Entrepreneurship and Sustainability Issues

Enter to ENTREPRENEURSHIP AND
SUSTAINABILITY CENTER page

Enter to INSIGHTS INTO REGIONAL
DEVELOPMENT page

Navigation

Membership:

Recommended tools:

Get Mendeley Web Importer:

Join a global community of researchers using Kudos:

Received: 2023-11-11 | Accepted: 2024-03-11 | Published: 2024-03-30

Title

Reduction of cybersecurity risk via evaluating users' behaviour

Abstract

Since the 1990s, process analysis has attained a fundamental position among business management approaches. With the gradual development and expansion of digitalization in businesses that have begun to use advanced information systems, a demand also arose to survey the processes within companies, including retrospectively from the digital records of information systems. This requirement laid the foundation for the emergence of the scientific discipline known today as Process Mining. In the presented article, we introduce its basic concepts and point out the possibility of using them in the field of security analysis of the log of a general system, which creates digital records of its operation (a so-called journal or log). The result of using Process Mining methods is identifying unrecorded processes running in a system and various deviations from the expected system operation, which may signal security threats to the system itself or its operator. In the battle against hybrid threats, many resources are explicitly devoted to protecting cyberspace. The approach proposed in this article allows a system to be analysed as a whole, identifying patterns of behaviour that would not otherwise arouse suspicion in individual steps but, as a sequence of separate steps (processes), do not fall into the expected pattern of system behaviour. This can be used as a long-term sustainable concept in the fight against hybrid threats. An analysis of a system’s behavior can be built on continuous “learning” by labelling newly discovered processes as safe or unsafe, ensuring the long-term sustainability of this approach. The main advantage of the proposed analyses is that they run as an oversight of the system itself, analysing it only based on records from its event log. Therefore, no interventions are needed in the architecture and source code of the analysed system, and the analyses do not affect its operation or data.

Keywords

hybrid threats, process analysis, process mining, security, cyberspace, information systems, system behavior, cybersecurity, management

JEL classifications

E27 , F50 , G32

URI

http://jssidoi.org/jesi/article/1185

DOI

DOI 10.9770/jesi.2024.11.3(27)

Pages

387-407

Funding

he contribution arose as part of the national project “Increasing Slovakia’s resistance to hybrid threats by strengthening public administration capacities”, project code ITMS2014+: 314011CDW7. This project is supported by the European Social Fund.

This is an open access issue and all published articles are licensed under a
Creative Commons Attribution 4.0 International License