Search

In information security context, social engineering is defined as malicious activities caused by cybercriminals by means of human interactions. It is mainly a psychological manipulation technique which gets benefit of human error to reach private information. This study used machine learning algorithms to predict individuals’ susceptibility to be tricked by social engineering attacks. Simulated scenarios were presented to study participants, and they were asked to identify whether each scenario was a social engineering attack or not. Different kinds of attacks related to various industries were integrated to social engineering simulations. For each participant, different types of social engineering scores were calculated according to their responses. Besides simulations, questionnaires related to demographics, technology usage, and personality traits were filled out by the participants. All of these collected data were used in building predictive classification and regression machine learning models. Through regression and classification models, it was aimed to proactively predict individuals’ social engineering risk levels and classify them into different risk groups in terms of different attack types. This research revealed that it is possible to predetermine the social engineering risk levels of individuals. This important finding means that possible attacks can be prevented by raising awareness before the attack occurs. Within the scope of this study, a social engineering risk detection mobile application has also been developed to give practitioners and policy makers an idea of what kind of systems can be developed in order to determine the risk levels of individuals and then to educate them about various attacks. The ones who need to take action against social engineering attacks will get benefit from findings of this research.

The use of cutting-edge digital technologies and the realization of right project, program, and portfolio (3P) initiatives can trigger the intended company-wide change and the digital transformation. Today, organizations need to increase their agility for managing their information technology (IT) projects and transforming their business models. The integration of agile perspective and business analysis (BA) approach has a great potential to increase the success of digital transformation. This study aims to provide an overview of state-of-the-art in agile business analysis in scope of digital transformation. In accordance with the well-known frameworks, general principles and promising techniques of Agile BA are highlighted and discussed. The regarding agile practices provide valuable guidelines for researchers and practitioners that how they can assist continuous feedback, continuous learning, continuous improvement, and continuous integration capabilities of organizations; and also how to maximize value to the stakeholders in agile project lifecycles and agile business transformations.

NFC (Near Field Communication) technology allows people to integrate their daily-use loyalty cards, credit cards etc. into their mobile phones. In addition to integrating those cards into mobile devices, NFC technology brings innovation opportunities to mobile communications. It enables two users to easily communicate and exchange data simply by touching two mobile phones to each other. The aim of this paper is to perform a brief review of the published NFC applications in literature and explored the benefits of these applications by classifying them in eight service domains. We believe that this analysis will provide valuable insights for performing rigorous and business relevant research on NFC applications and its service domains.

