Endre søk
Begrens søket
1 - 20 of 20
RefereraExporteraLink til resultatlisten
Permanent link
Referera
Referensformat
  • apa
  • harvard1
  • ieee
  • modern-language-association-8th-edition
  • vancouver
  • Annet format
Fler format
Språk
  • de-DE
  • en-GB
  • en-US
  • fi-FI
  • nn-NO
  • nn-NB
  • sv-SE
  • Annet språk
Fler språk
Utmatningsformat
  • html
  • text
  • asciidoc
  • rtf
Treff pr side
  • 5
  • 10
  • 20
  • 50
  • 100
  • 250
Sortering
  • Standard (Relevans)
  • Forfatter A-Ø
  • Forfatter Ø-A
  • Tittel A-Ø
  • Tittel Ø-A
  • Type publikasjon A-Ø
  • Type publikasjon Ø-A
  • Eldste først
  • Nyeste først
  • Skapad (Eldste først)
  • Skapad (Nyeste først)
  • Senast uppdaterad (Eldste først)
  • Senast uppdaterad (Nyeste først)
  • Disputationsdatum (tidligste først)
  • Disputationsdatum (siste først)
  • Standard (Relevans)
  • Forfatter A-Ø
  • Forfatter Ø-A
  • Tittel A-Ø
  • Tittel Ø-A
  • Type publikasjon A-Ø
  • Type publikasjon Ø-A
  • Eldste først
  • Nyeste først
  • Skapad (Eldste først)
  • Skapad (Nyeste først)
  • Senast uppdaterad (Eldste først)
  • Senast uppdaterad (Nyeste først)
  • Disputationsdatum (tidligste først)
  • Disputationsdatum (siste først)
Merk
Maxantalet träffar du kan exportera från sökgränssnittet är 250. Vid större uttag använd dig av utsökningar.
  • 1.
    Bergström, Erik
    et al.
    School of Informatics, University of Skövde, Skövde.
    Lundgren, Martin
    Luleå tekniska universitet, Institutionen för system- och rymdteknik, Digitala tjänster och system.
    Ericson, Åsa
    Luleå tekniska universitet, Institutionen för system- och rymdteknik, Digitala tjänster och system.
    Revisiting information security risk management challenges: a practice perspective2019Inngår i: Information and Computer Security, ISSN 2056-4961, Vol. 27, nr 3, s. 358-372Artikkel i tidsskrift (Fagfellevurdert)
    Abstract [en]

    Purpose – The study aims to revisit six previously defined challenges in information security risk management to provide insights into new challenges based on current practices.

    Design/methodology/approach – The study is based on an empirical study consisting of in-depth interviews with representatives from public sector organisations. The data were analysed by applying a practice-based view, i.e. the lens of knowing (or knowings). The results were validated by an expert panel.

    Findings – Managerial and organisational concerns that go beyond a technical perspective have been . found, which affect the ongoing social build-up of knowledge in everyday information security work.

    Research limitations/implications – The study has delimitation as it consists of data from four public sector organisations, i.e. statistical analyses have not been in focus, while implying a better understanding of what and why certain actions are practised in their security work.

    Practical implications – The new challenges that have been identified offer a refined set of actionable advice to practitioners, which, for example, can support cost-efficient decisions and avoid unnecessary security trade-offs.

    Originality/value – Information security is increasingly relevant for organisations, yet little is still known about how related risks are handled in practice. Recent studies have indicated a gap between the espoused and the actual actions. Insights from actual, situated enactment of practice can advise on process adaption and suggest more fit approaches.

