Artificial Intelligence (AI) security research is promising and highly valuable in the current decade. In particular, deep neural network (DNN) security is receiving increased attention. Although DNNs have recently emerged as a prominent tool for addressing complex challenges across various machine learning (ML) tasks and DNNs stand out as the most widely employed, as well as holding a significant share in both research and industry, DNNs exhibit vulnerabilities to adversarial attacks where slight but intentional perturbations can deceive DNNs models. Consequently, several studies have proposed that DNNs are exposed to new attacks. Given the increasing prevalence of these attacks, researchers need to explore countermeasures that mitigate the associated risks and enhance the reliability of adapting DNNs to various critical applications. As a result, DNNs have been protected against adversarial attacks using a variety of defense mechanisms. Our primary focus is DNN as a foundational technology across all ML tasks. In this work, we comprehensively survey and present the latest research on DNN security based on various ML tasks, highlighting the adversarial attacks that cause DNNs to fail and the defense strategies that protect the DNNs. We review, explore, and elucidate the operational mechanisms of prevailing adversarial attacks and defense mechanisms applicable to all ML tasks utilizing DNN. Our review presents a detailed taxonomy for attacker and defender problems, providing a comprehensive and robust review of most state-of-the-art attacks and defenses in recent years. Additionally, we thoroughly examine the most recent systematic review concerning the measures used to evaluate the success of attack or defense methods. Finally, we address current challenges and open issues in this field and future research directions.

The BYOD Security Policy (BYOD-SP) constitutes formal documentation protecting sensitive data and information during BYOD implementation in an organization. The BYOD environment in an organization might face threats if information assets security is not prioritized before initializing BYOD. Releasing BYOD-SP is one of the key strategies to safeguard safety in BYOD implementation and to ensure users adhere to the BYOD-SP. It can also increase the understanding of ways to protect the BYOD environment from any risk. Hence, this study explores the current situation of BYOD, specifically in Malaysian tertiary education institutions, and the compulsory components that should be highlighted in the BYOD-SP. The implementation of (BYOD-SP) in Malaysian Institutions of Higher Learning (IHL) has led to a sense of discouragement, with only a few institutions being able to clearly outline their implementation strategy, in contrast to what has been done by foreign universities. This has resulted in a lack of information and understanding about the components of BYOD-SP in the Malaysian environment, making it difficult to make deeper comparisons. Understanding the current practice of BYOD can provide a more comprehensive study of a suitable model, cybersecurity framework, or other features to prepare a comprehensive BYOD-SP documentation on campus. As the BYOD implementation is underway, this study could increase awareness of all aspects of BYOD to aid organizations in formulating the BYOD-SP document. This could encourage BYOD players to achieve maximum information security protection.

In education sector, Bring Your Own Device (BYOD) Security Policy (BYOD-SP) was established as earlier in 2015 in foreign universities with the purpose to safeguard campus’s network, system and confidential data and information. BYOD-SP is one of the strategic planning launched, aims to achieve maximum security for personally owned device through BYOD phenomenon. BYOD-SP acts as an official documentation that describes the detailed explanation of each component for the BYOD users to abide to all the components’ requirement in BYOD-SP. In BYOD practice in education field, BYOD-SP must meet the education agenda where BYOD-SP need to be tailored following education strategic plans and eliminate potential attacks that might cause the universities in loss if BYOD-SP is launched without having a robust model to refer of its components. Hence, it is crucial as this will welcome unauthorized parties to get access, gain and steal campus corporate data in BYOD environment. This study aims to identify what the necessary components that could assist top management and policy makers to formulate the comprehensive BYOD-SP in future and BYOD can be one of mobile computing that being accepted to be practiced in secured environment. Existing studies were executed in many research designs, where the review fulfilled the Preferred Reporting Items for Systematic reviews and MetaAnalyses (PRISMA) publishing standard. Two common online databases, World of Science (WOS) and Scopus were utilized to observe articles for this study purposes where a total of 16 articles published from 2013-2022 were reviewed to answer the formulated research questions on BYOD-SP. This review includes a topic based on the thematic analysis which is the components in drafting BYOD-SP documentation. The findings from this study proved four main components to be emphasized in tailoring BYOD-SP which are Device, Process, People and Jurisdiction/Law. The research’s findings here may drive the organization to have a reference model of BYOD-SP components and come out with the sturdy BYOD-SP to be adhered by all individuals in education premises. The top management in the organization need to involve in the procedures in each component of BYOD-SP to alleviate the case of security breach in BYOD activities.

