Assessment of the Effects of Access Control on Reducing Cybercrimes in the Selected Telecommunication Companies in Tanzania

Julius Raphael Athuman Mhina; Andrew Justo Nsombo

doi:10.59645/tji.v3i1.134

Authors

Julius Raphael Athuman Mhina Institute of Finance Management, Tanzania
Andrew Justo Nsombo Institute of Accountancy Arusha, Tanzania

DOI:

https://doi.org/10.59645/tji.v3i1.134

Keywords:

Data, Encryption, Cybercrimes, Telecommunications, Privacy, Tanzania

Abstract

This study specifically aimed to determine the effects of access control on reducing cybercrimes. Since much research has yet to be done to evaluate how privacy, data integrity, and access control affect the overall decline in cybercrimes, this study is conducted to help telecommunication companies employ and strengthen access control measures to safeguard company and customer information. This study employed a quantitative research approach, and the data collected were analysed using regression analysis techniques. Data was collected through questionnaires in a Likert-scaled form and in-depth interviews. The sample size of this study was 199 employees from the selected companies. The data collected was analysed using both qualitative and quantitative techniques. The findings show that the general correlation between independent and dependent variables is 0.01, whereby specific consideration shows that Access Control (AC) had a correlation of .117, which was significant at .004. The correlation analysis confirms a positive and significant relationship between access control and the reduction of cybercrimes since the p-value was <.005. This study concludes that despite the roles played by the access control mechanisms provided by telecommunication companies, there is a need to enhance both internal and external control measures, such as strengthening the security policies to impose severe sanctions on individuals who try to tamper with the information systems of the telecommunication companies. Hence, this study recommends the provision of more awareness to the user of information systems both within and outside the telecommunication companies because data breaches happen either through internal or external sources; hence, it is essential that training, education, and other means to enhance knowledge about cybercrimes should be implemented.

Downloads

Download data is not yet available.

References

A. Poniszewska-Marada, September 2010. Platform for access control management in information system based on extended RBAC model, IEEE Computer Press, Proceedings of the 12th IEEE International Symposium on Symbolic and Numeric Algorithms for Scientific Computing, Timisoara, Romania.

A. Poniszewska-Maranda, 2006. Access Control Coherence of Information Systems Based on Security Constraints, Proc. of 25th International Conference on Computer Safety, Security and Reliability, LNCS, Springer-Verlag.

Anuradha, M., Loganathan, S., Suseela, G., Selvan, M.P. and Nalini, M., (2023). June. Hybrid Multiple Cryptography for Data Encryption. In 2023 8th International Conference on Communication and Electronics Systems (ICCES) (pp. 596–603). IEEE.

Choi, K.S., Scott, T.M. and LeClair, D.P., 2016. Ransomware against police: diagnosis of risk factors via application of cyber-routine activities theory. International Journal of Forensic Science & Pathology. 4(7), 253-258.

Dey, N.; Hassanien, Aboul Ella; Bhatt, Chintan; Ashour, Amira; Satapathy, Suresh Chandra, eds. (2018). Internet of things and big data analytics toward next-generation intelligence.

Hidayat, T. and Mahardiko, R., 2020. A Systematic literature review method on AES algorithm for data sharing encryption on cloud computing. International Journal of Artificial Intelligence Research, 4(1), pp.49-57.

Ilbiz, E. and Kaunert, C., 2022. Europol and cybercrime: Europol’s sharing decryption platform. Journal of Contemporary European Studies, 30(2), pp.270-283.

Khalaf, E.F. and Kadi, M.M., 2017. A survey of access control and data encryption for database security. Journal of King Abdulaziz University, 28(1), pp.19-30.

Kigerl, A. (2012). Routine activity theory and the determinants of high cybercrime countries. Social Science Computer Review, 30(4), 470–486.

Krasznay, C., & Hámornik, B. P. (2018). Analysis of cyberattack patterns by user behaviour analytics 1. Academic and Applied Research in Military and Public Management Science, 17(3), 101-113.