  • 2.
    Chronéer, Diana
    et al.
    Luleå tekniska universitet, Institutionen för system- och rymdteknik, Digitala tjänster och system.
    Ståhlbröst, Anna
    Luleå tekniska universitet, Institutionen för system- och rymdteknik, Digitala tjänster och system.
    Habibipour, Abdolrasoul
    Luleå tekniska universitet, Institutionen för system- och rymdteknik, Digitala tjänster och system.
    Urban Living Labs: Towards an Integrated Understanding of Their Key Components2019Inngår i: Technology Innovation Management Review, ISSN 1927-0321, E-ISSN 1927-0321, Vol. 9, nr 3, s. 50-62Artikkel i tidsskrift (Fagfellevurdert)
    Abstract [en]

    In today’s ongoing urbanization and escalating climate change, there is an increasing demand on cities to be innovative and inclusive to handle these emerging issues. As an answer to these challenges, and in order to generate and adopt sustainable innovations and nature-based solutions in the urban areas, the concept of urban living labs has emerged. However, to date, there is confusion concerning the concept of the urban living lab and its key components. Some interpret the urban living lab as an approach, others as a single project, and some as a specific place – and some just do not know. In order to unravel this complexity and better understand this concept, we sought to identify the key components of an urban living lab by discussing the perspective of city representatives in the context of an urban living lab project. To achieve this goal, we reviewed previous literature on this topic and carried out two workshops with city representatives, followed by an open-ended questionnaire. In this article, we identify and discuss seven key components of an urban living lab: governance and management structure; financing models; urban context; nature-based solutions; partners and users (including citizens); approach; and ICT and infrastructure. We also offer an empirically derived definition of the urban living lab concept.

  • 3.
    Drajic, Dejan
    et al.
    DunavNET, Serbia.
    Andersson, Karl
    Luleå tekniska universitet, Institutionen för system- och rymdteknik, Datavetenskap.
    Zhang, Kai
    Martel Innovate, Switzerland.
    Stembert, Nathalie
    Stembert Design, Netherlands.
    Malmberg, Katariina
    European Network of Living Labs, Belgium.
    Brékine, Anna
    Mandat International, Switzerland.
    Vanobberghen, Wim
    imec – SMIT – vrije Universiteit Brussel, Belgium.
    Habibipour, Abdolrasoul
    Luleå tekniska universitet, Institutionen för system- och rymdteknik, Digitala tjänster och system.
    Waeben, Jan
    imec – SMIT – vrije Universiteit Brussel, Belgium.
    User Engagement for Large Scale Pilots in the Internet of Things2019Inngår i: Proceedings of the 14th International Conference on Advanced Technologies, Systems and Services in Telecommunications, 2019Konferansepaper (Fagfellevurdert)
    Abstract [en]

    With an expected 50 billion connected devices by 2020, the Internet of Things (IoT) will reshape our environment with great economic opportunities. However, the IoT market evolution will depend directly on the end-user adoption, so it is necessary to support the Large Scale Pilots (LSPs) in order to actively engage end-users in the large scale pilot design, deployment and assessment. In this paper we are presenting end-user engagement methods, including co-creative workshops, crowdsourcing, Living Labs, and developed online tools and resources for end-user engagement, crowdsourcing and personal data protection.

  • 4.
    Elragal, Ahmed
    et al.
    Luleå tekniska universitet, Institutionen för system- och rymdteknik, Digitala tjänster och system.
    Haddara, Moutaz
    Department of Technology, Kristiania University College, Oslo, Norway.
    Design Science Research: Evaluation in the Lens of Big Data Analytics2019Inngår i: Systems, ISSN 2079-8954, Vol. 7, nr 2, artikkel-id 27Artikkel i tidsskrift (Fagfellevurdert)
    Abstract [en]

    Abstract: Given the different types of artifacts and their various evaluation methods, one of the main challenges faced by researchers in design science research (DSR) is choosing suitable and efficient methods during the artifact evaluation phase. With the emergence of big data analytics, data scientists conducting DSR are also challenged with identifying suitable evaluation mechanisms for their data products. Hence, this conceptual research paper is set out to address the following questions. Does big data analytics impact how evaluation in DSR is conducted? If so, does it lead to a new type of evaluation or a new genre of DSR? We conclude by arguing that big data analytics should influence how evaluation is conducted, but it does not lead to the creation of a new genre of design research.

