Slide
Centre Interdisciplinaire
de Recherche et d’Innovation
en Cybersécurité et Société
de Recherche et d’Innovation
en Cybersécurité et Société
1.
Selamnia, A.; Moudoud, H.; Khoukhi, L.; Brik, B.; Houda, Z. A. El
QSFL-ID: Quantum-Split Federated Learning for Intrusion Detection in IIoT Networks Proceedings Article
In: IEEE Int Conf Commun, Institute of Electrical and Electronics Engineers Inc., 2026, ISBN: 15503607 (ISSN); 979-831954209-0 (ISBN), (Journal Abbreviation: IEEE Int Conf Commun).
Abstract | Links | BibTeX | Tags: Automation, Complex networks, Cyber threats, Federated learning, IIoT, Industrial automation, Industrial internet of thing, Intrusion Detection, Intrusion-Detection, Learning systems, Machine learning methods, Network intrusion, Network security, Privacy-preserving techniques, Processing power, QML, Quantum circuit, Quantum entanglement, Split Learning, Variational quantum circuit, VQC
@inproceedings{selamniaQSFLIDQuantumSplitFederated2026,
title = {QSFL-ID: Quantum-Split Federated Learning for Intrusion Detection in IIoT Networks},
author = {A. Selamnia and H. Moudoud and L. Khoukhi and B. Brik and Z. A. El Houda},
url = {https://www.scopus.com/pages/publications/105045419288?origin=resultslist},
doi = {10.1109/ICC59461.2026.11587037},
isbn = {15503607 (ISSN); 979-831954209-0 (ISBN)},
year = {2026},
date = {2026-01-01},
booktitle = {IEEE Int Conf Commun},
publisher = {Institute of Electrical and Electronics Engineers Inc.},
abstract = {The Industrial Internet of Things (IIoT) is reshaping industrial automation through interconnected, intelligent systems. However, this evolution increases exposure to sophisticated cyber threats, especially given the constraints of IIoT devices such as limited processing power, bandwidth, and heterogeneous protocols. Traditional machine learning methods often fail to meet these security demands due to their computational intensity and centralized data requirements. To address this, we propose a hybrid quantum-classical Split Federated Learning (SFL) framework for intrusion detection in IIoT networks. Our method integrates Variational Quantum Circuits (VQCs) to model complex, non-linear data relationships, enhancing detection accuracy while preserving data privacy through decentralized learning. The architecture assigns lightweight preprocessing to edge devices and complex analysis to a quantum backend, ensuring efficiency and scalability. To evaluate the proposed framework, we conduct extensive experiments on the real-world EDGE-IIoT dataset; the experimental results demonstrate that the model attains 95.5% training accuracy, significantly surpassing classical SFL (85.7%). In addition, the quantum model's enhanced entanglement properties and expressibility strengthen its generalization performance. This approach offers an efficient and privacy-preserving solution for securing IIoT systems. © 2026 IEEE.},
note = {Journal Abbreviation: IEEE Int Conf Commun},
keywords = {Automation, Complex networks, Cyber threats, Federated learning, IIoT, Industrial automation, Industrial internet of thing, Intrusion Detection, Intrusion-Detection, Learning systems, Machine learning methods, Network intrusion, Network security, Privacy-preserving techniques, Processing power, QML, Quantum circuit, Quantum entanglement, Split Learning, Variational quantum circuit, VQC},
pubstate = {published},
tppubtype = {inproceedings}
}
The Industrial Internet of Things (IIoT) is reshaping industrial automation through interconnected, intelligent systems. However, this evolution increases exposure to sophisticated cyber threats, especially given the constraints of IIoT devices such as limited processing power, bandwidth, and heterogeneous protocols. Traditional machine learning methods often fail to meet these security demands due to their computational intensity and centralized data requirements. To address this, we propose a hybrid quantum-classical Split Federated Learning (SFL) framework for intrusion detection in IIoT networks. Our method integrates Variational Quantum Circuits (VQCs) to model complex, non-linear data relationships, enhancing detection accuracy while preserving data privacy through decentralized learning. The architecture assigns lightweight preprocessing to edge devices and complex analysis to a quantum backend, ensuring efficiency and scalability. To evaluate the proposed framework, we conduct extensive experiments on the real-world EDGE-IIoT dataset; the experimental results demonstrate that the model attains 95.5% training accuracy, significantly surpassing classical SFL (85.7%). In addition, the quantum model's enhanced entanglement properties and expressibility strengthen its generalization performance. This approach offers an efficient and privacy-preserving solution for securing IIoT systems. © 2026 IEEE.