Kumar, S., Kandasamy, S., & Deepa, K. (2016). On privacy and security in social media– A comprehensive study. Procedia Computer Science, 78, 114-19.

Kuppuswamy, P., Banu, R. and Rekha, N., 2017, March. Preventing and securing data from cybercrime using new authentication methods based on block cypher schemes. In 2017, the 2nd International Conference on Anti-Cyber Crimes (ICACC) (pp. 113-117). IEEE.

Kozhusko, O., Khaminich, S., & Alieksieieva, S. (2019). Information system protection as a factor in maintaining the leading positions in the enterprise development. In 3rd International Conference on Social, Economic, and Academic Leadership (ICSEAL 2019) (pp. 428-432). Atlantis Press.

Lara-Nino, C.A., Diaz-Perez, A. and Morales-Sandoval, M., 2018. Energy and area costs of lightweight cryptographic algorithms for authenticated encryption in WSN. Security and Communication Networks, 2018.

Leukfeldt, E. R., Kleemans, E. R., & Stol, W. P. (2017). Cybercriminal networks, social ties and online forums: social ties versus digital ties within phishing and malware networks. The British Journal of Criminology, 57(3), 704-722.

Lu, X., Fu, S., Jiang, C. & Lio, P. (2021). A fine-grained IoT data access control scheme combining attribute-based encryption and blockchain. Security and Communication Networks, 2021, pp.1–13.

Mbawala, Z. R., & Mhina, J. R. A.(2021). The Influence of Information Communication Technology System on Performance of Weights and Measures Agency in Tanzania.

Mahmood, G.S., Huang, D.J. & Jaleel, B. (2019). A secure cloud computing system by using encryption and access control model. Journal of Information Processing Systems, 15(3), 538–549.

Mhina, J. R. A., Md Johar, M. G., & Alkawaz, M. H. (2019). The influence of perceived confidentiality risks and attitude on Tanzania government employees’ intention to adopt web 2.0 and social media for work-related purposes. International Journal of Public Administration, 42(7), 558-571.

Miranda, M. J. (2018). Enhancing cybersecurity awareness training: A comprehensive phishing exercise approach. International Management Review, 14(2), 5-10.

Mnyawi, R., Kombe, C., Sam, A. and Nyambo, D., 2022. Blockchain-based Data Storage Security Architecture for e-Health Care Systems: A Case of Government of Tanzania Hospital Management Information System. IJCSNS, 22(3), p.364.

Mtakati, B. ., & Sengati, F. (2021). Cybersecurity Posture of Higher Learning Institutions in Tanzania. The Journal of Informatics, 1(1). https://doi.org/10.59645/tji.v1i1.1

Munjal, K. and Bhatia, R., 2022. A systematic review of homomorphic encryption and its contributions in the healthcare industry. Complex & Intelligent Systems, pp.1-28.

National Research Council. (1930). Computers at risk: Safe computing in the information age.

Ragothaman K, Wang Y, Rimal B, Lawrence M. (2023). Access Control for IoT: A Survey of Existing Research, Dynamic Policies and Future Directions. Sensors. 23(4):1805. https://doi.org/10.3390/s23041805

Semlambo, A., Lubua, E. W., & Mkude, C. (2022). Information Systems Security Policy Framework for enhanced ICT Governance in Public Institutions of Tanzania. The Journal of Informatics, 2(1), 54-68

Younis A. Younis, Kashif Kifayat, Madjid Merabti, 2014. An access control model for cloud computing, Journal of Information Security and Applications, Volume 19, Issue 1, Pages 45-60, ISSN 214-2126, https://doi.org/10.1016/j.jisa.2014.04.003.

Zhang, L., Xu, J., Vijayakumar, P., Sharma, P.K. and Ghosh, U., (2022). Homomorphic encryption-based privacy-preserving federated learning in IoT-enabled healthcare system. IEEE Transactions on Network Science and Engineering