  • 5.
    Elragal, Ahmed
    et al.
    Luleå tekniska universitet, Institutionen för system- och rymdteknik, Digitala tjänster och system.
    Hassanien, Hossam El-Din
    Luleå tekniska universitet, Institutionen för system- och rymdteknik, Digitala tjänster och system.
    Augmenting Advanced Analytics into Enterprise Systems: A Focus on Post-Implementation Activities2019Inngår i: Systems, E-ISSN 2079-8954, Vol. 7, nr 2, artikkel-id 31Artikkel i tidsskrift (Fagfellevurdert)
    Abstract [en]

    An analytics-empowered enterprise system looks to many organizations to be a far-fetched target, owing to the vast amounts of factors that need to be controlled across the implementation lifecycle activities, especially during usage and maintenance phases. On the other hand, advanced analytics techniques such as machine learning and data mining have been strongly present in academic as well as industrial arenas through robust classification and prediction. Correspondingly, this paper is set out to address a methodological approach that works on tackling post-live implementation activities, focusing on employing advanced analytics techniques to detect (business process) problems, find and recommend a solution to them, and confirm the solution. The objective is to make enterprise systems self-moderated by reducing the reliance on vendor support. The paper will profile an advanced analytics engine architecture fitted on top of an enterprise system to demonstrate the approach. Employing an advanced analytics engine has the potential to support post-implementation activities. Our research is innovative in two ways: (1) it enables enterprise systems to become self-moderated and increase their availability; and (2) the IT artifact i.e., the analytics engine, has the potential to solve other problems and be used by other systems, e.g., HRIS. This paper is beneficial to businesses implementing enterprise systems. It highlights how enterprise systems could be safeguarded from retirement caused by post-implementation problems.

  • 6.
    Habibipour, Abdolrasoul
    et al.
    Luleå tekniska universitet, Institutionen för system- och rymdteknik, Digitala tjänster och system.
    Padyab, Ali Mohammad
    Luleå tekniska universitet, Institutionen för system- och rymdteknik, Digitala tjänster och system. Luleå tekniska universitet, Institutionen för system- och rymdteknik, Datavetenskap.
    Ståhlbröst, Anna
    Luleå tekniska universitet, Institutionen för system- och rymdteknik, Digitala tjänster och system.
    Social, Ethical and Ecological Issues in Wearable Technologies2019Inngår i: Twenty-fifth Americas Conference on Information Systems, Cancun, 2019, 2019, s. 1-10Konferansepaper (Fagfellevurdert)
    Abstract [en]

    The rapid growth of Internet of Things (IoT) has given rise to a plethora of wearable devices integrated into daily life, however achieving end-user’s long-term adoption is still an issue. The purpose of this paper is to investigate social, ethical and ecological issues related to wearable technologies from end-users’ perspectives. We undertook a systematic literature review as well as two rounds of interviews with domain experts as well as end-users of IoT wearable devices to find relevant issues related to social, ethical and ecological. After synthesizing the results, eighteen issues found to be relevant to the wearable technologies. These issues have important implications for reducing the negative barriers that challenge the adoption of wearable technologies. The originality of this study lies with its non-technological focus that provides insights into issues that are rooted into individuals’ concerns.

  • 7.
    Holmström, Anton
    et al.
    Luleå tekniska universitet, Institutionen för system- och rymdteknik, Digitala tjänster och system.
    Barsk, Anton
    Luleå tekniska universitet, Institutionen för system- och rymdteknik, Digitala tjänster och system.
    Informationssäkerhet i kommunala förvaltningar: kultur, medvetenhet och ansvar2019Independent thesis Basic level (degree of Bachelor), 10 poäng / 15 hpOppgave
    Abstract [sv]

