The immense success of Bitcoin has also highlighted the hidden potential of blockchains and distr... more The immense success of Bitcoin has also highlighted the hidden potential of blockchains and distributed ledgers in general. However, most blockchains are based on the so-called Proof-of-Work principle, which requires significant resources, making them unsuitable for the growing number of Internet of Things devices, not to mention other problems such as ensuring privacy and resistance to quantum computing. This paper, therefore, analyses current approaches in the field of ledgers with applications for the Internet of Things. Based on this, it presents a new ledger architecture for cultural heritage preservation that is energy sustainable and tailored to smartphones while pushing the deployment boundaries closer to the rest of the Internet of Things world. It is also resistant to quantum computing and provides privacy with accountability. Moreover, the developed solution considers not only the core technological structure but also its broader social (business) context, i.e., links to ...
Proceedings of the 50th Hawaii International Conference on System Sciences (2017), 2017
It has been known for many years that security failures are caused at least as often by bad incen... more It has been known for many years that security failures are caused at least as often by bad incentives as by bad design. However, the regulatory correction of bad incentives is not easy in practice and it is still lacking. In the meantime, system dynamics models of security systems can improve the situation by increasing the awareness that misaligned incentives can backfire as long-term consequences of security failures hit back the principal. We illustrate our argument using system archetypes and concept simulation models revealing the impact of two different security strategies, viz. misaligned incentives (the customer having the burden of proof in case of alleged fraud) vs the bank having the burden of proof. From this we argue that online system dynamics could be used in eGovernment to educate principals and the public. Also, legal measures could become more effective when supported with forensic evidence from simulation models.
Security issues became a topic of research with the introduction of networked information systems... more Security issues became a topic of research with the introduction of networked information systems in the early eighties. However, in the mid-nineties the proliferation of the Internet in the business area exposed security as one of key-factors for successful on-line business. The majority of efforts to provide security were focused on technology. However, it turned out during the last years that human factors play a central role. Therefore, this chapter gives a methodology for proper risk management that is concentrated on human factors management, but it starts with addressing classical, i.e. technology based issues. Afterwards, business dynamics is deployed to enable a quantitative approach for handling security of contemporary information systems. The whole methodology encompasses business intelligence and presents appropriate architecture for human resources management.
Izid monografije je finančno podprla Javna agencija za raziskovalno dejavnost Republike Slovenije... more Izid monografije je finančno podprla Javna agencija za raziskovalno dejavnost Republike Slovenije iz sredstev državnega proračuna iz naslova razpisa za sofinanciranje znanstvenih monografij cip-Kataložni zapis o publikaciji Narodna in univerzitetna knjižnica, Ljubljana 658(0.034.2) O inovativnosti slovenske predelovalne in izbranih storitvenih dejavnosti [Elektronski vir] / uredil Borut Likar.-El. knjiga.-Koper : Fakulteta za management, 2014.-(Znanstvene monografije Fakultete za management Koper, issn 1855-0878
Machine learning (ML) is becoming an integral part of networks security arsenal, where Internet o... more Machine learning (ML) is becoming an integral part of networks security arsenal, where Internet of Things (IoT) structures play an increasingly important role. However, IoT networks have many specific requirements, mostly due to limited energy availability and stringent computing resources. This results in limitations for traditional ML approaches to security, in particular for anomaly detection. Consequently, new focuses for solutions that range from architectural to data processing ones are necessary. Therefore, appropriate lightweight ML algorithms have to be designed and deployed in appropriate architectural settings, which is the main contribution of this paper. In addition, insights into ML functioning are needed to better understand the observed anomalies. To enable these insights (and support a wider applicability of ML based approaches), the results have to be as explainable as possible. The research presented in this paper addresses this problem through the functional and data transparency of ML applications, tailored to the specifics of anomaly detection in IoT networks. To tackle accordingly also the architectural issues, the presented approach builds on the well-established layering principle from computer communications reference models. This principle not only supports flexibility but also increases security in these new environments of growing importance. INDEX TERMS Computer networks, Internet of Things, security architectures, anomaly detection, machine learning, functional transparency, data transparency.
Computational trust and reputation management now has a 20 years long tradition. As these service... more Computational trust and reputation management now has a 20 years long tradition. As these services are tightly coupled to e-environments, the need for them has coincided with the proliferation of the e-business paradigm beginning in the 1990s. Consequently, the greater the proliferation of e-environments, the greater the need for such services. If trust and reputation play such an important role in different areas of our lives, e-environments can be no exception.
