Challenges of Cybercrimes to Implementation of Legal Framework

Sattar, Zunaira; Riaz, Shazia; Shafia,; Mian, Ahmad U.

doi:10.1109/icet.2018.8603645

Cited by 7 publications

(8 citation statements)

References 1 publication

Supporting

Mentioning

Contrasting

Order By: Relevance

“…The past presence in the state of mechanisms for interagency planning to implement legislative policies appeared to be the most relevant factor in different nations. Numerous researchers previously depicted the importance of cybersecurity law [14,15] and implementation of cybersecurity law [16,17], a few have described the important factors that can influence the implantation of cybersecurity laws in different countries [12]. Our study will explain different elements and factors that influence the implementation of a law positively or negatively in developing economies.…”

Section: Introductionmentioning

confidence: 94%

Factors Influencing Implementation of Cybersecurity Laws in Developing Economies: Evidence with Quantitative Analysis from Pakistan

Bokhari¹

2022

Preprint

View full text Add to dashboard Cite

Abstract Law implementation seems to be a little-explored phenomenon, despite the reality that it has become abundantly obvious that law implementation is influenced by various factors prevalent in the country, and such factors can influence and hinder potential legislative implementation. This study examines a few of the key factors that influence cybersecurity law implementation in emerging economies such as Pakistan. Managers from banking and IT firms were surveyed about the law's implementation factors that could affect its implementation. The prominence of corruption, which is a significant obstacle to cybersecurity law implementation, appeared to be the most influencing factor in Pakistan. The findings from a sample of 172 respondents employing IBM SPSS 23.0 revealed that corruption, discrimination, illicit conduct, and ambiguity appeared to have a significant negative influence on cybersecurity law implementation, whereas expertise and public confidence emerged to have a significant positive influence on the implementation of cybersecurity laws in Pakistan.

show abstract

Section: Introductionmentioning

confidence: 94%

Factors Influencing Implementation of Cybersecurity Laws in Developing Economies: Evidence with Quantitative Analysis from Pakistan

Bokhari¹

2022

Preprint

View full text Add to dashboard Cite

show abstract

“…Dashora (2011) provided a glimpse into cybercrime in society, basing their research on several news media reports and portals (Dashora, 2011). Sattar et al (2018) investigated the need to eliminate cybercrime hazards as this was becoming more critical. Their work focused on subjects either part of victimization by cybercrimes (Sattar et al, 2018).…”

Section: Related Workmentioning

confidence: 99%

“…Sattar et al (2018) investigated the need to eliminate cybercrime hazards as this was becoming more critical. Their work focused on subjects either part of victimization by cybercrimes (Sattar et al, 2018). Ahmed et al (2018) proposed a framework for automatic and manual techniques to detect cybercrime and charge the offender with proof (Ahmed et al, 2018).…”

Section: Related Workmentioning

confidence: 99%

“…Several reasons lead to cybercrimes which are additionally dominant. These reasons could range from easy and cheap mobile phone or IoT device access to Internet access (Sattar et al, 2018). OWASP ASVS (2021) application security verification standards outline the various web application changing trends and how the attacks are impacting organizations.…”

Section: Introductionmentioning

confidence: 99%

Section: Introductionmentioning

confidence: 99%

See 2 more Smart Citations

Mitigating cybercrimes in an evolving organizational landscape

Yeboah-Ofori

Opoku-Boateng

2023

CRR

View full text Add to dashboard Cite

PurposeVarious organizational landscapes have evolved to improve their business processes, increase production speed and reduce the cost of distribution and have integrated their Internet with small and medium scale enterprises (SMEs) and third-party vendors to improve business growth and increase global market share, including changing organizational requirements and business process collaborations. Benefits include a reduction in the cost of production, online services, online payments, product distribution channels and delivery in a supply chain environment. However, the integration has led to an exponential increase in cybercrimes, with adversaries using various attack methods to penetrate and exploit the organizational network. Thus, identifying the attack vectors in the event of cyberattacks is very important in mitigating cybercrimes effectively and has become inevitable. However, the invincibility nature of cybercrimes makes it challenging to detect and predict the threat probabilities and the cascading impact in an evolving organization landscape leading to malware, ransomware, data theft and denial of service attacks, among others. The paper explores the cybercrime threat landscape, considers the impact of the attacks and identifies mitigating circumstances to improve security controls in an evolving organizational landscape.Design/methodology/approachThe approach follows two main cybercrime framework design principles that focus on existing attack detection phases and proposes a cybercrime mitigation framework (CCMF) that uses detect, assess, analyze, evaluate and respond phases and subphases to reduce the attack surface. The methods and implementation processes were derived by identifying an organizational goal, attack vectors, threat landscape, identification of attacks and models and validation of framework standards to improve security. The novelty contribution of this paper is threefold: first, the authors explore the existing threat landscapes, various cybercrimes, models and the methods that adversaries are deploying on organizations. Second, the authors propose a threat model required for mitigating the risk factors. Finally, the authors recommend control mechanisms in line with security standards to improve security.FindingsThe results show that cybercrimes can be mitigated using a CCMF to detect, assess, analyze, evaluate and respond to cybercrimes to improve security in an evolving organizational threat landscape.Research limitations/implicationsThe paper does not consider the organizational size between large organizations and SMEs. The challenges facing the evolving organizational threat landscape include vulnerabilities brought about by the integrations of various network nodes. Factor influencing these vulnerabilities includes inadequate threat intelligence gathering, a lack of third-party auditing and inadequate control mechanisms leading to various manipulations, exploitations, exfiltration and obfuscations.Practical implicationsAttack methods are applied to a case study for the implementation to evaluate the model based on the design principles. Inadequate cyber threat intelligence (CTI) gathering, inadequate attack modeling and security misconfigurations are some of the key factors leading to practical implications in mitigating cybercrimes.Social implicationsThere are no social implications; however, cybercrimes have severe consequences for organizations and third-party vendors that integrate their network systems, leading to legal and reputational damage.Originality/valueThe paper’s originality considers mitigating cybercrimes in an evolving organization landscape that requires strategic, tactical and operational management imperative using the proposed framework phases, including detect, assess, analyze, evaluate and respond phases and subphases to reduce the attack surface, which is currently inadequate.

show abstract