11,273 research outputs found

    The Viability and Potential Consequences of IoT-Based Ransomware

    Get PDF
    With the increased threat of ransomware and the substantial growth of the Internet of Things (IoT) market, there is significant motivation for attackers to carry out IoT-based ransomware campaigns. In this thesis, the viability of such malware is tested. As part of this work, various techniques that could be used by ransomware developers to attack commercial IoT devices were explored. First, methods that attackers could use to communicate with the victim were examined, such that a ransom note was able to be reliably sent to a victim. Next, the viability of using "bricking" as a method of ransom was evaluated, such that devices could be remotely disabled unless the victim makes a payment to the attacker. Research was then performed to ascertain whether it was possible to remotely gain persistence on IoT devices, which would improve the efficacy of existing ransomware methods, and provide opportunities for more advanced ransomware to be created. Finally, after successfully identifying a number of persistence techniques, the viability of privacy-invasion based ransomware was analysed. For each assessed technique, proofs of concept were developed. A range of devices -- with various intended purposes, such as routers, cameras and phones -- were used to test the viability of these proofs of concept. To test communication hijacking, devices' "channels of communication" -- such as web services and embedded screens -- were identified, then hijacked to display custom ransom notes. During the analysis of bricking-based ransomware, a working proof of concept was created, which was then able to remotely brick five IoT devices. After analysing the storage design of an assortment of IoT devices, six different persistence techniques were identified, which were then successfully tested on four devices, such that malicious filesystem modifications would be retained after the device was rebooted. When researching privacy-invasion based ransomware, several methods were created to extract information from data sources that can be commonly found on IoT devices, such as nearby WiFi signals, images from cameras, or audio from microphones. These were successfully implemented in a test environment such that ransomable data could be extracted, processed, and stored for later use to blackmail the victim. Overall, IoT-based ransomware has not only been shown to be viable but also highly damaging to both IoT devices and their users. While the use of IoT-ransomware is still very uncommon "in the wild", the techniques demonstrated within this work highlight an urgent need to improve the security of IoT devices to avoid the risk of IoT-based ransomware causing havoc in our society. Finally, during the development of these proofs of concept, a number of potential countermeasures were identified, which can be used to limit the effectiveness of the attacking techniques discovered in this PhD research

    Volume CXLII, Number 16, March 3, 2023

    Get PDF

    A Design Science Research Approach to Smart and Collaborative Urban Supply Networks

    Get PDF
    Urban supply networks are facing increasing demands and challenges and thus constitute a relevant field for research and practical development. Supply chain management holds enormous potential and relevance for society and everyday life as the flow of goods and information are important economic functions. Being a heterogeneous field, the literature base of supply chain management research is difficult to manage and navigate. Disruptive digital technologies and the implementation of cross-network information analysis and sharing drive the need for new organisational and technological approaches. Practical issues are manifold and include mega trends such as digital transformation, urbanisation, and environmental awareness. A promising approach to solving these problems is the realisation of smart and collaborative supply networks. The growth of artificial intelligence applications in recent years has led to a wide range of applications in a variety of domains. However, the potential of artificial intelligence utilisation in supply chain management has not yet been fully exploited. Similarly, value creation increasingly takes place in networked value creation cycles that have become continuously more collaborative, complex, and dynamic as interactions in business processes involving information technologies have become more intense. Following a design science research approach this cumulative thesis comprises the development and discussion of four artefacts for the analysis and advancement of smart and collaborative urban supply networks. This thesis aims to highlight the potential of artificial intelligence-based supply networks, to advance data-driven inter-organisational collaboration, and to improve last mile supply network sustainability. Based on thorough machine learning and systematic literature reviews, reference and system dynamics modelling, simulation, and qualitative empirical research, the artefacts provide a valuable contribution to research and practice

    Corporate Social Responsibility: the institutionalization of ESG

    Get PDF
    Understanding the impact of Corporate Social Responsibility (CSR) on firm performance as it relates to industries reliant on technological innovation is a complex and perpetually evolving challenge. To thoroughly investigate this topic, this dissertation will adopt an economics-based structure to address three primary hypotheses. This structure allows for each hypothesis to essentially be a standalone empirical paper, unified by an overall analysis of the nature of impact that ESG has on firm performance. The first hypothesis explores the evolution of CSR to the modern quantified iteration of ESG has led to the institutionalization and standardization of the CSR concept. The second hypothesis fills gaps in existing literature testing the relationship between firm performance and ESG by finding that the relationship is significantly positive in long-term, strategic metrics (ROA and ROIC) and that there is no correlation in short-term metrics (ROE and ROS). Finally, the third hypothesis states that if a firm has a long-term strategic ESG plan, as proxied by the publication of CSR reports, then it is more resilience to damage from controversies. This is supported by the finding that pro-ESG firms consistently fared better than their counterparts in both financial and ESG performance, even in the event of a controversy. However, firms with consistent reporting are also held to a higher standard than their nonreporting peers, suggesting a higher risk and higher reward dynamic. These findings support the theory of good management, in that long-term strategic planning is both immediately economically beneficial and serves as a means of risk management and social impact mitigation. Overall, this contributes to the literature by fillings gaps in the nature of impact that ESG has on firm performance, particularly from a management perspective

