Benchmarking the Robustness of Phishing Email Detection Systems

2023 | Americas Conference on Information Systems | Citations: 0

Authors: Ampel, Benjamin; Gao, Yang; Hu, James; Samtani, Sagar; Chen, Hsinchun

Abstract: Social engineering attacks are currently the most cited cybersecurity threat to ... Expand

Abstract: Social engineering attacks are currently the most cited cybersecurity threat to organizations. Phishing emails are the most salient form of social engineering attacks. Organizations are increasingly implementing AI-enabled systems to detect phishing emails. However, AI-enabled systems are often susceptible to textual perturbations, where an adversary makes a small change to cause a misclassification. In this study, we sought to identify the performance of prevailing phishing email detection systems (PEDS) against character, word, sentence, and multi-level adversarial text perturbations. Through a principled benchmarking framework, we quantitatively demonstrated the lack of robustness prevailing PEDS have to specific types of text-based adversarial perturbations (e.g., character, word, sentence, multi-level). The results of this study provide new insights into the robustness of AI-based PEDS and highlight the need for organizations to adopt a multi-layered approach to phishing protection. Additionally, organizations can implement our benchmark framework to test their PEDS against adversarial perturbations. Collapse

Topics: artificial intelligence electronic mail email phishing phishing IT security

Methods: word2vec random forest classification naïve bayes literature study pre-trained language model

The Effect of Consensus Algorithm on Ethereum Price and Volume

2023 | Americas Conference on Information Systems | Citations: 0

Authors: Ampel, Benjamin

Abstract: Cryptocurrencies, such as Bitcoin and Ethereum, are digital currencies operatin ... Expand

Abstract: Cryptocurrencies, such as Bitcoin and Ethereum, are digital currencies operating on a peer-to-peer network. Cryptocurrencies rely on consensus algorithms for transaction validation and network security. Ethereum recently replaced its proof-of-work (PoW) consensus algorithm with a proof-of-stake (PoS) algorithm on September 15, 2022. This research aims to study the following research question: Does changing from PoW to PoS consensus increase price and transaction volume? To answer this question, we implemented synthetic control methods to compare the pre-and post-treatment trends of the price and volume of Ethereum against a synthetic counterfactual. The result of our analysis suggests that Ethereum shifting from PoW to PoS had a positive effect on its price and a non-significant negative effect on transaction volume. Price increasing relative to the synthetic counterfactual is promising for convincing other PoW blockchains that a switch to PoS may lead to increased investment opportunities while decreasing the environmental impact. Collapse

Topics: Ethereum cryptocurrency Bitcoin knowledge base decision making

Methods: computational algorithm experiment synthetic control method experimental group longitudinal research

Managing compliance with privacy regulations through translation guardrails: A health information exchange case study

2023 | Information and Organization | Citations: 0

Authors: Anderson, Chad; Baskerville, Richard; Kaul, Mala

Abstract: Information privacy is increasingly important in our digitally connected world, ... Expand

Abstract: Information privacy is increasingly important in our digitally connected world, particularly in healthcare, and privacy regulations are ramping up to promote appropriate privacy practices. As a digital platform that enables healthcare providers to exchange protected health information (PHI), a health information exchange (HIE) is governed by health information privacy regula­ tions. The challenge for HIEs is to operate in a way that will maximize information exchange while maintaining compliance with regulations that may constrain the sharing of PHI. Regula­ tions impose a measure of universality through compliance requirements, while being flexible to allow adaptation to the local context. However, our longitudinal case study into the privacy policies of an HIE, demonstrates that the journey of privacy ideas from their original formulation in regulations, to their ultimate enactment in an organizational setting, is accompanied by translations, such that the final implementation may vary extensively from its original form. Such variability often results in interpretations that differ from what the regulators intended. Conse­ quently, translation guardrails are necessary to protect against problematic translations of reg­ ulatory ideas which could lead to compliance issues and loss of platform participation. Our findings offer two contributions. First, we contribute to the compliance literature by explaining how guardrails can balance the use of permission and obligation schemas which are necessary to translate regulations into effective organizational policies for the success of HIEs and other in­ formation exchange platforms. Second, we contribute to extending translation theory by explaining how pragmatic reasoning schemas function as the mechanism through which trans­ lation of regulations occurs. Collapse

Topics: privacy information privacy law data security information exchange legal context

Methods: qualitative interview longitudinal research case study longitudinal case study literature study

Theories: organizational behavior theory

Blockchain innovation for consent self-management in health information exchanges

2023 | Decision Support Systems | Citations: 0

Authors: Anderson, Chad; Carvalho, Arthur; Kaul, Mala; Merhout, Jeffrey W.