The goal of the COST Action IS0605 "Econ@Tel" is to develop a strategic research in the crossdisc... more The goal of the COST Action IS0605 "Econ@Tel" is to develop a strategic research in the crossdisciplinary field of Telecommunication Economics. This includes a multitude of different dimensions, which include: (a) a training network among key people/organizations in order to enhance Europe's competence in the field of telecommunications and media economics, (b) the support of related research and development initiatives, and (c) the provisioning of guidelines and recommendations to European players (end-users, enterprises, operators, regulators, policy makers, content providers) for the new converged broadband, wireless, content delivery networks to citizens and enterprises. COST IS605 and its partner countries' coordinates partially the development of research methodologies as well tools from engineering, media, and business research. Regulatory issues helping or hindering the adoption of economically efficient services are identified. Thus, COST IS605 mobilizes the "critical mass" and diversity of economists, business research experts, engineers, networking experts, and scientists working in communications and content economics. Thus, this white paper presents a selected collection of dedicated views of 22 action members from 11 countries in terms of key future aspects at stake identified as such over the years 2008 to 2009 for the benefit of the European players. It also sometimes identifies disruptive research directions for future work. It does not, therefore, constitute a state of the art in telecommunications techno-economics, as usually these players will be familiar with current aspects. Furthermore, it does not claim to be fully exhaustive, but addresses many areas in those COST IS605 goals as stated above.
2009 Fourth International Conference on Systems, 2009
ABSTRACT Networked information systems have not been restricted to closed organizations environme... more ABSTRACT Networked information systems have not been restricted to closed organizations environments for more than a decade. They are now crucial in supporting operations of infrastructure, ranging from power plants to air-control systems. These networked information systems, essentially forming the current Internet, are thus highly sensitive kinds of infrastructure where security plays a central role. However, assuring their security has to address certain specific aspects with regard to risk management. This paper presents a new approach to support decision making in this complex area. It is based on a generic risk management model for distributed information systems that deploys system dynamics. Such an approach provides many advantages, like suitability for interdisciplinary use, providing a graphical view on the system structure and components relationships, real-time support for ldquowhat-ifrdquo scenarios, and the possibility for inclusion in automated decision support systems. It is especially suitable for education and risk awareness programs in organizations.
Trust is essential for further and wider acceptance of contemporary e-services. It was first addr... more Trust is essential for further and wider acceptance of contemporary e-services. It was first addressed almost thirty years ago in Trusted Computer System Evaluation Criteria standard by the US DoD. But this and other proposed approaches of that period were actually solving security. Roughly some ten years ago, methodologies followed that addressed trust phenomenon at its core, and they were based on Bayesian statistics and its derivatives, while some approaches were based on game theory. However, trust is a manifestation of judgment and reasoning processes. It has to be dealt with in accordance with this fact and adequately supported in cyber environment. On the basis of the results in the field of psychology and our own findings, a methodology called qualitative algebra has been developed, which deals with so far overlooked elements of trust phenomenon. It complements existing methodologies and provides a basis for a practical technical solution that supports management of trust in...
Trust and reputation are phenomena of great importance in our private, public and professional li... more Trust and reputation are phenomena of great importance in our private, public and professional lives. But they do not affect us only personally, they also apply to social structures, business organisations, and even states. With the growing penetration of e-environments via the ubiquitous digitization of our lives, the ways we deal with trust and reputation are being additionally challenged.
Academic Journal of Interdisciplinary Studies, 2022
Digital transformation is, among others, notably driven by servitization, and consequently, IT ar... more Digital transformation is, among others, notably driven by servitization, and consequently, IT artifacts called Application Programming Interfaces (APIs), together with disruptive technologies and innovations. In order to set up proper policies, the understanding of the above factors is essential, including their influences on value adding chains. This paper therefore provides an analysis of APIs developments together with their impacts on digital transformation. As they can affect organizations and even national economies at strategic level, appropriate management from a systemic perspective is justified, including e-Government initiatives. Further, APIs cannot be treated without their relations to disruptive technologies, innovations and value chains. Therefore, the advancements of theoretical understanding of evolution of value chains, and practical directions for e-government initiatives are given in this paper. In addition, an archetype model is developed that provides a basis ...
Despite the fact that mobile code security issues appeared some ten years ago, they remain import... more Despite the fact that mobile code security issues appeared some ten years ago, they remain important also in the era of service oriented architectures and cloud computing. Mobile code security certainly has some specifics, because it presents an opposite paradigm from the traditional one. In the traditional setting a host (i.e., local operating system, local environment) has to be protected against the code, while with the mobile code security this very code (more precisely, the program code and data) has to be protected against malicious host. And significant breakthrough is still to be seen in this area. Therefore this paper provides an analysis of the main problems related to mobile code security, and gives an outlook by identifying focuses of future research. It also provides a new paradigm called non-deterministic security services to address mobile code security issues. Clearly, even with the latest advancements in communications systems, the importance of secure mobile code r...