2.
Falschau, K. R. Agbodoh; Lamzihri, O.; Gagnon, S.
In: International Journal of Accounting and Information Management, 2025, ISSN: 18347649 (ISSN).
Abstract | Links | BibTeX | Tags: C81, Cyber threats, Disinformation, Fake news, G34, Governance, K42, M15, Misinformation, Misleading information
@article{agbodoh_falschau_governance_2025,
title = {Do governance determinants contribute to effective management of cybersecurity threats posed by misleading information? Evidence from Canadian organizations},
author = {K. R. Agbodoh Falschau and O. Lamzihri and S. Gagnon},
url = {https://www.scopus.com/inward/record.uri?eid=2-s2.0-105024451738&doi=10.1108%2FIJAIM-12-2024-0467&partnerID=40&md5=58f9de11e945619e41d0f3085b3d819b},
doi = {10.1108/IJAIM-12-2024-0467},
issn = {18347649 (ISSN)},
year = {2025},
date = {2025-01-01},
journal = {International Journal of Accounting and Information Management},
abstract = {Purpose – This study aims to explore governance solutions adopted by Canadian organizations to address the cybersecurity threats posed by misleading information. Design/methodology/approach – This paper investigates the impact of several organizations’ governance determinants on five types of misleading information: phishing incidents, impersonation, fake news or false stories, fake reviews and other types of misleading information. Using nonparametric statistical techniques and regression models, this study assessed regional variations in responding to misleading information challenges and the effectiveness of mitigation strategies. Findings – These results reveal that no unique governance solutions have emerged across the jurisdictions, implying that organizations operating in each province have different tolerances for emerging cyber risks and, thus, adopted specific strategies to combat them. The results also suggest that the impact exerted by specific governance determinants on misleading information varies across jurisdictions. Research limitations/implications – Limitations: The reliance on secondary data may limit the generalization of the results to other countries. Future research should consider additional determinants, such as non-technological organizational factors, and a longitudinal approach to assessing the significance of solutions and the frequency of incidents. Implications: The study’s findings are expected to contribute to operational and strategic directions that elevate awareness of the growing threat of misleading information in the cyber domain. It provides stakeholders with effective governance solutions that play a critical role in mitigating cybersecurity risks by fostering awareness and detection capabilities. Practical implications – The study’s findings are expected to contribute to operational and strategic directions that elevate awareness of the growing threat of misleading information in the cyber domain. It provides stakeholders with effective governance solutions that play a critical role in mitigating cybersecurity risks by fostering awareness and detection capabilities. Originality/value – This paper offers new insights and practical implications about governance solutions that might be considered in combating specific misleading information portrayed as emerging cyber threats. © 2025 Emerald Publishing Limited},
keywords = {C81, Cyber threats, Disinformation, Fake news, G34, Governance, K42, M15, Misinformation, Misleading information},
pubstate = {published},
tppubtype = {article}
}
Purpose – This study aims to explore governance solutions adopted by Canadian organizations to address the cybersecurity threats posed by misleading information. Design/methodology/approach – This paper investigates the impact of several organizations’ governance determinants on five types of misleading information: phishing incidents, impersonation, fake news or false stories, fake reviews and other types of misleading information. Using nonparametric statistical techniques and regression models, this study assessed regional variations in responding to misleading information challenges and the effectiveness of mitigation strategies. Findings – These results reveal that no unique governance solutions have emerged across the jurisdictions, implying that organizations operating in each province have different tolerances for emerging cyber risks and, thus, adopted specific strategies to combat them. The results also suggest that the impact exerted by specific governance determinants on misleading information varies across jurisdictions. Research limitations/implications – Limitations: The reliance on secondary data may limit the generalization of the results to other countries. Future research should consider additional determinants, such as non-technological organizational factors, and a longitudinal approach to assessing the significance of solutions and the frequency of incidents. Implications: The study’s findings are expected to contribute to operational and strategic directions that elevate awareness of the growing threat of misleading information in the cyber domain. It provides stakeholders with effective governance solutions that play a critical role in mitigating cybersecurity risks by fostering awareness and detection capabilities. Practical implications – The study’s findings are expected to contribute to operational and strategic directions that elevate awareness of the growing threat of misleading information in the cyber domain. It provides stakeholders with effective governance solutions that play a critical role in mitigating cybersecurity risks by fostering awareness and detection capabilities. Originality/value – This paper offers new insights and practical implications about governance solutions that might be considered in combating specific misleading information portrayed as emerging cyber threats. © 2025 Emerald Publishing Limited
3.