Un-keyed SIM cards do not contain the required security infrastructure to provide end-to-end encryption with Service Providers. Hence, new, emerging, or smart services those require end-to-end encryption between SIM card and a Service Provider is impossible. SIMSec key exchange protocol creates symmetric keys between SIM card and Service Provider. After a successful protocol execution, SIM card and Service Provider creates the symmetric keys and can perform end-to-end data encryption when required. In this paper, our aim is to analyze the SIMSec protocol's security. According to the results, SIM card and Service Provider can generate keys securely using SIMSec protocol., {"references":["B. Schneier, J. Kelsey, D. Whiting, D. Wagner, C. Hall, N. Ferguson, The Twofish encryption algorithm: a 128-bit block cipher, New York, NY: John Wiley & Sons, Inc., 1999.","J. Daemen, V. Rijmen, The design of Rijndael: AES-the advanced encryption standard, Secaucus, NJ: Springer, 2002","B. Schneier, \"Description of a new variable-length key, 64-bit block cipher (Blowfish),\" In Fast Software Encryption, R. Anderson, Ed. U.K: Springer, 1994, pp. 191-204.","W. Stallings, W, \"The advanced encryption standard,\" Cryptologia, vol. 26(3), pp. 165-188, July 2002","D. Coppersmith, \"The Data Encryption Standard (DES) and its strength against attacks,\" IBM journal of research and development, vol 38(3), pp. 243-250, May 1994","K. Ok, V. Coskun, C. Cevikbas, B. Ozdenizci, \"Design of a Key Exchange Protocol between SIM Card and Service Provider,\" in Proc. of 23rd Telecommunications forum TELFOR 2015, Belgrade, Serbia, 24-26 Nov ember 2015, pp. 281-284.","Casper: A Compiler for the Analysis of Security Protocols. Available online: http://www.cs.ox.ac.uk/gavin.lowe/Security/Casper/ (Accessed on December 2015).","K. Ok, V. Coskun, R. C. Cevikbas, \"Challenges and Risks for a Secure Communication between a Smartcard and a SP through Cellular Network,\" International Journal of Advances in Computer Networks and Its Security, vol 4(4), pp. 26-30, December 2014.","V. Coskun, B. Ozdenizci, K. Ok, \"The Survey on Near Field Communication,\" Sensors vol 15 (6), 13348-13405, June 2015.\n[10]\tB. Ozdenizci, V. Coskun, K. Ok, \"NFC Internal: An Indoor Navigation System,\" Sensors vol 15 (4), 7571-7595, March 2015.\n[11]\tB. Ozdenizci, K. Ok, V. Coskun, \"NFC Loyal for Enhancing Loyalty Services Through Near Field Communication,\" Wireless personal communications, vol 68(4), pp. 1923-1942, February 2013.\n[12]\tL. Atzori, A. Iera, G. Morabito, \"The internet of things: A survey,\" Computer networks vol 54(15), 2787-2805, April 2015.\n[13]\tD. Palma, J. E. Agudo, H. Sánchez, M. M. Macías, \"An Internet of Things Example: Classrooms Access Control over Near Field Communication,\" Sensors, vol 14, pp. 6998-7012, April 2014.\n[14]\tS. Karnouskos, \"Mobile payment: a journey through existing procedures and standardization initiatives,\" Communications Surveys & Tutorials, vol 6(4), pp. 44-66, 2004.\n[15]\tH. Rodrigues, R. José, A. Coelho, A. Melro, M. C. Ferreira, J. F. Cunha, M. P. Monteiro, C. Ribeiro, \"MobiPag: Integrated Mobile Payment, Ticketing and Couponing Solution Based on NFC,\" Sensors, vol 14, pp. 13389-13415, July 2014.\n[16]\tR. Song, \"Advanced smart card based password authentication protocol,\" Computer Standards & Interfaces, 32(5), pp. 321-325, October 2010.\n[17]\tC. T. Li, C. C. Lee, C. J. Liu, C. W. Lee, \"A robust remote user authentication scheme against smart card security breach,\" In Data and Applications Security and Privacy XXV, Y. Li, Ed. Virginia: Springer, 2011, pp. 231-238. \n[18]\tM. Badra, P. Urien, \"Toward SSL integration in SIM SmartCards,\" in Proc. of the Wireless Communications and Networking Conference, Atlanta, 2004, pp. 889-893. \n[19]\tH. Rongyu, X. Guolei, C. Chaowen, X. Hui, Q. Xi, Q. Zheng, \"A PK-SIM card based end-to-end security framework for SMS,\" Computer Standards & Interfaces, vol. 31(4), pp. 629-641, June 2009\n[20]\tY. Li, M. Chen, J. Nie, J. \"Mobile commerce security model construction based on sms,\" in Proc. 7th International Conf. Wireless Communications, Networking and Mobile Computing (WiCOM), Wuhan, China, 2011, pp. 1-3.\n[21]\tK. Markantonakis, K. Mayes, \"A Secure Channel protocol for multi-application smart cards based on public key cryptography,\" in Communications and Multimedia Security, D. Chadwick, B. Preneel, Ed. U.K.: Springer, 2005, 175, pp. 79-95. \n[22]\tE. Barker, W. Barker, W. Burr, W. Polk, M. Smid, \"Recommendation for key management-part 1: General (Revision 3),\" NIST special publication, 2006."]}