    Information hanteras, lagras och används av alla typer av verksamheter i sambandmed digitaliseringens framfart. Information är en drivande resurs för verksamhetersom en viktig biståndsdel i affärsprocesser och därför finns ett behov att skydda den.Informationssäkerhet är inte bara en teknisk fråga utan påverkas av organisationskultur,anställdas säkerhetsmedvetenhet samt ledning och individ. Studien användersig av en abduktiv forskningsansats med en kvalitativ datainsamling. I studien intervjuadesnio anställda från olika kommunala förvaltningar för att undersöka hurarbetet med informationssäkerhet bedrivs. I analysen undersöker vi hur den nuvarandesituationen ställer sig mot teorier om hur ett effektivt säkerhetsarbete skabedrivas. I diskussionen belyser vi vikten av ledningens delaktighet i verksamhetensinformationssäkerhet och hur det påverkar det systematiska säkerhetsarbetet.Vi diskuterar även hur individens roll påverkar säkerhetsarbetets effektivitet. Studienvisar hur informationssäkerheten i kommunala förvaltningar inte ligger i fas medbehovet och pekar på vikten av individen samt ledningens ansvar i säkerhetsarbetet.

  • 8.
    Khan, Hiba
    Luleå tekniska universitet, Institutionen för system- och rymdteknik, Digitala tjänster och system.
    What Are the Security Challenges Concerning Maintenance Data in the Railway Industry2019Independent thesis Advanced level (degree of Master (Two Years)), 20 poäng / 30 hpOppgave
    Abstract [en]

    Recently, technology advancement has brought improvement in all the sectors, including the railway sector. The Internet of Things (IoT) based railway systems have immense potential to improve quality and systems that will enable more efficient, environmental friendly railway system. Many research brought innovations that offer enormous benefits for rail travel. The current research focuses on the railway industries, as they want to reap the benefits of IT concept such as Cloud Computing, Information Security, and Internet of Things (IoT). Railway industries are generating a large volume of data every day from different sources. In addition, machine and human interactions are rapidly increasing along with the development of technologies. This data need to be properly gathered, analysed and shared in a way that it is safe from different types of cyberattacks and calamities. To overcome smart devices’ and Cloud’s limitations, the new paradigm known as Fog computing has appeared. In which an additional layer processes the data and sends the results to the Cloud. Despite numerous benefits of Fog, computing brings into IoT-based environments, privacy and security issues remain the main challenge for its implementation. Hence, the primary purpose of this research is to investigate the potential challenges, consequences, threats, vulnerabilities, and risk management of data security in the railway infrastructure in the context of eMaintenance.

  • 9.
    Källström, Elisabeth
    et al.
    Luleå tekniska universitet, Institutionen för teknikvetenskap och matematik, Produkt- och produktionsutveckling. Volvo Construction Equipment, Eskilstuna, Sweden.
    Lindström, John
    Luleå tekniska universitet, Institutionen för system- och rymdteknik, Digitala tjänster och system.
    Håkansson, Lars
    Linnaeus University, Växjö, Sweden.
    Karlberg, Magnus
    Luleå tekniska universitet, Institutionen för teknikvetenskap och matematik, Produkt- och produktionsutveckling.
    Lin, Jing
    Luleå tekniska universitet, Institutionen för samhällsbyggnad och naturresurser, Drift, underhåll och akustik.
    Vibration-based Condition Monitoring of Heavy Duty Machine Driveline Parts: Torque Converter, Gearbox, Axles and Bearings2019Inngår i: International Journal of Prognostics and Health Management, ISSN 2153-2648, E-ISSN 2153-2648, Vol. 10, artikkel-id 014Artikkel i tidsskrift (Fagfellevurdert)
    Abstract [en]

    As more features are added to the heavy duty construction equipment, its complexity increases and early fault detection of certain components becomes more challenging due to too many fault codes generated when a failure occurs. Hence, the need to complement the present onboard diagnostic methods with more sophisticated diagnostic methods for adequate condition monitoring of the heavy duty construction equipment in order to improve uptime. Major components of the driveline (such as the gearbox, torque converter, bearings and axles) are such components. Failure of these major components of the driveline may results in the machine standing still until a repair is scheduled. In this paper, vibration based condition monitoring methods are presented with the purpose to provide a diagnostic framework possible to implement onboard for monitoring of critical driveline parts in order to reduce service cost and improve uptime. For the development of this diagnostic framework, sensor data from the gearbox, torque converter, bearings and axles are considered. Further, the feature extraction of the data collected has been carried out using adequate signal processing methods, which includes, Adaptive Line Enhancer, Order Power Spectrum respectively. In addition, Bayesian learning was utilized for adaptively learning of the extracted features for deviation detection. Bayesian learning is a powerful prediction method as it combines the prior information with knowlegde measured to make update. The results indicate that the vibration properties of the gearbox, torque converter, bearings and axle are relevant for early fault detection of the driveline. Furthermore, vibration provide information about the internal features of these components for detecting deviations from normal behavior.

