Design of a Novel Information System for Semi-automated Management of Cybersecurity in Industrial Control Systems

2023 | ACM Transactions on Management Information Systems | Citations: 0

Authors: Ameri, Kimia; Hempel, Michael; Sharif, Hamid; Lopez, Juan; Perumalla, Kalyan

Abstract: There is an urgent need in many critical infrastructure sectors, including the e ... Expand

Abstract: There is an urgent need in many critical infrastructure sectors, including the energy sector, for attaining detailed insights into cybersecurity features and compliance with cybersecurity requirements related to their Operational Technology (OT) deployments. Frequent feature changes of OT devices interfere with this need, posing a great risk to customers. One effective way to address this challenge is via a semi-automated cyber-physical security assurance approach, which enables verification and validation of the OT device cybersecurity claims against actual capabilities, both pre- and post-deployment. To realize this approach, this article presents new methodology and algorithms to automatically identify cybersecurity-related claims expressed in natural language form in ICS device documents. We developed an identification process that employs natural language processing (NLP) techniques with the goal of semi-automated vetting of detected claims against their device implementation. We also present our novel NLP components for verifying feature claims against relevant cybersecurity requirements. The verification pipeline includes components such as automated vendor identification, device document curation, feature claim identification utilizing sentiment analysis for conflict resolution, and reporting of features that are claimed to be supported or indicated as unsupported. Our novel matching engine represents the first automated information system available in the cybersecurity domain that directly aids the generation of ICS compliance reports. Collapse

Topics: IT security database system website Python electronic authentication

Methods: computational algorithm sentiment analysis natural language processing BERT language model

Business Inferences and Risk Modeling with Machine Learning; The case of Aviation Incidents

2023 | HICSS | Citations: 0

Authors: Cankaya, B.; Topuz, K.; Glassman, A.

Abstract: Machine learning becomes truly valuable only when decision-makers begin to depe ... Expand

Abstract: Machine learning becomes truly valuable only when decision-makers begin to depend on it to optimize decisions. Instilling trust in machine learning is critical for businesses in their efforts to interpret and get insights into data, and to make their analytical choices accessible and subject to accountability. In the field of aviation, the innovative application of machine learning and analytics can facilitate an understanding of the risk of accidents and other incidents. These occur infrequently, generally in an irregular, unpredictable manner, and cause significant disruptions, and hence, they are classified as "highimpact, low-probability" (HILP) events. Aviation incident reports are inspected by experts, but it is also important to have a comprehensive overview of incidents and their holistic effects. This study provides an interpretable machine-learning framework for predicting aircraft damage. In addition, it describes patterns of flight specifications detected through the use of a simulation tool and illuminates the underlying reasons for specific aviation accidents. As a result, we can predict the aircraft damage with 85% accuracy and 84% in-class accuracy. Most important, we simulate a combination of possible flight-type, aircraft-type, and pilot-expertise combinations to arrive at insights, and we recommend actions that can be taken by aviation stakeholders, such as airport managers, airlines, flight training companies, and aviation policy makers. In short, we combine predictive results with simulations to interpret findings and prescribe actions.A machine-learning (ML) algorithm was chosen for its fast performance, short run-time, and interpretability. The ML algorithms were compared and evaluated on a confusion matrix for their mean receiver operating characteristic curve (ROC), Collapse

Topics: decision making decision support system graphical user interface usability missing data

Methods: simulation machine learning multinomial logistic regression computational algorithm support vector machine

Trust in Online Ride-Sharing Transactions: Impacts of Heterogeneous Order Features

2023 | Journal of Management Information Systems | Citations: 0

Authors: Cheng, Xusen; Fu, Shixuan; Sun, Jianshan; Zuo, Meiyun; Meng, Xiangsong

Abstract: With the development of the sharing economy, online ride-sharing has become a pr ... Expand

Abstract: With the development of the sharing economy, online ride-sharing has become a primary form of commuting. Using secondary transaction data, this study investigates the associations between the heterogeneous features and mutual trust in sharing economy-driven online ride-sharing transactions. Based on an examination of 12,404 ride-sharing orders in Beijing, we propose a set of trust distribution maps using order location data to reveal heterogeneous spatial patterns of the relationship between online ride-sharing transactions and mutual trust. The results show that the historical order completion rate and order distance are positively associated with mutual trust in ride-sharing transactions, whereas order time and departure density negatively and significantly influence mutual trust. Furthermore, we use machine learning algorithms to predict trust. The implications for theory and practice and future research directions are discussed. Collapse

