mobile application are growing explosively. Mobile app flaws and security defects could open doors for hackers to easily attack mobile apps. Secure software development must be addressed earlier in the development lifecycle rather than fixing the security holes after attacking. Early eliminating against possible security vulnerability will help us increase the security of software and mitigate the consequence of damages of data loss caused by potential malicious attacking. In this paper, we present a static security analysis approach with open source FindSecurityBugs plugin for Android StThe security threats to mobile application are growing explosively. Mobile app …

Automated Reverse Engineering Of Automotive Can Bus Controls, Charles Barron Kirby, Bryson Payne

KSU Proceedings on Cybersecurity Education, Research and Practice

This research provides a means of automating the process to reverse engineer an automobile’s CAN Bus to quickly recover CAN IDs and message values to control the various systems in a modern automobile. This approach involved the development of a Python script that uses several open-source tools to interact with the CAN Bus, and it takes advantage of several vulnerabilities associated with the CAN protocol. These vulnerabilities allow the script to conduct replay attacks against the CAN Bus and affect various systems in an automobile without the operator’s knowledge or interaction.

These replay attacks can be accomplished by capturing recorded …