Boudra, N.; Elhajjout, A.; Moudoud, H.; Oujaoura, M.; Jarir, Z.; Houda, Z. A. El
Toward Lightweight IoC Extraction in IoT: The Role of Small Language Models Proceedings Article
In: Int. Congr. Smart Agric. Sustain. Syst., SmartAgri SuSY, Institute of Electrical and Electronics Engineers Inc., 2025, ISBN: 979-833157801-5 (ISBN), (Journal Abbreviation: Int. Congr. Smart Agric. Sustain. Syst., SmartAgri SuSY).
Abstract | Links | BibTeX | Tags: Artificial intelligence, Cyber threats, Data-source, Edge Computing, extraction, Indicator of compromize, Indicators of Compromise, Information retrieval, Information Security, IoT Security, Language model, Malware, Natural languages, Network security, Program processors, Resource Constraint, Resource Constraints, Semantics, Small language model, Small Language Models, Threat Intelligence
@inproceedings{boudraLightweightIoCExtraction2025,
title = {Toward Lightweight IoC Extraction in IoT: The Role of Small Language Models},
author = {N. Boudra and A. Elhajjout and H. Moudoud and M. Oujaoura and Z. Jarir and Z. A. El Houda},
url = {https://www.scopus.com/pages/publications/105037622873?origin=resultslist},
doi = {10.1109/SmartAgriSuSY68475.2025.11466843},
isbn = {979-833157801-5 (ISBN)},
year = {2025},
date = {2025-01-01},
booktitle = {Int. Congr. Smart Agric. Sustain. Syst., SmartAgri SuSY},
publisher = {Institute of Electrical and Electronics Engineers Inc.},
abstract = {The proliferation of cyber threats necessitates rapid and accurate extraction of Indicators of Compromise (IoCs) from diverse security data sources. While Large Language Models (LLMs) have demonstrated exceptional capabilities in natural language processing and information extraction tasks, their deployment on resource-constrained IoT devices remains challenging due to computational and memory requirements. This paper investigates whether Small Language Models (SLMs) can serve as effective alternatives to LLMs for IoC extraction in IoT environments with limited resources. We present a novel direct LLM-based IoC extraction system leveraging context memory mechanisms for document-wide semantic understanding, specifically designed for deployment on edge computing infrastructure with consumer-grade hardware. Our experimental setup utilizes an RTX 4080 GPU and Ryzen 7 7700X processor running the Ollama framework with GPT-OSS:20B model to evaluate the feasibility of using smaller models instead of resource-intensive LLMs for security tasks. Evaluated on 9 diverse threat intelligence reports spanning different malware families and attack campaigns, the system achieved an average F1 score of 0.62, precision of 0.54, recall of 0.79, and accuracy of 0.85, demonstrating that SLMs can achieve acceptable accuracy levels for IoC extraction while operating within the computational constraints typical of IoT edge deployments. The results suggest that smaller models may provide viable alternatives to large language models for distributed threat intelligence processing in resource-limited environments. © 2025 IEEE.},
note = {Journal Abbreviation: Int. Congr. Smart Agric. Sustain. Syst., SmartAgri SuSY},
keywords = {Artificial intelligence, Cyber threats, Data-source, Edge Computing, extraction, Indicator of compromize, Indicators of Compromise, Information retrieval, Information Security, IoT Security, Language model, Malware, Natural languages, Network security, Program processors, Resource Constraint, Resource Constraints, Semantics, Small language model, Small Language Models, Threat Intelligence},
pubstate = {published},
tppubtype = {inproceedings}
}
The proliferation of cyber threats necessitates rapid and accurate extraction of Indicators of Compromise (IoCs) from diverse security data sources. While Large Language Models (LLMs) have demonstrated exceptional capabilities in natural language processing and information extraction tasks, their deployment on resource-constrained IoT devices remains challenging due to computational and memory requirements. This paper investigates whether Small Language Models (SLMs) can serve as effective alternatives to LLMs for IoC extraction in IoT environments with limited resources. We present a novel direct LLM-based IoC extraction system leveraging context memory mechanisms for document-wide semantic understanding, specifically designed for deployment on edge computing infrastructure with consumer-grade hardware. Our experimental setup utilizes an RTX 4080 GPU and Ryzen 7 7700X processor running the Ollama framework with GPT-OSS:20B model to evaluate the feasibility of using smaller models instead of resource-intensive LLMs for security tasks. Evaluated on 9 diverse threat intelligence reports spanning different malware families and attack campaigns, the system achieved an average F1 score of 0.62, precision of 0.54, recall of 0.79, and accuracy of 0.85, demonstrating that SLMs can achieve acceptable accuracy levels for IoC extraction while operating within the computational constraints typical of IoT edge deployments. The results suggest that smaller models may provide viable alternatives to large language models for distributed threat intelligence processing in resource-limited environments. © 2025 IEEE.
