Admilson de Ribamar Lima Ribeiro

The growing concern for information security arises from the risks associated with the dissemination of personal data on the internet and the increasing incidents of social engineering attacks, which exploit psychological vulnerabilities. These attacks pose a substantial threat to individuals and organizations, potentially resulting in significant financial losses. This article highlights the development of the APSEA tool - Awareness and Prevention Expert System against Engineering Attacks, an expert system designed to raise awareness and prevent social engineering attacks in public organizations. The tool aims to make employees vigilant against such threats, empowering them to identify and avoid psychological manipulation techniques used by attackers. Despite existing protective measures such as awareness training and security policies, APSEA seeks to contribute to strengthening the human factor in information security. The article covers key concepts in information security, presenting interactive modules and artificial intelligence features to identify vulnerabilities. A qualitative and performance evaluation of the tool is conducted, and the results indicate that the adopted approach is effective in achieving its objectives.

Privacy protection ensures that individuals have control over personal data, preventing abuse and preserving trust in the use of online services. In the “Digital Era”, where the collection, storage and processing of personal information have become ubiquitous, data privacy emerges as a relevant topic. In this sense, laws were created, such as the General Data Protection Law (LGPD) in Brazil and the General Data Protection Regulation (GDPR) in Europe, to control privacy and the processing of personal data. The article presents a comparative analysis of 2 (two) data privacy mechanisms, the Zero-Knowledge Proof (ZKP) and Ring Signatures, used in Blockchain, aiming at the legal and regulatory implications with the LGPD and GDPR. The comparative study between ZKP and Ring Signatures highlights the flexibility of ZKP in various contexts, including voting and secure authentication systems, while Ring Signatures offer significant advantages in terms of scalability and efficiency in systems where subscriber anonymity is considered fundamental. Furthermore, the legal and regulatory implications of the ZKP are discussed, mainly in relation to LGPD and GDPR. Finally, the article concludes that the comparative analysis offers insights into applications, challenges and legal and regulatory implications, particularly in relation to data privacy and compliance with regulations such as LGPD and GDPR.