Topics: ride sharing platform sharing platform logistics management geographic information system online review

Methods: machine learning computational algorithm regression analysis method experiment exploratory data analysis

Theories: signaling theory

Prediction of hotel booking cancellations: Integration of machine learning and probability model based on interpretable feature interaction

2023 | Decision Support Systems | Citations: 0

Authors: Chen, Shuixia; Ngai, Eric W.T.; Ku, Yaoyao; Xu, Zeshui; Gou, Xunjie; Zhang, Chenxi

Abstract: Reliable hotel cancellation prediction can help establish appropriate operationa ... Expand

Abstract: Reliable hotel cancellation prediction can help establish appropriate operational strategies for hotel manage­ ment. In this sector, personal name records (PNR) data may be the most representative information source for prediction tasks. Despite the popularity of PNR, its inherent lack of availability has been commonly disregarded in the literature. Existing studies have directly input PNR into high-dimensional machine learning (ML) models to achieve cancellation predictions. Another type of model generates cancellation prediction based on the proba­ bility modeling of samples. In this study, we propose an interpretable feature interaction method to enrich the existing PNR information. Thereafter, we empirically assess the prediction performance of the two model classes. This study specifically determines whether or not the two methods can cross-fertilize each other to improve cancellation prediction. To do so, we propose a model integrating Bayesian networks (BNs) and Lasso regression for this prediction task. This study utilizes BNs for the probability model consistent with our correlated variables and dichotomous prediction setting. Moreover, we use a linear ML model (i.e., Lasso regression), given its ad­ vantages in reducing ineffective predictors and transparency for ranking feature importance. Empirical results show that the proposed integration model has better prediction performance, and the obtained BN estimators and interactive features are the most important predictors. This study contributes to the booking cancellation liter­ ature by proposing an interpretable feature interaction and a prediction method integrating two types of effective models. The obtained accurate and interpretable cancellation prediction further contributes to offering practical implications to hoteliers in managerial decision-making. Collapse

Topics: missing data decision making competitive advantage price management marketing management

Methods: lasso regression experiment computational algorithm robustness check parametric test

Accounting for Uncertainty in Deceptive Signaling for Cybersecurity

2023 | HICSS | Citations: 0

Authors: Cranford, E.; Ou, H.; Gonzalez, C.; Tambe, M.; Lebiere, C.

Abstract: Deceptive signaling has proven an effective method that can aid security analys ... Expand

Abstract: Deceptive signaling has proven an effective method that can aid security analysists and deter attacks on unprotected targets by strategically revealing information to an attacker. However, recent research has shown that uncertainty in real-time information processing can have a negative impact on the effectiveness of the defense algorithm. The current research developed a new algorithm, dubbed Confusion Signaling, that aims to account for uncertainty in an abstracted insider attack scenario. The results of cognitive model simulations and a human behavioral experiment reveal interesting and unexpected reactions under uncertainty. We discuss the implications of these findings for signaling algorithms that aim to account for uncertainty using deceptive signaling for cybersecurity. Collapse

Topics: IT security decision making accounting physical security

Methods: computational algorithm experiment simulation machine learning survey

Predictive Validation of Interaction Terms in PLS-SEM

2023 | International Conference on Information Systems | Citations: 0

Authors: Danks, Nicholas; Ray, Soumya

Abstract: ... Expand

Abstract: Collapse

Methods: partial least squares path modeling simulation structural equation modeling descriptive statistic statistical hypothesis test

Accessing the Design Science Knowledge Base - A Search Engine for the Accumulation of Knowledge Across Decentrally Organized Publications

2023 | DESRIST | Citations: 0

Authors: Gau, Michael; Maedche, Alexander; Brocke, Jan vom

Abstract: Design science research (DSR) intends to contribute design knowledge to the scie ... Expand

Abstract: Design science research (DSR) intends to contribute design knowledge to the scientific discourse in the field of Information Systems. However, such design knowledge is typically produced in isolated DSR projects and does not follow a systematic knowledge accumulation strategy in terms of refining or extending previous design knowledge. Towards a first step in fostering design knowledge reuse and supporting knowledge accumulation in DSR, we propose a design knowledge search engine facilitating access to existing design knowledge. In this paper, we present a knowledge extraction template, a mechanism to automatically extract design knowledge of existing DSR publications based on this template as well as a search interface. Applying DSR ourselves we report on the preliminary results and findings of the first design cycle and deliver (1) design requirements derived from the literature, (2) propose an initial set of design principles, (3) a prototypical implementation called DEKNOWSE, and (4) an evaluation of the first design cycle in a focus group with DSR researchers. We contribute design knowledge for the class of design knowledge extraction and search systems. Collapse