4.
Amari, H.; Houda, Z. A. El; Moudoud, H.; Khoukhi, L.; Belguith, L. H.
Blockchain-Based Federated Learning for Enhanced Cyber-Threats Detection in Connected Vehicles Proceedings Article
In: M., Valenti; D., Reed; M., Torres (Ed.): IEEE Int Conf Commun, pp. 4257–4262, Institute of Electrical and Electronics Engineers Inc., 2025, ISBN: 15503607 (ISSN); 979-833150521-9 (ISBN), (Journal Abbreviation: IEEE Int Conf Commun).
Abstract | Links | BibTeX | Tags: Block-chain, Blockchain, Central layers, Computer crime, Connected vehicle, Connected Vehicles, Cyber threats, Cyberthreat detection, Cyberthreats, Cyberthreats Detection, Data privacy, Federated learning, Intelligent transport, Intelligent vehicle highway systems, Internet of things, Intrusion Detection, Intrusion Detection Systems, Learning systems, Network security, SDN, Threat detection, Traffic control, Vehicles
@inproceedings{amariBlockchainBasedFederatedLearning2025,
title = {Blockchain-Based Federated Learning for Enhanced Cyber-Threats Detection in Connected Vehicles},
author = {H. Amari and Z. A. El Houda and H. Moudoud and L. Khoukhi and L. H. Belguith},
editor = {Valenti M. and Reed D. and Torres M.},
url = {https://www.scopus.com/pages/publications/105018456633?origin=resultslist},
doi = {10.1109/ICC52391.2025.11161266},
isbn = {15503607 (ISSN); 979-833150521-9 (ISBN)},
year = {2025},
date = {2025-01-01},
booktitle = {IEEE Int Conf Commun},
pages = {4257–4262},
publisher = {Institute of Electrical and Electronics Engineers Inc.},
abstract = {Over the past few years, there have been made significant strides in advancing the Internet of Vehicles (IoV), recognizing its strategic importance in Intelligent Transport Systems. The proliferation of connected and autonomous vehicles on the roads has propelled the IoV into the spotlight. However, addressing the specific demands of vehicular networks, such as low latency, high mobility, extensive connectivity of 5G/6G networks, and robust security, remains a substantial challenge. Therefore, there is a critical need for substantial progress in implementing a resilient Intrusion Detection System within the IoV ecosystem. This paper introduces VFed-IDS, a decentralized, secure, flexible, scalable, and robust Blockchain and Federated Learning-based intrusion detection system. VFed-IDS is designed to identify cyber threats in the IoV while preserving privacy in connected vehicles. The proposed architecture consists of three main layers: the central layer, the local layer, and the Blockchain layer. The central layer includes the SDN Controller, responsible for training and aggregating the global model. The local layer comprises vehicles training individual models based on their private local datasets. The Blockchain layer introduces the Smart Contract VFed-SC, which manages the list of authenticated and collaborating vehicles in the Federated Learning process. It also hashes trained local model updates before transmitting them as transactions between the central and local layers. Simulation results demonstrate that VFed-IDS achieves a high accuracy rate of 99%, effectively enhancing the autonomous behavior of connected vehicles against cyber threats. © 2025 IEEE.},
note = {Journal Abbreviation: IEEE Int Conf Commun},
keywords = {Block-chain, Blockchain, Central layers, Computer crime, Connected vehicle, Connected Vehicles, Cyber threats, Cyberthreat detection, Cyberthreats, Cyberthreats Detection, Data privacy, Federated learning, Intelligent transport, Intelligent vehicle highway systems, Internet of things, Intrusion Detection, Intrusion Detection Systems, Learning systems, Network security, SDN, Threat detection, Traffic control, Vehicles},
pubstate = {published},
tppubtype = {inproceedings}
}
