Phishing attacks represent one of the most serious crimes of the 21st century posing significant challenges for researchers in both academia and industry. These attacks are to steal sensitive information from Internet users, such as bank accounts or credit card credentials. Therefore, phishing costs Internet users millions of dollars every year. However, improving user security awareness represents an effective way to prevent these attacks, especially given the significant growth of online services. Therefore, this paper proposes a novel approach to implement an Analyzer Model for phishing detection. This approach is set up to automatically and continuously analyze user responses to phishing attacks and enforce training interventions. This approach was evaluated in a real-world experiment targeting 207 users in the education field. The results of this study reveal that phishing awareness has a significant positive impact on users’ ability to distinguish between phishing emails and websites, thereby avoiding such attacks.

ABSTRACT Strong cybersecurity procedures are now more important than ever due to the increased reliance on remote workers. Given the dynamic nature of cyber threats and the necessity of preventative actions, this paper highlights the vital significance of thorough cybersecurity awareness training for remote workers. A customized cybersecurity awareness training model can improve distributed team preparedness and decrease cyberattacks. Organizations should institute regular security awareness programs to educate distributed teams on emerging cyber threats. Vendor businesses should prioritize security education to prevent cyberattacks and protect sensitive data. Our proposed model aims to improve distributed team members' preparedness against cyber threats, enabling organizations to safeguard remote work settings effectively. Our systematic literature review identified key cybersecurity factors, synthesized into 12 groups, including “Unified Governance Framework” and “Secure Mind Initiative.”

Abstract The goal of this research study was to identify and prioritize the significant cybersecurity challenges that vendor firms encounter during software development. Using Systematic Literature Reviews (SLRs), 13 significant challenges were found, including “Security issues/Access of Cyberattacks”, “Lack of Right Knowledge”, “Cost Security Issues”, and “Lack of Confidentiality and Trust” among others. To address these concerns, a multifaceted strategy that prioritizes continuing education, training, and investment in cybersecurity measures, as well as cross‐industry cooperation and coordination with government entities, is required. These challenges were ranked using the Fuzzy Analytic Hierarchy Process (F‐AHP). We obtained the following results after applying the Fuzzy Analytic Hierarchy Process: CSC1 (Cyber Security Challenge‐1) “Security Issues/Access of Cyber Attacks”, CSC2 “Lack of Right Knowledge”, and CSC3 “Framework” are the top most critical cyber security challenges, with weightages of 0.1687, 0.1672, and 0.1194, respectively. This study lays the groundwork for future research and assists vendor organizations in addressing the cybersecurity concerns they face during software development. The study also emphasizes the significance of addressing cybersecurity during the software development process in order to avoid the financial and reputational losses associated with cyber intrusions.

Abstract User forums enable a large population of crowd‐users to publicly share their experience, useful thoughts, and concerns about the software applications in the form of user reviews. Recent research studies have revealed that end‐user reviews contain rich and pivotal sources of information for the software vendors and developers that can help undertake software evolution and maintenance tasks. However, such user‐generated information is often fragmented, with multiple viewpoints from various stakeholders involved in the ongoing discussions in the Reddit forum. In this article, we proposed a crowd‐based requirements engineering by valuation argumentation (CrowdRE‐VArg) approach that analyzes the end‐users discussion in the Reddit forum and identifies conflict‐free new features, design alternatives, or issues, and reach a rationale‐based requirements decision by gradually valuating the relative strength of their supporting and attacking arguments. The proposed approach helps to negotiate the conflict over the new features or issues between the different crowd‐users on the run by finding a settlement that satisfies the involved crowd‐users in the ongoing discussion in the Reddit forum using argumentation theory. For this purpose, we adopted the bipolar gradual valuation argumentation framework, extended from the abstract argumentation framework and abstract valuation framework. The automated CrowdRE‐VArg approach is illustrated through a sample crowd‐users conversation topic adopted from the Reddit forum about Google Map mobile application. Finally, we applied natural language processing and different machine learning algorithms to support the automated execution of the CrowdRE‐VArg approach. The results demonstrate that the proposed CrowdRE‐VArg approach works as a proof‐of‐concept and automatically identifies prioritized requirements‐related information for software engineers.

Abstract The concept of global software development was adopted by software organizations for the purpose of delivering quality software products at a reduced cost. Software reliability became one of the eminent challenges in the global software development. The main objective of this research paper is to develop a classification of the challenging factors in the global software development process faced by vendor organizations. The classification of the challenges depends on the data gathered through systematic literature review and implementation of the analytic hierarchy process (AHP). A total of 18 challenges were explored through systematic literature review and mapped into five categories, that is, capability, reliance, delivery, management, and distinction. The explored issues played a major role for assisting the researcher and designer for mitigating the challenges during “AHP based prioritization framework for Vendor's Reliability challenges in Global Software Development”. Taking the AHP approach, we tried to fill this research gap by exploring and prioritizing the challenges that could negatively impact the vendor reliability of a specific organization. The classification of the explored challenges provided a framework that was used to deal with the issues associated with software reliability in the global software environment, which provided the vital role for the success of software organizations.

Abstract Nowadays, data is increasing exponentially, although cloud computing is an eminent approach for the organization, processing, and availability of data for organizational growth over the internet. Besides, a lot of advantages of cloud computing, yet it is suffered from security challenges, which affect big data while using cloud services on the internet. For this purpose, we conducted a detailed systematic literature review (SLR) study, to identify and capture the security challenges of big data on the cloud computing platform. Our research findings determine and develop a taxonomy, based on the prioritization of the security challenges of big data on cloud computing. We identified a total of 15 critical security challenges using the proposed SLR, with the frequency of each challenge >25%, and are further validated by the industrial specialists using a questionnaire survey study. The identified security challenges are data secrecy issue, geographical data location issue, unauthorized data access issue, lack of control, lack of data management, network‐level issues, data integrity issue, data recovery issue, lack of trust, data sharing issue, data availability, asset issues, legal amenabilities, lack of quality issues, and lack of consistency. The security challenges identified and captured through the SLR study are categorized into four levels, namely, steadiness, management, control, and eminence. Conclusively, we applied the fuzzy‐TOPSIS approach to prioritize and identify the significance of each identified security challenge for the big data usage on cloud computing. Based on our proposed approach, the “data secrecy issue” has been identified as the most prominent security challenge with the captured value of “0.765.” The fuzzy TOPSIS is an effective and innovative research approach in the field of computer science. It has been applied positively to other research areas to address and identify the fuzziness and uncertainty of multiple decision‐making glitches. The findings of the research paper will assist the software vendor organization when using the cloud platform for big data security. Also, using the proposed approach, software vendors can prioritize and analyze the uncertainty and ambiguousness among these security challenges.

Abstract Majority of software development firms are adopting the concepts of global software development (GSD) in order to develop high‐quality and low‐cost products. However, the requirements change management (RCM) becomes a significant challenge in the GSD environment because of the unavailability of proper RCM framework and taxonomy. The objective of this study is to develop a taxonomy of the challenging factors of the RCM process in GSD. The taxonomy is developed based on the results of the data collected during the survey study and the implementation of the analytical hierarchy process (AHP). Total 25 challenging factors are identified and mapped into four core categories, ie, “organizational management,” “team,” “technology,” and “process.” Moreover, the AHP analysis is performed to prioritize the challenging factors and their categories. The prioritization process highlight that “process” is the most significant category of the RCM challenging factors. The taxonomy developed in this study provides a robust framework to tackle problems associated with RCM activities in GSD environment, which is significant to the success and progression of GSD firms.