Abstract: With the increasing digitalization of health data, patients need to make informe ... Expand

Abstract: With the increasing digitalization of health data, patients need to make informed decisions about the online sharing of their protected health information. This necessitates a robust technical infrastructure that enables patients to self-manage consent and the trusted exchange of this information across sharing entities. Unfortu­ nately, current health information exchange systems in the U.S. are limited in both these regards. While there is recent work on digital patient consent management, there is limited work that provides effective solutions for patient self-management of consent. Further, interoperability issues in the way health information exchanges are currently architected and differences in regulations across localities exacerbate the challenges of consent man­ agement. In this research, we survey potential patients' willingness to self-manage healthcare-related consent. Having established the desire for consent self-management, we propose a solution that enables the seamless sharing of patient consent across different healthcare providers and health information exchanges. Specifically, we use a rigorous design science approach to create a blockchain-based, self-managed patient consent system and we evaluate the design through an instantiated prototype. The results of our study should be useful to researchers in healthcare information management as well as to practitioners designing consent management systems. Our research contributes to design science research with an innovative, rigorously evaluated, design principles-based artifact that addresses a critical problem of sharing protected health information. Collapse

Topics: blockchain mobile application information exchange privacy Ethereum

Methods: survey design artifact design science design process design principle

Theories: evidence-based design

Citizen Participation Level in Smart Governance: A Literature Review

2023 | Americas Conference on Information Systems | Citations: 0

Authors: Andrade de Figueiredo, Bruno; Przeybilovicz, Erico; Cunha, Maria Alexandra

Abstract: This literature review used and expanded Cardullo & Kitchin's (2018) "scaffold ... Expand

Abstract: This literature review used and expanded Cardullo & Kitchin's (2018) "scaffold of smart citizen participation" to classify the participation level found in the smart governance literature. This review highlights the importance of the use of a common metric for measuring citizens level of participation in smart governance. The departure point of this work is the literature review developed by Tomor et al. (2019). Their review was updated and compared. We confirmed some challenges positioned by the literature on the indiscriminate use of citizen participation as both an intrinsic characteristic of governance and as an outcome of the collaboration (Meijer & Bolívar, 2015;Tomor et al., 2019). This lack of a common understanding of the level of citizen autonomy creates a confusion in the literature regarding the actual level of participation, which highlights a need for further research about citizen participation and collaboration in smart governance. Collapse

Topics: database system

Methods: literature study literature sample case study

ON THE ROLE OF SMARTNESS IN HELPING CONSUMERS CREATE SUSTAINABLE OUTCOMES

2023 | European Conference On Information Systems | Citations: 0

Authors: Andraschko, Lars; Wunderlich, Philipp; Sarker, Saonee; Veit, Daniel

Abstract: The proliferation of smart technologies transforms the way individual consumers ... Expand

Abstract: The proliferation of smart technologies transforms the way individual consumers perform tasks. Considerable research alludes that smart technologies are often related to domestic energy consumption. However, it remains unclear how such technologies transform tasks and thereby impact our planet. We explore the role of technological smartness in personal day-to-day tasks that help create a more sustainable future. In the absence of theory, but facing extensive changes in everyday life enabled by smart technologies, we draw on phenomenon-based theorizing (PBT) guidelines. As anchor, we refer to task endogeneity related to task-technology fit theory (TTF). As infusion, we employ theory on public goods. Our model proposes novel relations between the concepts of smart-autonomy and -transparency with sustainable task outcomes, mediated by task convenience and task significance. We discuss some implications, limitations, and future research opportunities. Collapse

Topics: public good climate change IS economics economic surplus

Methods: theory development conceptual modelling

Theories: theory of task technology fit

Sustainable IS Use: What IS Needed to REDUSE

2023 | International Conference on Information Systems | Citations: 0

Authors: Andraschko, Lars; Wunderlich, Philipp; Sarker, Saonee; Veit, Daniel

Abstract: Facing ever-looming climate change, studying the drivers for individuals ' Info ... Expand

Abstract: Facing ever-looming climate change, studying the drivers for individuals ' Information Systems (IS) Use to reduce environmental harm gains momentum. While extant research on the antecedents of sustainable IS Use has focused on specific theories, interventions, contexts, and technologies, a holistic understanding has become increasingly elusive, with a synthesis remaining absent. We employ a systematic literature review methodology to shed light on the driving antecedents for sustainable IS Use among individual consumers. Our results build on findings of 29 empirical studies drawn from 598 articles retrieved from our premier outlets and a forward/backward search. The analysis reveals six salient complementary antecedents: Relief, Empowerment, Default, User-centricity, Salience, and Encouragement. We recommend considering these concepts when developing, deploying, promoting, or regulating digital technologies to mitigate individual consumers' emissions. Along with memorable and implementable concepts, our theoretical framework offers a novel conceptualization and four promising avenues for researchers on sustainable IS Use. Collapse

Topics: information system use green IS electronic commerce individual characteristic willingness to pay

Methods: structured literature research synthesis theory development laboratory experiment field experiment