Abstract: Security in information systems is becoming a well-established discipline, where each a... more Abstract: Security in information systems is becoming a well-established discipline, where each and every security related activity has to start with the basics. This is risk management. Put another way – risk management is involved in the heart of every security activity. Although risk management is a known discipline in many other areas, its direct translation to information systems is not straightforward because of specifics of contemporary information systems. Among these are the global connectivity of information systems, the number of elements (e.g. thousands of software components), strong involvement of human factor, almost endless possible ways of interactions, etc. Thus a new methodological approach is presented in this paper that is based on business dynamics. It enables the above-mentioned elements to be addressed, improving decision making in information systems security.
Protocols that provide authentication and key distribution are mainly based on symmetric and asym... more Protocols that provide authentication and key distribution are mainly based on symmetric and asymmetric ciphers. In recent years, some approaches have been introduced that are based on strong one-way hash functions, and further enhancements to these approaches are given in this paper. The lightweight protocols that are presented in this paper are suitable for implementation with simple logic. They enable early recognition of attacks and make distributed session key generation possible. They are intended for use in environments with limited processing capabilities, where relatively short messages are being exchanged, e.g., agents environments.
Ubiquitous digitization enables promising options for cultural heritage preservation. Therefore, ... more Ubiquitous digitization enables promising options for cultural heritage preservation. Therefore, a new approach is presented that considers deployment scenarios by linking heritage science to tourism. Such an approach is necessary because neither technology nor society views can be treated separately to obtain deployable solutions of a wider social, and even national importance. Clearly, while the traditional approaches to cultural heritage preservation will remain a gold standard, they will be increasingly complemented by digital preservation techniques. Thus, based on practical implementations and lessons learnt in other areas, this multidisciplinary framework paper analyses existing disruptive information technologies deployments. In line with the findings it presents a novel technological architecture tailored to the needs of cultural heritage preservation that deploys an open blockchain architecture. The architecture preserves the advantages of traditional blockchains, which ma...
The immense success of Bitcoin has also highlighted the hidden potential of blockchains and distr... more The immense success of Bitcoin has also highlighted the hidden potential of blockchains and distributed ledgers in general. However, most blockchains are based on the so-called Proof-of-Work principle, which requires significant resources, making them unsuitable for the growing number of Internet of Things devices, not to mention other problems such as ensuring privacy and resistance to quantum computing. This paper, therefore, analyses current approaches in the field of ledgers with applications for the Internet of Things. Based on this, it presents a new ledger architecture for cultural heritage preservation that is energy sustainable and tailored to smartphones while pushing the deployment boundaries closer to the rest of the Internet of Things world. It is also resistant to quantum computing and provides privacy with accountability. Moreover, the developed solution considers not only the core technological structure but also its broader social (business) context, i.e., links to ...
Proceedings of the 50th Hawaii International Conference on System Sciences (2017), 2017
It has been known for many years that security failures are caused at least as often by bad incen... more It has been known for many years that security failures are caused at least as often by bad incentives as by bad design. However, the regulatory correction of bad incentives is not easy in practice and it is still lacking. In the meantime, system dynamics models of security systems can improve the situation by increasing the awareness that misaligned incentives can backfire as long-term consequences of security failures hit back the principal. We illustrate our argument using system archetypes and concept simulation models revealing the impact of two different security strategies, viz. misaligned incentives (the customer having the burden of proof in case of alleged fraud) vs the bank having the burden of proof. From this we argue that online system dynamics could be used in eGovernment to educate principals and the public. Also, legal measures could become more effective when supported with forensic evidence from simulation models.
Security issues became a topic of research with the introduction of networked information systems... more Security issues became a topic of research with the introduction of networked information systems in the early eighties. However, in the mid-nineties the proliferation of the Internet in the business area exposed security as one of key-factors for successful on-line business. The majority of efforts to provide security were focused on technology. However, it turned out during the last years that human factors play a central role. Therefore, this chapter gives a methodology for proper risk management that is concentrated on human factors management, but it starts with addressing classical, i.e. technology based issues. Afterwards, business dynamics is deployed to enable a quantitative approach for handling security of contemporary information systems. The whole methodology encompasses business intelligence and presents appropriate architecture for human resources management.