    In this way, the developed methods may be implemented onboard for the continuous monitoring of these critical driveline parts of the heavy duty construction equipment so that if their health starts to degrade a service and/or repair may be scheduled well in advance of a potential failure and in that way the downtime of a machine may be reduced and costly replacements and repairs avoided.

  • 10.
    Lindström, John
    et al.
    Luleå tekniska universitet, Institutionen för system- och rymdteknik, Digitala tjänster och system.
    Eliasson, Jens
    Luleå tekniska universitet, Institutionen för system- och rymdteknik, EISLAB.
    Petter, Kyösti
    Luleå tekniska universitet, Institutionen för system- och rymdteknik, ProcessIT Innovations R&D Centre.
    Andersson, Ulf
    Toward Predictive Maintenance of Walls in Hard Rock Underground Facilities: IoT-Enabled Rock Bolts2019Inngår i: Enterprise Interoperability VIII.  vol 9. Springer, Cham / [ed] Popplewell K., Thoben KD., Knothe T., Poler R., Cham: Springer, 2019, Vol. 8, s. 319-329Konferansepaper (Fagfellevurdert)
    Abstract [en]

    The paper addresses the first one-and-a-half cycles, out of four planned, in an action research effort concerned with predictive maintenance of walls and ceilings in tunnels of hard rock underground facilities by using Internet-of-Things-enabled Rock Bolts (IoTeRB). The IoTeRB concept is developed together with a consortium of companies ranging from rock bolt manufacturers, sensor specialists, researchers, and cloud-service providers to data analysts. Thus, the action research effort is a multi-disciplinary endeavor. The result of the paper is an action plan for the second cycle concerning technology and business development which, according to the design criterion, will move the IoTeRB toward commercialization.

  • 11.
    Lindström, John
    et al.
    Luleå tekniska universitet, Institutionen för system- och rymdteknik, Digitala tjänster och system.
    Hermanson, Anders
    Adage AB.
    Blomstedt, Fredrik
    BnearIT AB.
    Kyösti, Petter
    Luleå tekniska universitet, Institutionen för system- och rymdteknik, ProcessIT Innovations R&D Centre.
    A multi-usable cloud service platform: a case study on improved development pace and efficiency2019Inngår i: Smart Sustainable Manufacturing Systems / [ed] Dimitrios Kiritsis and Gökan May, Basel, Switzerland: MDPI, 2019, s. 38-51Kapittel i bok, del av antologi (Fagfellevurdert)
  • 12.
    Lindström, John
    et al.
    Luleå tekniska universitet, Institutionen för system- och rymdteknik, Digitala tjänster och system.
    Lejon, Erik
    Gestamp Hardtech AB.
    Kyösti, Petter
    Luleå tekniska universitet, Institutionen för system- och rymdteknik, Signaler och system.
    Mecella, Massimo
    University of Sapienza.
    Heutelbeck, Dominic
    FTK.
    Hemmje, Matthias
    FTK.
    Sjödahl, Mikael
    Luleå tekniska universitet, Institutionen för teknikvetenskap och matematik, Strömningslära och experimentell mekanik.
    Birk, Wolfgang
    Luleå tekniska universitet, Institutionen för system- och rymdteknik, Signaler och system.
    Gunnarsson, Bengt
    Data Ductus AB.
    Towards intelligent and sustainable production systems with a zero-defect manufacturing approach in an Industry4.0 context2019Inngår i: Procedia CIRP, vol 81 / [ed] Edited by Peter Butala, Edvard Govekar, Rok Vrabič, Elsevier, 2019, Vol. 81, s. 880-885Konferansepaper (Fagfellevurdert)
    Abstract [en]