Topics: search engine SWOT analysis MySQL usability user interface

Methods: design science design artifact design requirement focus group design principle

Estimation Method for Roof‐damaged Buildings from Aero-Photo Images During Earthquakes Using Deep Learning

2023 | Information Systems Frontiers | Citations: 0

Authors: Fujita, Shono; Hatayama, Michinori

Abstract: Issuing a disaster certificate, which is used to decide the contents of a victim ... Expand

Abstract: Issuing a disaster certificate, which is used to decide the contents of a victim’s support, requires accuracy and rapidity. However, in Japan at large, issuing of damage certificates has taken a long time in past earthquake disasters. Hence, the government needs a more efficient mechanism for issuing damage certificates. This study developed an estimation system of roof-damaged buildings to obtain an overview of earthquake damage based on aero-photo images using deep learning. To provide speedy estimation, this system utilized the trimming algorithm, which automatically generates roof image data using the location information of building polygons on GIS (Geographic Information System). Consequently, the proposed system can estimate, if a house is covered with a blue sheet with 97.57 % accuracy and also detect whether a house is damaged, with 93.51 % accuracy. It would therefore be worth considering the development of an image recognition model and a method of collecting aero-photo data to operate this system during a real earthquake. Collapse

Topics: earthquake database system geographic information system

Methods: computational algorithm deep learning machine learning experiment survey

Responsible cognitive digital clones as decision-makers: a design science research study

2023 | European Journal of Information Systems | Citations: 0

Authors: Golovianko, Mariia; Gryshko, Svitlana; Terziyan, Vagan; Tuunanen, Tuure

Abstract: This study uses a design science research methodology to develop and evaluate th ... Expand

Abstract: This study uses a design science research methodology to develop and evaluate the Pi-Mind agent, an information technology artefact that acts as a responsible, resilient, ubiquitous cognitive clone – or a digital copy – and an autonomous representative of a human decision-maker. Pi-Mind agents can learn the decision-making capabilities of their “donors” in a specific training environment based on generative adversarial networks. A trained clone can be used by a decision-maker as an additional resource for one’s own cognitive enhancement, as an autonomous representative, or even as a replacement when appropriate. The assumption regarding this approach is as follows: when someone was forced to leave a critical process because of, for example, sickness, or wanted to take care of several simultaneously running processes, then they would be more confident knowing that their autonomous digital representatives were as capable and predictable as their exact personal “copy”. The Pi-Mind agent was evaluated in a Ukrainian higher education environment and a military logistics laboratory. In this paper, in addition to describing the artefact, its expected utility, and its design process within different contexts, we include the corresponding proof of concept, proof of value, and proof of use. Collapse

Topics: artificial intelligence decision making digital transformation legal context information system use

Methods: design artifact machine learning binary classification design science design principle

ARTIFICIAL INTELLIGENCE-AUGMENTED DECISION MAKING IN SUPPLY CHAIN MONITORING: AN ACTION DESIGN RESEARCH STUDY

2023 | European Conference On Information Systems | Citations: 0

Authors: Herath Pathirannehelage, Savindu; Jóhannsson, Jóhann; Shrestha, Yash; Krogh, Georg von

Abstract: Organizations are progressively adopting hybrid human-artificial intelligence ( ... Expand

Abstract: Organizations are progressively adopting hybrid human-artificial intelligence (AI) systems in decisionmaking processes, with human decisions being augmented by AI insights. Among the promising AI applications in supply chain monitoring (SCMo) are predictive maintenance systems that predict potential device failures and augment maintenance decisions, allowing for timely and efficient interventions. Despite the growing proliferation of such systems, prescriptive knowledge encompassing technical, business, and organizational aspects on how to design, develop, and deploy them in actual operational environments remains limited. To address this shortcoming of evidence-based design principles in practice, our action design research developed a predictive maintenance system that predicts SCMo device failures and augments the maintenance decisions about those devices. By doing so, we outline generalizable design principles to guide prospective predictive maintenance systems in SCMo. Collapse

Topics: artificial intelligence predictive maintenance organizational context decision making systems evaluation

Methods: machine learning design principle design artifact artificial neural network random forest classification

Theories: evidence-based design