Cybersecurity and Privacy
BackTrack Chairs
Jonna Järveläinen
University of Jyväskylä
+
Jonna Järveläinen is an associate professor (tenure track) of Information Systems Science at the Faculty of Information Technology, University of Jyväskylä, Finland. Her research interests lie in cybersecurity and business continuity management, game-based learning, educational escape rooms, and collective mindfulness. Her research has been published for example in the Journal of the Association for Information Systems, Communications of the Association for Information Systems, International Journal of Information Management, and International Conference on Information Systems.
Wael Soliman
University of Agder, Norway
+
Wael Soliman is an associate professor of information systems at the University of Agder. His research interests include informationsystems use lifecycle, cyber security, as well as philosophical discussions on research methods in IS. His work has been published invarious journals, including the Journal of the Association forInformation Systems, Journal of Information Technology, Information Systems Journal, Information & Management, Computers & Security,The Data Base for Advances in Information Systems, and the European Journal of Innovation Management, among others.
Marko Niemimaa
University of Agder, Norway
+
Marko Niemimaa is a professor at the University of Agder and an adjunct professor at the University of Turku. His research focuses onthe organizational aspects and implications of cybersecurity, and philosophical aspects of IS research, including sociomateriality. Heserves as an associate editor for the Journal of the Association of Information Systems and a guest editor for the European Journal of Information Systems. His work has been published in top-tier ISoutlets, such as the Journal of the Association for Information Systems, European Journal of Information Systems, International Journal of Information Management, Data Base, Communications ofthe Association for Information Systems, and Computers & Security.
Muriel-Larissa Frank
University of Luxembourg, Luxembourg
+
Muriel-Larissa Frank is a postdoctoral researcher at the University of Luxembourg. Her research focuses on the sociotechnical challenges of cybersecurity, understanding extra-role security behaviors, and the transformative potential of artificial intelligence in behavioral cybersecurity. Her work has been published in academic journals and conference proceedings in Information Systems, including DecisionSupport Systems, Computers & Security and the International Conference on Information Systems.
Cybersecurity, information security, and privacy are permanent news items and organizations are overwhelmed with emergent cyber threats, as individuals also are. The fast development and adoption of digital technologies together with rapid advancements and increased sophistication of the tools and techniques of the malicious actors leave organizations and individuals exposed to cybersecurity risks. Recently, for instance, the use of AI has shown its potential for not only effectively protecting against threats but also giving tools for cybercriminals to craft advanced and evermore convincing phishing attacks and diversions. Quantum computers will change the security game in the (near) future. Social engineering scams are costing individuals not only their money, but also their sensitive health information. In the midst of these rapid developments, employees are frequently portrayed as contributors to security risks, yet others view them as key to the solution. To address these cybersecurity and privacy challenges, we need new approaches and novel solutions for cybersecurity that not only protect the organization but respect people’s privacy and rights and empower them. As cybersecurity is not a chain but a complex network of people, technologies, and processes, the novel approaches must combine all these elements, also in different contexts and with diverse stakeholders.
We call for submissions that provide socio-technical approaches to cybersecurity and privacy in the landscape of emerging technologies and evolving threats. We welcome studies that build on different methodological approaches (e.g., qualitative, quantitative, design science) on cybersecurity, information security, and business continuity management and governance, within and across organizational boundaries. Information security policy compliance, economic perspectives, human behavior, training, and awareness as well as security culture papers are also invited. On privacy themes, relevant domains are for example privacy calculus, user behavior in the face of privacy threats as well as privacy concerns. We also welcome more traditional cybersecurity behavioral studies on security and privacy behavior.
Further, we invite submissions that address current topics and issues, such as the use of AI or machine learning for cybersecurity as well as cybersecurity in AI, cybersecurity inclusivity and accessibility for different user groups, and other emerging technologies and challenges. Additionally, we encourage researchers to critically look at the assumptions and values embedded in the current security and privacy research and approaches, which pave the future for empowering and emancipatory approaches to the human role in cybersecurity and privacy.
Track topics
Topics and questions relevant to the track include, but are not limited to:
(Gen)AI/ML for cybersecurity and privacy and cybersecurity in AI
Adoption and use of emerging security technologies and approaches (e.g., ZeroTrust, Security by Design) and (critical) analysis of their organizational implications- Business continuity, Cyber/digital resilience, and Cyber Security Incident Response Management
- Security functions as high reliability organizational (HRO) units
- Corporate strategies, governance, and compliance in cybersecurity and privacy, within and across organizational boundaries
- Critical research on current cybersecurity and privacy research themes such as problematizing the current role of humans in security and privacy
- Cybersecurity inclusivity and accessibility
- Cybersecurity and privacy risk analysis and management (including standards and standardization of cybersecurity management)
- Design and development of cybersecurity and privacy-enhancing technologies, tools, and methods
- Empowering humans in security and privacy, e.g. with gamification
- Human behavior and user-centric cybersecurity in cybersecurity and privacy
- Infrastructures and cybersecurity
- Interdependent and group privacy
- Privacy calculus, privacy concerns, and identity theft and deception in online communication
- Security and privacy of platforms, devices, and applications
- Socio-technical policies and mechanisms for countering cyber threats
- SETA programs and information security culture, e.g. community and team approach or intrinsic and extrinsic motivation to improve security and privacy behavior
Track Associate Editors
Hadi Ghanbari, Aalto University, Finland
Tawfiq Alashoor, IESE Business School, Spain
Duong Dang, University of Vaasa, Finland
Peter Bednar, University of Portsmouth, UK
Shuyan Metcalfe, Florida State University, US
Karin Hedström, Örebro University, Sweden
João Baptista, University of Lancaster, UK
Paolo Spagnoletti, LUISS, Italy
Rania El-Gazzar, University of Agder, Norway
Alaa Nehme, Mississippi State University, USA
Obi Ogbanufe, University of North Texas, USA
Sarfraz Iqbal, Linnaeus university, Sweden
Hwee-Joo Kam, University of Tampa, USA
Sean Maynard, The University of Melbourne, Australia
Thomas Widjaja, University of Passau, Germany
Fufan Liu, Institut Mines-Telecom Business School, France
Christine Abdalla Mikhaeil, IÉSEG School of Management, France
Mohammad Ovais Ahmad, Karlstad University, Sweden
Martin Brehmer, University of Augsburg, Germany
Tero Vartiainen, University of Vaasa, Finland
Nina Schirrmacher, University of Sydney, Australia
Hanna Paananen, University of Jyväskylä, Finland
Naomi Woods, University of Jyväskylä, Finland
Joakim Kävrestad, Jönköping School of Engineering, Sweden