Over the past few years, there have been made significant strides in advancing the Internet of Vehicles (IoV), recognizing its strategic importance in Intelligent Transport Systems. The proliferation of connected and autonomous vehicles on the roads has propelled the IoV into the spotlight. However, addressing the specific demands of vehicular networks, such as low latency, high mobility, extensive connectivity of 5G/6G networks, and robust security, remains a substantial challenge. Therefore, there is a critical need for substantial progress in implementing a resilient Intrusion Detection System within the IoV ecosystem. This paper introduces VFed-IDS, a decentralized, secure, flexible, scalable, and robust Blockchain and Federated Learning-based intrusion detection system. VFed-IDS is designed to identify cyber threats in the IoV while preserving privacy in connected vehicles. The proposed architecture consists of three main layers: the central layer, the local layer, and the Blockchain layer. The central layer includes the SDN Controller, responsible for training and aggregating the global model. The local layer comprises vehicles training individual models based on their private local datasets. The Blockchain layer introduces the Smart Contract VFed-SC, which manages the list of authenticated and collaborating vehicles in the Federated Learning process. It also hashes trained local model updates before transmitting them as transactions between the central and local layers. Simulation results demonstrate that VFed-IDS achieves a high accuracy rate of 99%, effectively enhancing the autonomous behavior of connected vehicles against cyber threats. © 2025 IEEE.
5.
Moudoud, H.; Houda, Z. A. E.; Brik, B.
LLMs to Secure Consumer Networks: Open Problems and Future Directions Journal Article
In: IEEE Consumer Electronics Magazine, vol. 14, no. 5, pp. 51–59, 2025, ISSN: 21622248 (ISSN).
Abstract | Links | BibTeX | Tags: 'current, Comprehensive research, Cyber threats, Defence mechanisms, Forward looking, Generative adversarial networks, Innovative solutions, Language model, Research problems, Security mechanism, Smart Home Technology
@article{moudoudLLMsSecureConsumer2025,
title = {LLMs to Secure Consumer Networks: Open Problems and Future Directions},
author = {H. Moudoud and Z. A. E. Houda and B. Brik},
url = {https://www.scopus.com/pages/publications/85217963109?origin=resultslist},
doi = {10.1109/MCE.2025.3542247},
issn = {21622248 (ISSN)},
year = {2025},
date = {2025-01-01},
journal = {IEEE Consumer Electronics Magazine},
volume = {14},
number = {5},
pages = {51–59},
publisher = {Institute of Electrical and Electronics Engineers Inc.},
abstract = {The increasing complexity of consumer networks, characterized by the rapid adoption of Internet of Things devices and smart home technologies, exposes significant limitations in traditional security mechanisms. These challenges drive a growing interest in innovative solutions, such as generative artificial intelligence, including large language models (LLMs) to ensure the security of consumer networks from evolving cyber threats. In this article, we present a forward-looking perspective on the role of LLMs in securing consumer networks. Then, we present a comprehensive study of attacks targeting LLMs and current defense mechanisms/strategies. Finally, we present a set of core research problems and a comprehensive research agenda that identifies future directions to advance LLM capabilities for consumer network security. © 2012 IEEE.},
keywords = {'current, Comprehensive research, Cyber threats, Defence mechanisms, Forward looking, Generative adversarial networks, Innovative solutions, Language model, Research problems, Security mechanism, Smart Home Technology},
pubstate = {published},
tppubtype = {article}
}
The increasing complexity of consumer networks, characterized by the rapid adoption of Internet of Things devices and smart home technologies, exposes significant limitations in traditional security mechanisms. These challenges drive a growing interest in innovative solutions, such as generative artificial intelligence, including large language models (LLMs) to ensure the security of consumer networks from evolving cyber threats. In this article, we present a forward-looking perspective on the role of LLMs in securing consumer networks. Then, we present a comprehensive study of attacks targeting LLMs and current defense mechanisms/strategies. Finally, we present a set of core research problems and a comprehensive research agenda that identifies future directions to advance LLM capabilities for consumer network security. © 2012 IEEE.
6.
Falschau, K. R. Agbodoh; Lamzihri, O.; Gagnon, S.
In: International Journal of Accounting and Information Management, vol. 34, no. 2, pp. 385–411, 2025, ISSN: 18347649 (ISSN).