    The paper addresses intelligent and sustainable production achieved through combination and integration of online predictive maintenance, monitoring of process parameters and continuous quality control of both input materials and output from the process. This enables production systems, within both manufacturing and process industries, to move towards zero-defect manufacturing. Such a zero-defect manufacturing approach allows for earlier identification of problems or issues, which will or already negatively affect the output. The paper outlines the first part of the second cycle of an action research effort at Gestamp HardTech AB in Sweden, whose objective is to keep its position as a world-leading provider of press-hardened vehicle parts. In order to fully implement the zero-defect manufacturing approach, 4-6 action research cycles are expected to be needed in order to iteratively refine the approach. During the first cycle, various methods and solutions for some of the individual issues/problems have been conceptualized, realized and initially tested. The selected design criteria for the action research efforts were: simplicity, low cost, robustness, high-quality output and future-proofing. The result from the research in the second cycle so far is an action plan for the technical change and a set of challenges/problems which need additional investigation.

  • 13.
    Lindström, John
    et al.
    Luleå tekniska universitet, Institutionen för system- och rymdteknik, Digitala tjänster och system.
    Viklund, Petra
    Luleå kommun.
    Fredrik, Tideman
    Luleå kommun.
    Berndt, Hällgren
    Luleå kommun.
    Jonny, Elvelin
    W3IT Norrbotten AB.
    Oh, no – not another policy! Oh, yes - an OT-policy!2019Inngår i: Procedia CIRP, vol 81 / [ed] Peter Butala, Edvard Govekar, Rok Vrabič, Elsevier, 2019, Vol. 81, s. 582-587Konferansepaper (Fagfellevurdert)
    Abstract [en]

    The paper addresses the need for a policy document in organizations concerned with Operational Technologies (OT) within their production and operational environments, and secondly how such an OT policy was developed and crafted by a Swedish municipality and its water production and wastewater management department. The first initial design criteria was to clearly distinguish the IT environment from the OT environment and the second design criteria was to achieve an improved, affordable and maintainable cybersecurity level for the OT environment. The results of the paper are an initial OT policy and an action plan for the necessary technical and organizational change in the OT environment.

  • 14.
    Lugnet, Johan
    et al.
    Luleå tekniska universitet, Institutionen för system- och rymdteknik, Datavetenskap. Luleå tekniska universitet, Institutionen för system- och rymdteknik, Digitala tjänster och system. Luleå University of Technology.
    Ericson, Åsa
    Luleå tekniska universitet, Institutionen för system- och rymdteknik, Datavetenskap. Luleå tekniska universitet, Institutionen för system- och rymdteknik, Digitala tjänster och system.
    Wenngren, Johan
    Luleå tekniska universitet, Institutionen för system- och rymdteknik, Datavetenskap. Luleå tekniska universitet, Institutionen för system- och rymdteknik, Digitala tjänster och system.
    Innovation supports for small-scale development in rural regions: A Create, Build, Test & Learn approach2019Inngår i: International Journal of Product Development, ISSN 1477-9056, E-ISSN 1741-8178Artikkel i tidsskrift (Fagfellevurdert)
    Abstract [en]

    Small and medium sized firms’ businesses in rural regions typically address a home market and the delivery of niched products. This makes them exposed to business downturns, innovation is thus one way to survive and prosper. Small-scale product development is typically very hands-on, a sort of trial and error process. This experimental way is in favour for the implementation of innovation processes, but one challenge is the limited resources that firms can, or are willing to, spend on innovative work. A challenge is that procedures for organisational learning are lacking in the straightforward approach. The article describes the background and rationale for supporting small-scale manufacturing by introducing a support toolbox for early product development work. The support toolbox’s rationale is built upon learning cycles and communicative prototyping which may enhance innovation process capabilities.