Millions of people use the internet daily, including the elderly, who are among the most at-risk groups for cybercrime, such as fraud, hacking, and cyberbullying. However, there has been a lack of cybercrime studies focusing on them. Additionally, various cybersecurity models deployed by governments and organizations are found to be inconvenient and too technical for the elderly, especially those with impairments or conditions that require special attention. This subsequently leads to an increasing number of cybercrimes. Therefore, this paper presents a light review of existing cybersecurity models suitable for the elderly. Three methods were used to review existing cybersecurity awareness models. First, a feasibility study was conducted following several works of literature related to cybersecurity, types of cybercrimes involving the elderly, characteristics of the elderly commonly targeted by cybercriminals, cybersecurity awareness models, and the elderly's learning styles. Second, based on the literature review, the elderly's learning styles were analyzed. Finally, the cybersecurity awareness model suitable for the elderly was chosen and analyzed with respect to their phases, validity, and technicality. In conclusion, the SCSAM-Elderly was selected as the most suitable model for the elderly to learn and spread awareness of cybersecurity. This study could increase cybersecurity awareness and encourage educating the elderly to maximize their knowledge of cybersecurity. The findings from this study can guide organizations, agencies, governments, and educational institutions in their endeavours to educate the elderly about cybercrime and cyberattacks.

Most of Malaysia’s small entrepreneurs have switched to online platforms as an alternative to their physical businesses. Social media sites such as TikTok, Instagram, Twitter, and Facebook provide free advertising tools and convenient access to a broader global target. However, security issues on these websites remain questionable as users are exposed to web attacks due to the vulnerabilities on the websites. Considering the cost and lack of awareness of the importance of cybersecurity, some organizations find it not profitable to invest in securing their websites. Therefore, this paper aims to test Malaysian small entrepreneurs’ web applications using open-source scanners and analyse the results of web vulnerabilities detected. To do so, two types of open-source scanners, OWASP ZAP and IRONWASP, were installed to scan five websites found through advertisements on social media sites. The web vulnerability identification was based on the top 5 OWASP web vulnerability reports, and the results showed that five types of web vulnerabilities were detected. The analysis of the results showed that the top 5 web vulnerabilities in Malaysian small entrepreneurs’ websites are the ‘Missing Session Timeout’ vulnerability with 81.84 percent, the ‘Sensitive Information Passed as Clear Text in GET URL’ vulnerability with 14.74 percent, and the ‘Session ID Cookies not Marked Secure’ vulnerability with 2.47 percent. This paper provides security analysis on Small Medium Enterprise (SME) websites for future enhancement and consideration during development and implementation to avoid possible attacks. Therefore, developers are advised to handle these vulnerabilities by carefully managing the session timeout, and users are recommended to log out from the websites immediately after they are done.

This paper aims to underline the views and opinions of Malaysian Shariah scholars regarding the permissibility of cryptocurrency. Semi-structured interviews were conducted with three Malaysian Shariah scholars who have the authority to give rulings. This study found that two of the informants agreed that restrictions on using cryptocurrency are needed due to the bad outweighing the good, and to prevent terrible things from happening to users, especially those who have little knowledge about cryptocurrency. On the other hand, one of the informants allows the usage of cryptocurrency based on the argument that all the requirements and guidelines on cryptocurrency addressed by the securities commission must be fulfilled. This study will be helpful for Muslim investors, who deal with cryptocurrency. It is recommended to do future research on how various Islamic countries are approaching the regulation of cryptocurrency.