RoundPIN: Shoulder Surfing Resistance for PIN Entry with Randomize Keypad

The security of a PIN is largely supported by the authentication process in ATM. Most authentication methods like traditional are based on using PIN as direct entry and this technique has been shown lots of drawbacks such as vulnerability to password space, and shoulder-surfing. In this paper, a new approach is proposed called RoundPIN depends on the appearance of the numerical password through one of the buttons after selecting it by the user and it is done through a number of rounds, the numbers are arranged randomly on the keypad. Due to the variable aspect of the chosen button and the random appearance of the numbers in each connection session and also the selection process will take place through three buttons three auxiliary, the proposed approach can maintain high secure session to enter the PIN to resist shoulder surfing, which is difficult for attackers to observe a user's PIN. The performance evaluation of the proposed approach is achieved in two parts, the first one is based on security analysis. Then a pilot study of thirty users is conducted to evaluate the useability of the proposed approach. It is noticed that the proposed approach can maintain a high level of security as well as acceptable level of useability and user satisfaction compared the conventional keypad system.

The Emission of VOCs and CO from Heated Tobacco Products, Electronic Cigarettes, and Conventional Cigarettes, and Their Health Risk

The differences in aerosol composition between new tobacco types (heated tobacco products and electronic cigarettes) and conventional cigarettes have not been systematically studied. In this study, the emissions of volatile organic compounds (VOCs), carbon monoxide (CO), nicotine, and tar from heated tobacco products (HTPs), electronic cigarettes (e-cigarettes) and conventional cigarettes were compared, and their health risks were evaluated by applying the same smoking regime and a loss mechanism of smoking. Twenty VOCs were identified in aerosols from HTPs, 18 VOCs were identified in aerosols from e-cigarettes, and 97 VOCs were identified in aerosols from cigarettes by GC–MS and HPLC analysis. The concentrations of total VOCs (TVOCs) emitted by the three types of tobacco products decreased as follows: e-cigarettes (795.4 mg/100 puffs) > cigarettes (83.29 mg/100 puffs) > HTPs (15.65 mg/100 puffs). The nicotine content was 24.63 ± 2.25 mg/100 puffs for e-cigarettes, 22.94 ± 0.03 mg/100 puffs for cigarettes, and 8.817 ± 0.500 mg/100 puffs for HTPs. When using cigarettes of the same brand, the mass concentrations of VOCs, tar, and CO emitted by HTPs were approximately 81.2%, 95.9%, and 97.5%, respectively, lower than the amounts emitted by cigarettes. The health risk results demonstrated that the noncarcinogenic risk of the three types of tobacco products decreased as follows: cigarettes (3609.05) > HTPs (2449.70) > acceptable level (1) > e-cigarettes (0.91). The lifetime cancer risk (LCR) decreased as follows: cigarettes (2.99 × 10−4) > HTPs (9.92 × 10−5) > e-cigarettes (4.80 × 10−5) > acceptable level (10−6). In general, HTPs and e-cigarettes were less harmful than cigarettes when the emission of VOCs and CO was considered.

STUDY OF OCCUPATIONAL RISK ASSESSMENT METHODOLOGY

In the course of work it was demonstrated that occupational risk is considered to be the probability of harm to health as a result of exposure to harmful and / or dangerous production factors during the labor process. A prerequisite for occupational safety in production activities is knowledge and assessment of the activities of sources of danger, risk assessment tools, the degree of impact of hazards on people and taking the necessary measures. Risk management is carried out in the performance of each production operation performed by employees of the enterprise, and is aimed at eliminating or reducing unacceptable risks through the implementation of appropriate protective measures. Without the analysis and management of occupational risks, it is impossible to create safe conditions, as well as reduce injuries and reduce occupational diseases. One of the main methods of occupational risk analysis that gives the best results is the method of analysis of causation using a dynamic model. In order to identify hazards, assess risks and implement protective measures that can ensure the acceptable level of risks of future work, it is necessary to consider the production task and visit the work site. Work is allowed if there are no additional hazards and protective measures of the Risk Assessment Map are actually implemented. It is forbidden to perform the work when identifying additional hazards that require reducing the risks of additional resources and the decision of management. It is strictly forbidden to perform the work until the rapid reduction of the level of risk to an acceptable level begins − with the identification of additional hazards that require the development and implementation of protective measures at the expense of personal resources.

The Usability of BenKids Mobile Learning App in Vocabulary Teaching for Preschool

At present, learning mobile applications (apps) have become highly popular and are widely used. However, they will only be accepted by users if their usability is of an acceptable level. Usability tests assist to measure the impact of a mobile learning app; researchers focus on the compatibility of the app interface with the cognitive skills of children and easy usage. The “BenKids” app has been designed especially for pre-school children (aged three to five). It was created for android devices to teach vocabulary to pre-school children by providing the user with an easy and simple interface. This study aimed to demonstrate a relationship between learning and the usability of the “BenKids” mobile app and explore its impact on children’s learning. The usability of the “BenKids” app was measured with 10 pre-school children. The results showed the effective usability of the app and strongly impacts learning.