Theories: extended unified theory of acceptance and use of technology information systems theory unified theory of acceptance and use of technology

Symbolic Shareholder Democracy: Toward a Behavioral Understanding of the Role of Shareholder Voting in CEO Dismissals

2023 | Organization Science | Citations: 0

Authors: Andrei, Alina G.; van Oosterhout, J. (Hans); Sauerwald, Steve

Abstract: We investigate the effect of expressive shareholder dissent voting, in which sha ... Expand

Abstract: We investigate the effect of expressive shareholder dissent voting, in which shareholders use their votes symbolically to express their discontent with management, on subsequent chief executive officer (CEO) dismissals. Using the routine but highly symbolic executive board discharge proposal voted on at the annual shareholder meetings of German firms, we argue that the board of directors understands these votes as a “vote of confidence in management” that challenges the CEO’s mandate to lead the firm. Arguing that board chairs are uniquely positioned to take up the stance of a steward of the firm and its leadership, we examine how independent and family board chairs moderate the board’s response to expressive voting dissent. Using a sample of German public firms over the period 2008–2015, we find that expressive voting dissent increases the chance of CEO dismissal increasingly with the level of dissent expressed. Contrary to prevailing agency theoretical expectations, we do not find that independent chairs are more responsive to expressive voting dissent, nor that this relationship is strengthened by the degree of minority institutional investor ownership of the firm. Consistent with the symbolic perspective on shareholder voting that we seek to develop, however, we find that family chairs are more likely to lead the board to dismiss the CEO due to the intrinsic disvalue they incur from symbolic leadership legitimacy challenges in their firms, and that the positive effect of having a family chair on the dissent induced chance of CEO dismissal is strengthened by the level of family ownership in the firm. Funding: A University of Illinois at Chicago Summer Research Grant is gratefully acknowledged for S. Sauerwald. Collapse

Topics: corporate governance financial performance accounting organizational productivity

Methods: theory development statistical hypothesis test post-hoc analysis longitudinal research survival analysis

Theories: stewardship theory behavioral theory

On Predicting ESG Ratings Using Dynamic Company Networks

2023 | ACM Transactions on Management Information Systems | Citations: 0

Authors: Ang, Gary; Guo, Zhiling; Lim, Ee-Peng

Abstract: Environmental, social and governance (ESG) considerations play an increasingly i ... Expand

Abstract: Environmental, social and governance (ESG) considerations play an increasingly important role due to the growing focus on sustainability globally. Entities, such as banks and investors, utilize ESG ratings of companies issued by specialized rating agencies to evaluate ESG risks of companies. The process of assigning ESG ratings by human analysts is however laborious and time intensive. Developing methods to predict ESG ratings could alleviate such challenges, allow ESG ratings to be generated in a more timely manner, cover more companies, and be more accessible. Most works study the effects of ESG ratings on target variables such as stock prices or financial fundamentals of companies, but few works study how different types of company information can be utilized to predict ESG ratings. Previous works also largely focus on using only the financial information of individual companies to predict ESG ratings, leaving out the different types of inter-company relationship networks. Such inter-company relationship networks are typically dynamic, i.e., they evolve across time. In this paper, we focus on utilizing dynamic inter-company relationships for ESG ratings prediction, and examine the relative importance of different financial and dynamic network information in this prediction task. Our analysis shows that utilizing dynamic inter-company network information, based on common director, common investor and news event-based knowledge graph relationships, can significantly improve ESG rating prediction performance. Robustness checks over different time-periods and different number of time-steps in the future further validate these insights. Collapse

Topics: shapley additive explanation knowledge graph database system missing data network effect

Methods: machine learning econometric modeling longitudinal research Granger causality robustness check

Designing Culturally Appropriate Hackathons to Increase Data Literacy in Indigenous Communities

2023 | Americas Conference on Information Systems | Citations: 0

Authors: Aniceto, Janaina; Corbett, Jacqueline; Chung, Alexander

Abstract: Data literacy skills are extremely important, yet it is still lacking in many I ... Expand

Abstract: Data literacy skills are extremely important, yet it is still lacking in many Indigenous communities across Canada due to systemic barriers faced by Indigenous peoples. Hackathons have been used as a common approach to promote data literacy. However, hackathons are socio-technical innovation processes in which local cultures and values play a role in their conduct and outcomes. Hackathons that are designed with Indigenous cultures and values in mind can be more effective at promoting data literacy for Indigenous peoples, yet there is limited guidance on how to do so. In this paper, we adopt the Action Design Research approach and Indigenous research methods to collaboratively develop and deliver culturally appropriate hackathons to increase data literacy within Indigenous communities. During this process we will also co-develop a suite of design principles to guide the design of these hackathons. Collapse

Topics: data literacy systems development

Methods: action design research design science design principle theoretical contribution qualitative interview