Abstract | Links | BibTeX | Tags: C81, Cyber threats, Disinformation, Fake news, G34, Governance, K42, M15, Misinformation, Misleading information
@article{agbodohfalschauGovernanceDeterminantsContribute2025,
title = {Do governance determinants contribute to effective management of cybersecurity threats posed by misleading information? Evidence from Canadian organizations},
author = {K. R. Agbodoh Falschau and O. Lamzihri and S. Gagnon},
url = {https://www.scopus.com/pages/publications/105024451738?origin=resultslist},
doi = {10.1108/IJAIM-12-2024-0467},
issn = {18347649 (ISSN)},
year = {2025},
date = {2025-01-01},
journal = {International Journal of Accounting and Information Management},
volume = {34},
number = {2},
pages = {385–411},
publisher = {Emerald Publishing},
abstract = {Purpose – This study aims to explore governance solutions adopted by Canadian organizations to address the cybersecurity threats posed by misleading information. Design/methodology/approach – This paper investigates the impact of several organizations’ governance determinants on five types of misleading information: phishing incidents, impersonation, fake news or false stories, fake reviews and other types of misleading information. Using nonparametric statistical techniques and regression models, this study assessed regional variations in responding to misleading information challenges and the effectiveness of mitigation strategies. Findings – These results reveal that no unique governance solutions have emerged across the jurisdictions, implying that organizations operating in each province have different tolerances for emerging cyber risks and, thus, adopted specific strategies to combat them. The results also suggest that the impact exerted by specific governance determinants on misleading information varies across jurisdictions. Research limitations/implications – Limitations: The reliance on secondary data may limit the generalization of the results to other countries. Future research should consider additional determinants, such as non-technological organizational factors, and a longitudinal approach to assessing the significance of solutions and the frequency of incidents. Implications: The study’s findings are expected to contribute to operational and strategic directions that elevate awareness of the growing threat of misleading information in the cyber domain. It provides stakeholders with effective governance solutions that play a critical role in mitigating cybersecurity risks by fostering awareness and detection capabilities. Practical implications – The study’s findings are expected to contribute to operational and strategic directions that elevate awareness of the growing threat of misleading information in the cyber domain. It provides stakeholders with effective governance solutions that play a critical role in mitigating cybersecurity risks by fostering awareness and detection capabilities. Originality/value – This paper offers new insights and practical implications about governance solutions that might be considered in combating specific misleading information portrayed as emerging cyber threats. © 2025 Emerald Publishing Limited},
keywords = {C81, Cyber threats, Disinformation, Fake news, G34, Governance, K42, M15, Misinformation, Misleading information},
pubstate = {published},
tppubtype = {article}
}
Purpose – This study aims to explore governance solutions adopted by Canadian organizations to address the cybersecurity threats posed by misleading information. Design/methodology/approach – This paper investigates the impact of several organizations’ governance determinants on five types of misleading information: phishing incidents, impersonation, fake news or false stories, fake reviews and other types of misleading information. Using nonparametric statistical techniques and regression models, this study assessed regional variations in responding to misleading information challenges and the effectiveness of mitigation strategies. Findings – These results reveal that no unique governance solutions have emerged across the jurisdictions, implying that organizations operating in each province have different tolerances for emerging cyber risks and, thus, adopted specific strategies to combat them. The results also suggest that the impact exerted by specific governance determinants on misleading information varies across jurisdictions. Research limitations/implications – Limitations: The reliance on secondary data may limit the generalization of the results to other countries. Future research should consider additional determinants, such as non-technological organizational factors, and a longitudinal approach to assessing the significance of solutions and the frequency of incidents. Implications: The study’s findings are expected to contribute to operational and strategic directions that elevate awareness of the growing threat of misleading information in the cyber domain. It provides stakeholders with effective governance solutions that play a critical role in mitigating cybersecurity risks by fostering awareness and detection capabilities. Practical implications – The study’s findings are expected to contribute to operational and strategic directions that elevate awareness of the growing threat of misleading information in the cyber domain. It provides stakeholders with effective governance solutions that play a critical role in mitigating cybersecurity risks by fostering awareness and detection capabilities. Originality/value – This paper offers new insights and practical implications about governance solutions that might be considered in combating specific misleading information portrayed as emerging cyber threats. © 2025 Emerald Publishing Limited
7.
Falschau, K. R. Agbodoh; Lamzihri, O.; Gagnon, S.