Mobile technology is so popular and overdosed adoption is inevitable in today’s world. As the mobile technologies have advanced, Service Providers (SP) have offered services via Smartphones and some of them required secure data communication between the Subscriber Identity Module (SIM) cards on Smartphones and the servers of SP. The latest SIM cards comply with recent specifications including secure domain generation, mobile signatures, pre-installed encryption keys, and other useful security services. Nevertheless, un-keyed SIM cards do not satisfy such requirements, thus end-to-end encryption between the SIM card and SP cannot be provided. In this paper, we provide a key exchange protocol, which creates a symmetric key through the collaborative work of the SIM card and the SP server. After a successful protocol performance, the SIM card and SP can perform end-to-end data encryption. After defining the protocol, we also discuss the security issues and provide a formal security analysis of the protocol using the Casper/FDR tool. Publisher's Version

Current capabilities of smart cards, Smartphones, and cellular network provoke companies to provide vast amount of services to the mobile users. Some of those services require end-to-end encryption between a Service Provider and a SIM card. Keyed SIM cards already contain the required structure for secure key generation and upload, whereas un-keyed SIM cards do not have the required capability for this. In this paper, we provide a key exchange protocol, which creates a symmetric key by the collaborative work of SIM card and the Service Provider server. After a successful protocol run, SIM card and Service Provider can perform end-to-end data encryption. Publisher's Version

In recent years, several smart card solutions for transportation services of cities with different technical infrastructures and business models has emerged considerably, which triggers new business and technical opportunities. In order to create a unique system, we present a novel, promising system called Multifunctional City Smart Card System to be used in all cities that provides transportation and loyalty services based on the MasterCard M/Chip Advance standards. The proposed system provides a unique solution for transportation services of large cities over the world, aiming to answer all transportation needs of citizens. In this paper, development of the Multifunctional City Smart Card system and system requirements are briefly described. Moreover, performance analysis results of M/Chip Advance Compatible Validators which is the system's most important component are presented., {"references":["Coskun, V., Ok K., and Ozdenizci, B., \"Near Field Communication (NFC): From Theory to Practice\", Chapter 2, Chapter 4 and Chapter 9, John Wiley and Sons, ISBN: 978-1-1199-7109-2, February 2012.","Osyter Online, Transport for London, https://oyster.tfl.gov.uk/oyster/ entry.do/. Access date: 28 December 2013.","London P., The London Oyster Card, Proceedings of the Transport Card Forum, Smartex, Newcastle, November 2003.","My Citycard, http://www.citycardnottingham.co.uk/. Access date: 28 December 2013.","Keith B., What do Bus and Rail Operators Want from Smart Cards?, Proceedings of the Transport Card Forum, Smartex, Newcastle, November 2003.","IETT, Istanbulkart, http://skart.iett.gov.tr/. Access date: 28 December 2013.","V. Coskun, B. Ozdenizci, F. Soylemezgiller, M. Kalender, \"Multifunctional City Smart Card based on M/Chip Advance Technology\", The Conference on Web Based Management, pp. 469-472, Schangai, China, 21-23 September 2012."]}

FC (Near Field Communication) technology facilitates mobile phone usage of billions of people throughout the world that offers diverse services ranging from payment and loyalty applications to access keys for offices and houses. NFC technology is one promising technology that have adopted smart card as secure element (SE) to provide a secure area for the execution of multiple applications and storing sensitive data. In this paper, we developed a framework to integrate NFC loyal system onto the cloud. We adapted NFC mobiles together with their SE to the cloud (Infrastructure as a Service - IaaS) using Cloud Computing methodology. Azercell Telecom MIKRO Bilgi State Oil Company of Azerbaijan Republic (SOCAR) Turkish Cooperation and Coordination Agency (TIKA) TUSIAB WOS:000345830600004