Izid monografije je finančno podprla Javna agencija za raziskovalno dejavnost Republike Slovenije... more Izid monografije je finančno podprla Javna agencija za raziskovalno dejavnost Republike Slovenije iz sredstev državnega proračuna iz naslova razpisa za sofinanciranje znanstvenih monografij cip-Kataložni zapis o publikaciji Narodna in univerzitetna knjižnica, Ljubljana 658(0.034.2) O inovativnosti slovenske predelovalne in izbranih storitvenih dejavnosti [Elektronski vir] / uredil Borut Likar.-El. knjiga.-Koper : Fakulteta za management, 2014.-(Znanstvene monografije Fakultete za management Koper, issn 1855-0878
Machine learning (ML) is becoming an integral part of networks security arsenal, where Internet o... more Machine learning (ML) is becoming an integral part of networks security arsenal, where Internet of Things (IoT) structures play an increasingly important role. However, IoT networks have many specific requirements, mostly due to limited energy availability and stringent computing resources. This results in limitations for traditional ML approaches to security, in particular for anomaly detection. Consequently, new focuses for solutions that range from architectural to data processing ones are necessary. Therefore, appropriate lightweight ML algorithms have to be designed and deployed in appropriate architectural settings, which is the main contribution of this paper. In addition, insights into ML functioning are needed to better understand the observed anomalies. To enable these insights (and support a wider applicability of ML based approaches), the results have to be as explainable as possible. The research presented in this paper addresses this problem through the functional and data transparency of ML applications, tailored to the specifics of anomaly detection in IoT networks. To tackle accordingly also the architectural issues, the presented approach builds on the well-established layering principle from computer communications reference models. This principle not only supports flexibility but also increases security in these new environments of growing importance. INDEX TERMS Computer networks, Internet of Things, security architectures, anomaly detection, machine learning, functional transparency, data transparency.
Computational trust and reputation management now has a 20 years long tradition. As these service... more Computational trust and reputation management now has a 20 years long tradition. As these services are tightly coupled to e-environments, the need for them has coincided with the proliferation of the e-business paradigm beginning in the 1990s. Consequently, the greater the proliferation of e-environments, the greater the need for such services. If trust and reputation play such an important role in different areas of our lives, e-environments can be no exception.
The goal of the COST Action IS0605 "Econ@Tel" is to develop a strategic research in the crossdisc... more The goal of the COST Action IS0605 "Econ@Tel" is to develop a strategic research in the crossdisciplinary field of Telecommunication Economics. This includes a multitude of different dimensions, which include: (a) a training network among key people/organizations in order to enhance Europe's competence in the field of telecommunications and media economics, (b) the support of related research and development initiatives, and (c) the provisioning of guidelines and recommendations to European players (end-users, enterprises, operators, regulators, policy makers, content providers) for the new converged broadband, wireless, content delivery networks to citizens and enterprises. COST IS605 and its partner countries' coordinates partially the development of research methodologies as well tools from engineering, media, and business research. Regulatory issues helping or hindering the adoption of economically efficient services are identified. Thus, COST IS605 mobilizes the "critical mass" and diversity of economists, business research experts, engineers, networking experts, and scientists working in communications and content economics. Thus, this white paper presents a selected collection of dedicated views of 22 action members from 11 countries in terms of key future aspects at stake identified as such over the years 2008 to 2009 for the benefit of the European players. It also sometimes identifies disruptive research directions for future work. It does not, therefore, constitute a state of the art in telecommunications techno-economics, as usually these players will be familiar with current aspects. Furthermore, it does not claim to be fully exhaustive, but addresses many areas in those COST IS605 goals as stated above.
2009 Fourth International Conference on Systems, 2009
ABSTRACT Networked information systems have not been restricted to closed organizations environme... more ABSTRACT Networked information systems have not been restricted to closed organizations environments for more than a decade. They are now crucial in supporting operations of infrastructure, ranging from power plants to air-control systems. These networked information systems, essentially forming the current Internet, are thus highly sensitive kinds of infrastructure where security plays a central role. However, assuring their security has to address certain specific aspects with regard to risk management. This paper presents a new approach to support decision making in this complex area. It is based on a generic risk management model for distributed information systems that deploys system dynamics. Such an approach provides many advantages, like suitability for interdisciplinary use, providing a graphical view on the system structure and components relationships, real-time support for ldquowhat-ifrdquo scenarios, and the possibility for inclusion in automated decision support systems. It is especially suitable for education and risk awareness programs in organizations.