    A Descriptive Qualitative Study Exploring Middle-School Teachers’ Perceptions of Professional Development on Technology Integration

    Get PDF
    Today’s teachers are being encouraged to incorporate technology into their classrooms. Technology integration became a worldwide focus for schools after remote learning was necessary to continue instruction due to the COVID-19 pandemic. Additionally, research shows that technology-infused lessons improve student achievement and increase student engagement. Despite efforts to support teachers throughout the technology integration process, concerns have developed. Preparing highly qualified teachers ready to incorporate technology into their teaching repertoire has developed additional stress factors. In this descriptive qualitative study, the researcher wanted to address the problem of teacher attrition, possibly related to stress factors associated with technology integration. The purpose of this qualitative descriptive study was to explore teachers’ perceptions of professional development opportunities that possibly improve the technology integration process. Additionally, the researcher wanted to identify stress factors associated with technology adoption and how professional development may help to reduce stress factors associated with technology integration in one middle school in New York. The researcher chose a qualitative descriptive study using Vygotsky’s social constructivist theory and Bandura’s social learning theory on self-efficacy as the theoretical framework. The researcher included an exposition of the literature sources, synthesized the research findings, and provided recommendations for practice and future research. The data collection process consisted of semistructured open-ended questions that were developed with the support of a panel of experts. There were 10 participants chosen using a snowball sampling strategy. This study’s findings were that professional development should be hands-on, continuous, and targeted to increase teachers’ personal level of engagement. Also, creating opportunities for colleague support systems reduced stress factors associated with technology integration. These peer support systems reduced the time required to research the most effective resources, digital tools, and applications as participants shared the resources with one another. Recommendations for practice included providing adequate professional development, offering appropriate infrastructure, and hands-on, targeted, continuous training for teachers to feel more comfortable developing technology-infused lessons. Recommendations for research include providing additional insight into teachers’ perceived benefits and motivation for technology integration and how stress factors associated with the technology adoption process possibly increase teacher attrition

    The ageing Caribbean: 20 years of the Madrid Plan of Action

    Get PDF
    This report assess the situation of older persons and reviews the actions taken in Caribbean countries and territories, particularly over the past five years, to implement the Madrid International Plan of Action on Ageing and related regional agreements. It contributes to the global and regional reviews of the Plan of Action, 20 years on from its adoption in 2002, and includes recommendations to further address population ageing and the rights of older persons in the Caribbean.Abstract .-- Introduction .-- I. Ageing, economic security and public policy .-- II. Ageing, health and care .-- III. Enabling and supportive environments .-- IV. Conclusions and key recommendations

    People make Places

    Get PDF
    For centuries Glasgow, as a bucolic fishing village and ecclesiastical centre on the banks of the River Clyde, held little of strategic significance. When success and later threats came to the city, it was as a consequence of explosive growth during the industrial era that left a significant civic presence accompanied by social and environmental challenges. Wartime damage to the fabric of the city and the subsequent implementation of modernist planning left Glasgow with a series of existential threats to the lives and the health of its people that have taken time to understand and come to terms with. In a few remarkable decades of late 20th century regeneration, Glasgow began to be put back together. The trauma of the second half of the 20th century is fading but not yet a distant memory. Existential threats from the climate emergency can provoke the reaction “what, again?” However, the resilience built over the last 50 years has instilled a belief that a constructive, pro-active and creative approach to face this challenge along with the recognition that such action can be transformational for safeguarding and improving people’s lives and the quality of their places. A process described as a just transition that has become central to Glasgow’s approach. Of Scotland’s four big cities, three are surrounded by landscape and sea only Glasgow is surrounded by itself. Even with a small territory, Glasgow is still the largest of Scotland’s big cities and by some margin. When the wider metropolitan area is considered, Glasgow is – like Birmingham, Manchester and Liverpool – no mean city. People make Places begins with a review of the concept and complexities of place, discusses why these matter and reviews the growing body of evidence that place quality can deliver economic, social and environmental value. The following chapters focus on the history and evolution of modern Glasgow in four eras of 19th and early 20th century industrialisation, de- industrialisation and modernism in mid 20th century, late 20th century regeneration and a 21st century recovery towards transition and renaissance, and document the process, synthesis and the results of a major engagement programme and to explore systematic approaches to place and consensus building around the principal issues. The second half of the work reflects on a stocktaking of place in contemporary Glasgow, looking at the city through the lenses of an international, metropolitan and everyday city, concluding with a review of the places of Glasgow and what may be learned from them revealing some valuable insights presented in a series of Place Stories included. The concluding chapter sets out the findings of the investigation and analysis reviewing place goals, challenges and opportunities for Glasgow over the decades to 2030 and 2040 and ends with some recommendations about what Glasgow might do better to combine place thinking and climate awareness and setting out practical steps to mobilise Glasgow’s ‘place ecosystem’
    corecore