  • 15.
    Lundgren, Martin
    Luleå tekniska universitet, Institutionen för system- och rymdteknik, Digitala tjänster och system.
    Rethinking capabilities in information security risk management: a systematic literature reviewInngår i: International Journal of Risk Assessment and Management, ISSN 1466-8297, E-ISSN 1741-5241Artikkel i tidsskrift (Fagfellevurdert)
    Abstract [en]

    Information security risk management capabilities have predominantly focused on instrumental onsets, while largely ignoring the underlying intentions and knowledge these management practices entail. This article aims to study what capabilities are embedded in information security risk management. A theoretical framework is proposed, namely rethinking capability as the alignment between intent and knowing. The framework is situated around four general risk management practices. A systematic literature review using the framework was conducted, resulting in the identification of eight identified capabilities. These capabilities were grouped into respective practices: integrating various perspectives and values to reach a risk perception aligned with the intended outcome (identify); adapting to varying perspectives of risks and prioritizing them in accordance with the intended outcome (prioritize); security controls to enable resources, and integrate/reconfigure beliefs held by various stakeholders (implement); and sustaining the integrated resources and competences held by stakeholders to continue the alignment with the intended outcome (monitor).

  • 16.
    Lundgren, Martin
    et al.
    Luleå tekniska universitet, Institutionen för system- och rymdteknik, Digitala tjänster och system.
    Bergström, Erik
    University of Skövde.
    Dynamic Interplay in the Information Security Risk Management Process2019Inngår i: International Journal of Risk Assessment and Management, ISSN 1466-8297, E-ISSN 1741-5241, Vol. 22, nr 2, s. 212-230Artikkel i tidsskrift (Fagfellevurdert)
    Abstract [en]

    In this paper, the formal processes so often assumed in information security risk management and its activities are investigated. For instance, information classification, risk analysis, and security controls are often presented in a predominantly instrumental progression. This approach, however, has received scholarly criticism, as it omits social and organizational aspects, creating a gap between formal and actual processes. This study argues that there is an incomplete understanding of how the activities within these processes actually interplay in practice. For this study, senior information security managers from four major Swedish government agencies were interviewed. As a result, twelve characteristics are presented that reflect an interplay between activities and that have implications for research, as well as for developers of standards and guidelines. The study’s conclusions suggest that the information security risk management process should be seen more as an emerging process, where each activity interplays dynamically in response to new requirements and organizational and social challenges.

  • 17.
    Lundgren, Martin
    et al.
    Luleå tekniska universitet, Institutionen för system- och rymdteknik, Digitala tjänster och system.
    Bergström, Erik
    University of Skövde.
    Security-Related Stress: A Perspective on Information Security Risk Management2019Inngår i: Cyber Situational Awareness for Predictive Insight and Deep Learning, United Kingdom: IEEE, 2019, s. 273-280Konferansepaper (Fagfellevurdert)
    Abstract [en]

    In this study, the enactment of information security risk management by novice practitioners is studied by applying an analytical lens of security-related stress. Two organisations were targeted in the study using a case study approach to obtain data about their practices. The study identifies stressors and stress inhibitors in the ISRM process and the supporting ISRM tools and discusses the implications for practitioners. For example, a mismatch between security standards and how they are interpreted in practice has been identified. This mismatch was further found to be strengthened by the design of the used ISRM tools. Those design shortcomings hamper agility since they may enforce a specific workflow or may restrict documentation. The study concludes that security-related stress can provide additional insight into security-novice practitioners’ ISRM challenges. 

  • 18.
    McPhee, Chris
    et al.
    Carleton University, Technol Innovat Management, Ottawa, ON, Canada.Queens University, Biol, Kingston, ON, Canada.
    Ståhlbröst, Anna
    Luleå tekniska universitet, Institutionen för system- och rymdteknik, Digitala tjänster och system.
    Habibipour, Abdolrasoul
    Luleå tekniska universitet, Institutionen för system- och rymdteknik, Digitala tjänster och system.
    Runardotter, Mari
    Luleå tekniska universitet, Institutionen för system- och rymdteknik, Digitala tjänster och system.
    Chronéer, Diana
    Luleå tekniska universitet, Institutionen för system- och rymdteknik, Digitala tjänster och system.
    Editorial: Living Labs2019Inngår i: Technology Innovation Management Review, ISSN 1927-0321, E-ISSN 1927-0321, Vol. 9, nr 3, s. 3-5Artikkel i tidsskrift (Fagfellevurdert)
  • 19.
    Michel, Hannes
    Luleå tekniska universitet, Institutionen för system- och rymdteknik, Digitala tjänster och system.
    Visualizing audit log events at the Swedish Police Authority to facilitate its use in the judicial system2019Independent thesis Basic level (degree of Bachelor), 10 poäng / 15 hpOppgave
    Abstract [en]