This book provides the technical essentials, state-of-the-art knowledge, business ecosystem and standards of Near Field Communication (NFC)by NFC Lab - Istanbul research centre which conducts intense research on NFC technology. In this book, the authors present the contemporary research on all aspects of NFC, addressing related security aspects as well as information on various business models. In addition, the book provides comprehensive information a designer needs to design an NFC project, an analyzer needs to analyze requirements of a new NFC based system, and a programmer needs to implement an application. Furthermore, the authors introduce the technical and administrative issues related to NFC technology, standards, and global stakeholders. It also offers comprehensive information as well as use case studies for each NFC operating mode to give the usage idea behind each operating mode thoroughly. Examples of NFC application development are provided using Java technology, and security considerations are discussed in detail. Key Features: Offers a complete understanding of the NFC technology, including standards, technical essentials, operating modes, application development with Java, security and privacy, business ecosystem analysis Provides analysis, design as well as development guidance for professionals from administrative and technical perspectives Discusses methods, techniques and modelling support including UML are demonstrated with real cases Contains case studies such as payment, ticketing, social networking and remote shopping This book will be an invaluable guide for business and ecosystem analysts, project managers, mobile commerce consultants, system and application developers, mobile developers and practitioners. It will also be of interest to researchers, software engineers, computer scientists, information technology specialists including students and graduates. Publisher's Version

Existing indoor navigation systems face with many different technical and usability problems. In this paper we present a Near Field Communication (NFC) based indoor navigation system called NFC Internal in order to eliminate the current indoor navigation problems. NFC Internal enables an easy data transfer for indoor navigation systems just by touching tags spread over a building or a complex. The proposed system has several benefits and has potential to increase the usability of these systems. We discuss the system requirements and explain the phases of NFC Internal through use cases. Publisher's Version

Near Field Communication (NFC) as a new emerging technology currently tries to find a suitable ecosystem. Development of new standards such as secure element, secure channel, as well as Java Card enables creating new ecosystems using a concurrent multi application platform based on Global Platform. We proposed NFC Loyal, which maintains data interaction and data sharing among payment and loyalty applications through our proposed structure, called as Secure Common Domain Management System (SCDM). SCDM as a centralized database management system on the smart card stores valuable iriformation provided by payment applications and shares them with loyalty applications. The direct outcome of using NFC Loyal is the increase in repeat purchases of customers; as well as a business plan among the payment firms, loyalty firms, and the smart card owner. We fully describe the technical including security architectures and background for the SCDM, and explain the details of the proposed model. Publisher's Version

Near Field Communication (NFC) is one of the emerging and promising technological developments, provides means to short range contactless communication for mobile phones and other devices alike. NFC has become an attractive research area for many academics due to its exploding growth and its promising applications and related services. An understanding the current status of NFC research area is necessary to maintain the advancement of knowledge in NFC research and to identify the gap between theory and practice. In this paper, we present a literature review on NFC. To facilitate the analysis of the literature, we propose a research framework and organize the NFC literature into four major categories; theory and development, applications and services, infrastructure, ecosystem. This rigorous and holistic literature review with the objective of bringing to the state-of-art in NFC design science research provides advancement of knowledge in NFC research and further research directions. Publisher's Version WOS:000330684100106

Near Field Communication (NFC), as one of the promising technological developments, provides means to short range contactless communication for mobile phones and other devices alike. NFC has become an attractive design science research area for many academicians due to its exploding growth. A better understanding of the current status of NFC research is necessary to identify the gap between theory and practice. In this paper, we evaluate NFC literature from a design science point of view and seven important guidelines of the design science research are employed for evaluating some of the NFC related studies which propose innovative artifacts. Design science perspective of NFC literature gives beneficial guidelines for future studies. This rigorous and holistic literature review with the objective of bringing to the state-of-art in NFC design science research provides advancement of knowledge in NFC research and further research directions. Publisher's Version