Acceptable Level of Professional Conducts from Health Sciences Students Perspective

Professionalism among health care practitioners is a critical value. This study aimed to determine the acceptable level of professional conduct from the perspective of undergraduate Health Sciences students of UiTM Puncak Alam and compare the difference of perspectives between the years of study. From 320 participants, the results showed the low level of acceptance towards poor scenarios and significant differences in perspectives between the year of study in scenarios 2,3 and 6; forging experimental results(χ²=18.66,p<0.01); intellectual dishonesty(χ2=11.11,p=0.01) and forging classmate’s signature(χ2=11.18,p=0.01). The findings provided faculty’s administrators with an acceptable level of professional conduct from the perspective of their students. Keywords: Professionalism, professional conduct, perspective, Health Sciences students eISSN: 2398-4287© 2021. The Authors. Published for AMER ABRA cE-Bs by e-International Publishing House, Ltd., UK. This is an open access article under the CC BYNC-ND license (http://creativecommons.org/licenses/by-nc-nd/4.0/). Peer–review under responsibility of AMER (Association of Malaysian Environment-Behaviour Researchers), ABRA (Association of Behavioural Researchers on Asians/Africans/Arabians) and cE-Bs (Centre for Environment-Behaviour Studies), Faculty of Architecture, Planning & Surveying, Universiti Teknologi MARA, Malaysia. DOI: https://doi.org/10.21834/ebpj.v6i18.3077

Covid Best Practices for Cyber Risk Management

If we learned anything from the year 2020, it is that we need to be more prepared for the unexpected. We need to be working to enable our business to be more resilient in the face of unexpected challenges. We strongly believe that for the industrial sector, the most effective way to enable resiliency is to ensure you have integrity in your operational technology (OT). The objective of this paper is to identify and manage the risk that arose from managing plants remotely. As a result of COVID-19, people started working and managing from home. While this needed to be done to keep businesses running, many risks were introduced as well. How to manage them effectively to reduce cyber risk to an acceptable level will be discussed. Industrial frameworks to identify security gaps, and thus risk, were considered, such as ISA-99/IEC-62443, NIST, ISO-27001, and Top CIS controls. New practices critical infrastructure followed to reduce infection rates were identified from interviews and surveys conducted by PAS, part of Hexagon, of our customers who work with critical infrastructure. These new practices were then compared to the industrial risk management framework to identify the severity of the threats. Once these were identified, mitigation plans were recommended to reduce the risk to an acceptable level. Because of this rapid shift to run the plant remotely, there was an over-provisioning of access in the early stages of the pandemic – i.e., giving more direct access to the industrial control system environment. This was not wise from a security standpoint, but the priority was to keep businesses up and running, so they were ready to take that risk. Now that some organizations have decided to continue with remote work, it is imperative to verify all remote access considers the least privileged access concept. Remote access is like a bridge that bypasses all the controls implemented. Having a remote access vulnerability will help bad actors break into the network and cause catastrophic damage. Though this paper focuses on remote access risk introduced by the COVID-19 pandemic, you can apply the findings to all remote access into critical infrastructure.

A phenomenographic study on language assessment literacy: hearing from Iranian university teachers

This study aims to disclose the Iranian university teachers’ perceptions of the fundamentals of language assessment literacy (LAL). To this aim, using purposive sampling, eighteen university teachers from two Iranian universities were invited to participate in semi-structured interviews. Their viewpoints were audio-recorded, transcribed, and subjected to a phenomenographic analysis. Findings yielded two overarching LAL domains: knowledge (e.g., having an acceptable level of digital LAL, satisfying ethical requirements, benefiting more from performance assessment, considering students’ individual differences, making assessment valid, assuring that tests are reliable, and having an acceptable level of pedagogical content knowledge) and skills (e.g., involving students in assessment, using alternative assessment methods, employing logically traditional assessment methods, informing students about test results, administering tests in standardized ways, using valid grading procedures, and bringing positive wash-back effects). After discussing the results, the study concludes with proposing a range of implications for different testing stakeholders and highlighting some avenues for further research.

Common spelling errors among students of the first three grades as perceived by teachers and educational supervisors in Karak Governorate: الأخطاء الإملائية الشائعة لدى طلبة الصفوف الثلاثة الأولى من وجهة نظر المعلمات والمشرفين التربويين في محافظة الكرك

The current study aimed at investigating common spelling errors for students of the first three grades as perceived by teachers and educational supervisors in Karak Governorate, as well as providing appropriate educational environments free from difficulties to develop their skills to help them know the strengths to develop them and the shortcomings to address them. The descriptive analytical approach was used, and the study sample consisted of (196) teachers and supervisors, including (176) female teachers and (20) supervisors and supervisors of Arabic language and first grades, a questionnaire was applied to them to estimate spelling errors among students, and the study concluded that the spelling errors in drawing the letters of words were above the educationally acceptable level and higher than the errors Technical spelling, which was below the educationally acceptable level.

DIGITAL ECONOMY AS A BASIS OF ECONOMIC SECURITY OF THE COUNTRY

В данной статье рассматриваются особенности функционирования цифровой экономики в современных условиях. В условиях цифровой экономики полное устранение опасности или риска неизбежно влечет за собой отказ от дополнительных возможностей развития экономики. Поэтому при построении системы безопасности необходимо определить приемлемый уровень риска как с точки зрения его управляемости и предсказуемости, так и возможных последствий. This article discusses the features of the functioning of the digital economy in modern conditions. In the digital economy, the complete elimination of danger or risk inevitably entails the rejection of additional opportunities for economic development. Therefore, when building a security system, it is necessary to determine an acceptable level of risk, both in terms of its controllability and predictability, as well as possible consequences.

Cluster analysis and individual anthropogenic risk

Models and assessment methods of anthropogenic risk are analyzed at this article, general basis of mathematical approach for risk analysis is disclosed. Based on multivariate statistic methods, algorithm of analysis for Siberian territories safety is formulated, it allows to define acceptable level of risk for each territorial group (cities with population density more than 70 000, towns with population less than 70 000, and municipals areas).