    Within the Swedish Police Authority, physical users’ actions within all systems that manage sensitive information, are registered and sent to an audit log. The audit log contains log entries that consist of information regarding the events that occur by the performing user. This means that the audit log continuously manages massive amounts of data which is collected, processed and stored. For the police authority, the audit log may be useful for proving a digital trail of something that has occurred.

    An audit log is based upon the collected data from a security log. Security logs can collect datafrom most of the available systems and applications. It provides the availability for the organizationto implement network surveillance over the digital assets where logs are collected in real-time whichenables the possibility to detect any intrusion over the network. Furthermore, additional assets thatlog events are generated from are security software, firewalls, operating systems, workstations,networking equipment, and applications.

    The actors in a court of law usually don’t possess the technical knowledge required to interpret alog events since they can contain variable names, unparsed data or undefined values. Thisemphasizes the need for a user-friendly artifact of the audit log events that facilitates its use.

    Researching a way of displaying the current data format and displaying it in an improvedpresentable manner would be beneficial as an academic research by producing a generalizablemodel. In addition, it would prove useful for the internal investigations of the police authority sinceit was formed by their needs.

  • 20.
    Padyab, Ali Mohammad
    et al.
    Luleå tekniska universitet, Institutionen för system- och rymdteknik, Digitala tjänster och system.
    Päivärinta, Tero
    Luleå tekniska universitet, Institutionen för system- och rymdteknik, Digitala tjänster och system. University of Oulu, Finland.
    Ståhlbröst, Anna
    Luleå tekniska universitet, Institutionen för system- och rymdteknik, Digitala tjänster och system.
    Bergvall-Kåreborn, Birgitta
    Luleå tekniska universitet, Institutionen för system- och rymdteknik, Digitala tjänster och system.
    Awareness of Indirect Information Disclosure on Social Network Sites2019Inngår i: Social Media + Society, ISSN 2056-3051, E-ISSN 2056-3051, Vol. 5, nr 2Artikkel i tidsskrift (Fagfellevurdert)
    Abstract [en]

    This research investigates user awareness and attitudes toward potential inferences of information posted on social network sites (SNSs). The study reports how user attitudes change after exposure to inferences made based upon information they have disclosed on an SNS, namely, on Facebook. To demonstrate this, two sub-studies involving three focus group sessions were conducted with Facebook users. In the first sub-study, the users received a general introduction to information that can be inferred from posts by using a prototypical privacy-enhancement tool called DataBait. Then, the second sub-study allowed the users to witness the potential inferences of their own Facebook photos and posts by using the DataBait tool. Next, qualitative content analysis was conducted to analyze the results, and these showed that the participants’ attitudes toward privacy on SNSs changed from affective to cognitive when they became aware of potential inferences from actual information posted on their own Facebook accounts. The results imply that end users require more cognitive awareness regarding their genres of disclosure and the effect of their disclosures on their privacy. Moreover, as privacy awareness is contextual, there is a need for more research and development of online tools that will allow users to manage and educate themselves.

1 - 20 of 20
RefereraExporteraLink til resultatlisten
Permanent link
Referera
Referensformat
  • apa
  • harvard1
  • ieee
  • modern-language-association-8th-edition
  • vancouver
  • Annet format
Fler format
Språk
  • de-DE
  • en-GB
  • en-US
  • fi-FI
  • nn-NO
  • nn-NB
  • sv-SE
  • Annet språk
Fler språk
Utmatningsformat
  • html
  • text
  • asciidoc
  • rtf