Search

Plagiarism in the classroom has changed since the period of 1997 to 2002, during which the author saw predominately word-for-word plagiarism in papers in his classes. Some came from single sources, but more often they came from two or more. With that kind of plagiarism, it was fairly easy, although time-consuming, to detect copying. Most students engaging in such behaviors believed their professors knew little about the World Wide Web, and many believed that few, if any, professors spent the time needed to check for plagiarism. The development of widely available plagiarism-detection tools also helped raise awareness and make it easier to check papers against online sources. [ABSTRACT FROM PUBLISHER]

A business information security course's goals and objectives are quite different from most traditional security courses, which focus on designing and developing new security technologies. Business information security primarily concerns the strategic, tactical, and operational management issues surrounding the planning, analysis, design, implementation, and maintenance of an organization's information security program. Core issues include asset valuation, auditing, business continuity planning, disaster recovery planning, ethics, organizational communication, policy development, project planning, risk management, security awareness education and training, and various legal issues such as liability and regulatory compliance. Because businesses can't afford to mitigate all security risks, students must learn methods to identify and justify the optimal amount of expenditures to ensure that their information assets are sufficiently protected. Students should also understand the technical components of security so they can appreciate the problems experienced by the people they manage. This paper describes my experiences in developing a business information security course that provides students the knowledge arid experience to succeed in today's competitive information-intensive corporate environment. [ABSTRACT FROM PUBLISHER]

Has the US become an ethically challenged nation? If so, what does that mean for information assurance (IA) educators? The annual Computer Security Institute (CSI)-Federal Bureau of Investigations (FBI) Computer Crime Survey, typically a barometer of computer crime in the US, presents alarming statistics about rising digital crime rates over our public networks. The survey, which gathered voluntary responses firm US corporations and government agencies, reports that computer crime incidents are reaching epidemic proportions. The erosion of teaching and practicing ethics, coupled with the widespread belief that the Internet provides unbreakable anonymity for users, is a recipe for disaster. The paper discusses ethics in an IA curriculum and IA educational recommendations. [ABSTRACT FROM PUBLISHER]

The sharing of data for the purposes of data analysis and research can have many benefits. At the same time, concerns and controversies about data ownership and data privacy elicit significant debate. So how do we utilize data in a way that protects individual privacy but still ensures that the data are of sufficient granularity that the analytics will be useful and meaningful? Data anonymization (also called de-identification, depending on the jurisdiction) is the process of removing detail in the data or adding other controls to reduce re-identification risk. Good anonymization should mitigate exposure and allow you to easily demonstrate that you have taken your responsibility toward data subjects seriously. [ABSTRACT FROM AUTHOR]

Automated decision making emerges as the enabler for risk-based and smarter security. However, ethics, privacy, and the General Data Protection Regulation (GDPR) provide a very challenging setting along with monitoring fairness and bias detection when applying artificial intelligence (AI) security solutions. [ABSTRACT FROM AUTHOR]

The Information Accountability Foundation (IAF) has launched the Artificial Intelligence and Ethics Project to encourage discussion of how organizations might apply ethical principles to data processing, especially in cases where computers, not people, make data-enabled decisions. [ABSTRACT FROM AUTHOR]

Emerging combinations of artificial intelligence, big data, and the applications these enable are receiving significant media and policy attention. Much of the attention concerns privacy and other ethical issues. In our article, we suggest that what is needed now is a way to comprehensively understand these issues and find mechanisms of addressing them that involve stakeholders, including civil society, to ensure that these technologies’ benefits outweigh their disadvantages. We suggest that the concept of responsible research and innovation (RRI) can provide the framing required to act with a view to ensuring that the technologies are socially acceptable, desirable, and sustainable. We draw from our work on the Human Brain Project, one potential driver for the next generation of these technologies, to discuss how RRI can be put in practice. [ABSTRACT FROM AUTHOR]

Every day, security professionals face off against adversaries who don't play by the rules.ÊTraditional information security education programs further compound the problem by forcing students to behave in a flawlessly ethical manner. As an alternative, this article suggests techniques for fostering creativity and an adversary mindset in information security students through carefully structured classroom cheating exercises. [ABSTRACT FROM PUBLISHER]

The Snowden disclosures illuminated a gap between what information is legally permissible to collect and what the populace feels is appropriate collection. But this distinction applies in other realms as well, raising important questions about private-sector collection and use of individuals' data. [ABSTRACT FROM PUBLISHER]

Fraud isn't new, but in the eyes of many experts, phishing and crimeware threaten to topple society's overall stability because they erode trust in its underlying computational infrastructure. Most people agree that phishing and crimeware must be fought, but to do so effectively, we must fully understand both types of threat; that starts by quantifying how and when people fall for deceit. In this article, we look closer at how to perform fraud experiments. Researchers typically use three approaches to quantify fraud: surveys, in-lab experiments, and naturalistic experiments. [ABSTRACT FROM PUBLISHER]

Our society is undergoing pervasive digitalization. It's not an understatement to say that every facet of human endeavor is being profoundly changed by computing and digital technologies. Naturally, such sweeping changes also bring forth ethical issues that computing professionals must deal with. But are they equipped to deal with them? This article also includes an erratum. In "Practical Evaluation of Internet Systems' Security Mechanisms," (P. Lubomski and H. Krawczyk, vol. 15, no. 1, 2017), there was an error in the equation that appeared on page 38. The equation should read: nZ + nL * 0.6 + nM * 0.3 + nH * 0.1/nT. [ABSTRACT FROM PUBLISHER]

On 28 December 2011, the US Department of Homeland Security, Science and Technology, Cyber Security Division released "The Menlo Report: Ethical Principles Guiding Information and Communication Technology Research" to the Federal Register to elicit the public's feedback. In this article, the authors briefly describe the road to this milestone, summarize the report and its companion document, and describe the next steps we should take as a community. [ABSTRACT FROM PUBLISHER]

The Declaration of Helsinki and Belmont Report motivated the growth of bioethics alongside traditional biomedical research. Unfortunately, no equivalently active ethics discipline has paralleled the growth of computer security research, where serious ethical challenges are regularly raised by studies of increasingly sophisticated security threats (such as worms, botnets, and phishing). In this absence, program committees and funding agencies routinely must judge the acceptability of research studies. Such judgments are often difficult because of a lack of community consensus on ethical standards, disagreement about who should enforce standards and how, and limited experience applying ethical decision-making methods. This article motivates the need for such a community, touching on the extensive field of ethical decision making, examining existing ethical guidelines and enforcement mechanisms used by the computer security research community, and calling the community to joint action to address this broad challenge. [ABSTRACT FROM PUBLISHER]

The author introduces the analytics process and presents ethical standards for private organizations using this process. [ABSTRACT FROM PUBLISHER]