Trust is essential for further and wider acceptance of contemporary e-services. It was first addr... more Trust is essential for further and wider acceptance of contemporary e-services. It was first addressed almost thirty years ago in Trusted Computer System Evaluation Criteria standard by the US DoD. But this and other proposed approaches of that period were actually solving security. Roughly some ten years ago, methodologies followed that addressed trust phenomenon at its core, and they were based on Bayesian statistics and its derivatives, while some approaches were based on game theory. However, trust is a manifestation of judgment and reasoning processes. It has to be dealt with in accordance with this fact and adequately supported in cyber environment. On the basis of the results in the field of psychology and our own findings, a methodology called qualitative algebra has been developed, which deals with so far overlooked elements of trust phenomenon. It complements existing methodologies and provides a basis for a practical technical solution that supports management of trust in...
Trust and reputation are phenomena of great importance in our private, public and professional li... more Trust and reputation are phenomena of great importance in our private, public and professional lives. But they do not affect us only personally, they also apply to social structures, business organisations, and even states. With the growing penetration of e-environments via the ubiquitous digitization of our lives, the ways we deal with trust and reputation are being additionally challenged.
Academic Journal of Interdisciplinary Studies, 2022
Digital transformation is, among others, notably driven by servitization, and consequently, IT ar... more Digital transformation is, among others, notably driven by servitization, and consequently, IT artifacts called Application Programming Interfaces (APIs), together with disruptive technologies and innovations. In order to set up proper policies, the understanding of the above factors is essential, including their influences on value adding chains. This paper therefore provides an analysis of APIs developments together with their impacts on digital transformation. As they can affect organizations and even national economies at strategic level, appropriate management from a systemic perspective is justified, including e-Government initiatives. Further, APIs cannot be treated without their relations to disruptive technologies, innovations and value chains. Therefore, the advancements of theoretical understanding of evolution of value chains, and practical directions for e-government initiatives are given in this paper. In addition, an archetype model is developed that provides a basis ...
Despite the fact that mobile code security issues appeared some ten years ago, they remain import... more Despite the fact that mobile code security issues appeared some ten years ago, they remain important also in the era of service oriented architectures and cloud computing. Mobile code security certainly has some specifics, because it presents an opposite paradigm from the traditional one. In the traditional setting a host (i.e., local operating system, local environment) has to be protected against the code, while with the mobile code security this very code (more precisely, the program code and data) has to be protected against malicious host. And significant breakthrough is still to be seen in this area. Therefore this paper provides an analysis of the main problems related to mobile code security, and gives an outlook by identifying focuses of future research. It also provides a new paradigm called non-deterministic security services to address mobile code security issues. Clearly, even with the latest advancements in communications systems, the importance of secure mobile code r...
Abstract: Security in information systems is becoming a well-established discipline, where each a... more Abstract: Security in information systems is becoming a well-established discipline, where each and every security related activity has to start with the basics. This is risk management. Put another way – risk management is involved in the heart of every security activity. Although risk management is a known discipline in many other areas, its direct translation to information systems is not straightforward because of specifics of contemporary information systems. Among these are the global connectivity of information systems, the number of elements (e.g. thousands of software components), strong involvement of human factor, almost endless possible ways of interactions, etc. Thus a new methodological approach is presented in this paper that is based on business dynamics. It enables the above-mentioned elements to be addressed, improving decision making in information systems security.
Protocols that provide authentication and key distribution are mainly based on symmetric and asym... more Protocols that provide authentication and key distribution are mainly based on symmetric and asymmetric ciphers. In recent years, some approaches have been introduced that are based on strong one-way hash functions, and further enhancements to these approaches are given in this paper. The lightweight protocols that are presented in this paper are suitable for implementation with simple logic. They enable early recognition of attacks and make distributed session key generation possible. They are intended for use in environments with limited processing capabilities, where relatively short messages are being exchanged, e.g., agents environments.
Ubiquitous digitization enables promising options for cultural heritage preservation. Therefore, ... more Ubiquitous digitization enables promising options for cultural heritage preservation. Therefore, a new approach is presented that considers deployment scenarios by linking heritage science to tourism. Such an approach is necessary because neither technology nor society views can be treated separately to obtain deployable solutions of a wider social, and even national importance. Clearly, while the traditional approaches to cultural heritage preservation will remain a gold standard, they will be increasingly complemented by digital preservation techniques. Thus, based on practical implementations and lessons learnt in other areas, this multidisciplinary framework paper analyses existing disruptive information technologies deployments. In line with the findings it presents a novel technological architecture tailored to the needs of cultural heritage preservation that deploys an open blockchain architecture. The architecture preserves the advantages of traditional blockchains, which ma...
Uploads
Papers by Denis Trček