In: International Journal of Accounting and Information Management, 2025, ISSN: 18347649 (ISSN).
Abstract | Links | BibTeX | Tags: C81, Cyber threats, Disinformation, Fake news, G34, Governance, K42, M15, Misinformation, Misleading information
@article{agbodohfalschauGovernanceDeterminantsContribute2025a,
title = {Do governance determinants contribute to effective management of cybersecurity threats posed by misleading information? Evidence from Canadian organizations},
author = {K. R. Agbodoh Falschau and O. Lamzihri and S. Gagnon},
url = {https://www.scopus.com/inward/record.uri?eid=2-s2.0-105024451738&doi=10.1108%2FIJAIM-12-2024-0467&partnerID=40&md5=58f9de11e945619e41d0f3085b3d819b},
doi = {10.1108/IJAIM-12-2024-0467},
issn = {18347649 (ISSN)},
year = {2025},
date = {2025-01-01},
journal = {International Journal of Accounting and Information Management},
abstract = {Purpose – This study aims to explore governance solutions adopted by Canadian organizations to address the cybersecurity threats posed by misleading information. Design/methodology/approach – This paper investigates the impact of several organizations’ governance determinants on five types of misleading information: phishing incidents, impersonation, fake news or false stories, fake reviews and other types of misleading information. Using nonparametric statistical techniques and regression models, this study assessed regional variations in responding to misleading information challenges and the effectiveness of mitigation strategies. Findings – These results reveal that no unique governance solutions have emerged across the jurisdictions, implying that organizations operating in each province have different tolerances for emerging cyber risks and, thus, adopted specific strategies to combat them. The results also suggest that the impact exerted by specific governance determinants on misleading information varies across jurisdictions. Research limitations/implications – Limitations: The reliance on secondary data may limit the generalization of the results to other countries. Future research should consider additional determinants, such as non-technological organizational factors, and a longitudinal approach to assessing the significance of solutions and the frequency of incidents. Implications: The study’s findings are expected to contribute to operational and strategic directions that elevate awareness of the growing threat of misleading information in the cyber domain. It provides stakeholders with effective governance solutions that play a critical role in mitigating cybersecurity risks by fostering awareness and detection capabilities. Practical implications – The study’s findings are expected to contribute to operational and strategic directions that elevate awareness of the growing threat of misleading information in the cyber domain. It provides stakeholders with effective governance solutions that play a critical role in mitigating cybersecurity risks by fostering awareness and detection capabilities. Originality/value – This paper offers new insights and practical implications about governance solutions that might be considered in combating specific misleading information portrayed as emerging cyber threats. © 2025 Emerald Publishing Limited},
keywords = {C81, Cyber threats, Disinformation, Fake news, G34, Governance, K42, M15, Misinformation, Misleading information},
pubstate = {published},
tppubtype = {article}
}
Purpose – This study aims to explore governance solutions adopted by Canadian organizations to address the cybersecurity threats posed by misleading information. Design/methodology/approach – This paper investigates the impact of several organizations’ governance determinants on five types of misleading information: phishing incidents, impersonation, fake news or false stories, fake reviews and other types of misleading information. Using nonparametric statistical techniques and regression models, this study assessed regional variations in responding to misleading information challenges and the effectiveness of mitigation strategies. Findings – These results reveal that no unique governance solutions have emerged across the jurisdictions, implying that organizations operating in each province have different tolerances for emerging cyber risks and, thus, adopted specific strategies to combat them. The results also suggest that the impact exerted by specific governance determinants on misleading information varies across jurisdictions. Research limitations/implications – Limitations: The reliance on secondary data may limit the generalization of the results to other countries. Future research should consider additional determinants, such as non-technological organizational factors, and a longitudinal approach to assessing the significance of solutions and the frequency of incidents. Implications: The study’s findings are expected to contribute to operational and strategic directions that elevate awareness of the growing threat of misleading information in the cyber domain. It provides stakeholders with effective governance solutions that play a critical role in mitigating cybersecurity risks by fostering awareness and detection capabilities. Practical implications – The study’s findings are expected to contribute to operational and strategic directions that elevate awareness of the growing threat of misleading information in the cyber domain. It provides stakeholders with effective governance solutions that play a critical role in mitigating cybersecurity risks by fostering awareness and detection capabilities. Originality/value – This paper offers new insights and practical implications about governance solutions that might be considered in combating specific misleading information portrayed as emerging cyber threats. © 2025 Emerald Publishing Limited