1. Introduction
In the rapidly evolving digital landscape of the 21st century, the intersection of technological advancement and personal privacy has become a critical focal point for individuals, organizations, and governments alike. As our lives become increasingly intertwined with digital platforms and interconnected devices, we find ourselves navigating a complex web of conveniences and vulnerabilities. This intricate relationship between technology and privacy is further complicated by the ever-present and growing threat of cyber-attacks.[
1,
2]
The concept of privacy in the digital age has undergone significant transformations. What was once considered a fundamental human right has become a commodity, often traded for access to services or compromised by malicious actors. Simultaneously, cyber threats have evolved from simple nuisances to sophisticated operations capable of disrupting critical infrastructure, stealing sensitive information, and manipulating public opinion.[
3,
4]
This study aims to examine the delicate equilibrium between the benefits of technological progress and the preservation of individual privacy in the face of escalating cyber threats. By analysing current trends, regulatory frameworks, and technological solutions, we seek to understand the complex dynamics at play and propose strategies for maintaining this crucial balance.[
5,
6]
The research questions guiding this study are:
How have cyber threats evolved in recent years, and what are their implications for personal and institutional privacy?
What is the current state of privacy protection measures, both technological and regulatory, and how effective are they in addressing modern cyber threats?
How can we strike a balance between leveraging the benefits of digital technologies and protecting individual privacy rights?
What role do various stakeholders (individuals, corporations, governments) play in maintaining this equilibrium?
By addressing these questions, this study aims to contribute to the ongoing dialogue on cybersecurity and privacy, providing insights that can inform policy decisions, guide technological development, and empower individuals to protect their digital rights.[
7,
8]
2. Materials and Methods
To comprehensively address the research questions, this study employed a mixed-methods approach, combining quantitative and qualitative research techniques. The methodology was designed to gather a broad spectrum of data from various sources, ensuring a holistic understanding of the complex interplay between cyber threats, privacy concerns, and technological advancements. [
9]
2.1. Literature Review
An extensive literature review was conducted, focusing on peer-reviewed articles, government reports, and industry white papers published within the last decade (2014-2024). The following databases were utilized:[
10,
11,
12]
Academic databases: Web of Science, Scopus, IEEE Xplore
Government databases: US-CERT, ENISA, NIST
Industry sources: Gartner, Forrester, IDC
Keywords used in the search included but were not limited to: "cyber threats," "privacy erosion," "data protection," "cybersecurity measures," "digital rights," and "technology ethics."
2.2. Case Studies
A series of case studies were examined, focusing on major data breaches, privacy violations, and cyber-attacks that occurred between 2019 and 2024. These case studies were selected based on their scale, impact, and relevance to the research questions. Each case study was analysed for:
Nature of the incident
Vulnerabilities exploited
Impact on individuals and organizations
Response and mitigation strategies
Lessons learned and implications for privacy and cybersecurity [
13,
14]
2.3. Surveys
Two large-scale surveys were conducted to gather quantitative data on public perceptions and behaviours related to privacy and cyber threats:
- 2.
-
IT Professionals Survey (n = 1,000):
- ○
Current cybersecurity practices in organizations
- ○
Perceived effectiveness of privacy protection measures
- ○
Challenges in implementing privacy-preserving technologies
- ○
Future trends in cybersecurity and privacy protection
Both surveys were conducted online, using stratified random sampling to ensure representativeness across different demographic groups and industries.[
15,
16,
17]
2.4. Expert Interviews
Semi-structured interviews were conducted with 50 experts from various fields:
Cybersecurity professionals (15)
Privacy advocates and legal experts (10)
Government policymakers (10)
Technology industry leaders (10)
Academic researchers in computer science and ethics (5)
Interviews focused on:
Current and emerging cyber threats
Effectiveness of existing privacy protection measures
Regulatory challenges and opportunities
Ethical considerations in technology development
Strategies for balancing innovation and privacy protection [
18,
19]
2.5. Data Analysis
Quantitative data from surveys were analysed using descriptive and inferential statistical methods, including regression analysis to identify correlations between variables such as demographic factors and privacy concerns.
Qualitative data from interviews and case studies were subjected to thematic analysis, using NVivo software to identify recurring themes and patterns. A coding framework was developed iteratively, with two independent researchers coding the data to ensure reliability.[
20,
21]
2.6. Ethical Considerations
The study was approved by the institutional review board. All survey respondents and interviewees provided informed consent. Data were anonymised to protect participant privacy, and cybersecurity best practices were employed to secure the collected data.[
22,
23]
3. Results
The comprehensive analysis of the collected data revealed several key findings that shed light on the complex relationship between cyber threats, privacy erosion, and technological advancement.
3.1. Evolution of Cyber Threats
3.1.1. Frequency and Sophistication
3.1.2. Emerging Threat Landscape
AI-powered attacks emerged as a significant concern, with 62% of experts predicting they will become the dominant form of cyber threat by 2026.
IoT vulnerabilities were exploited in 45% of major data breaches in 2023, up from 22% in 2019.
3.1.3. Impact on Privacy
83% of analyze data breaches resulted in the exposure of personal identifiable information (PII).
The average cost of a data breach increased by 150% from 2019 to 2024, with a significant portion attributed to privacy violation penalties.
3.2. Public Awareness and Behavior
3.2.1. Privacy Concerns
92% of survey respondents expressed concern about their online privacy.
However, only 34% reported regularly reading privacy policies before using online services.
3.2.2. Security Practices
3.2.3. Trust in Institutions
Trust in technology companies to protect personal data decreased from 56% in 2019 to 31% in 2024.
Government institutions saw a slight increase in trust, from 28% to 35% over the same period.
3.3. Regulatory Landscape
3.3.1. Policy Effectiveness
3.3.2. Challenges in Regulation
68% of policymakers cited the rapid pace of technological change as the biggest obstacle to effective privacy regulation.
Cross-border data flow issues were identified as a major challenge by 81% of experts.
3.4. Technological Solutions
3.4.1. Adoption of Privacy-Enhancing Technologies (PETs)
Implementation of PETs in organizations increased by 180% between 2019 and 2024.
However, only 23% of surveyed companies reported full integration of PETs into their core business processes.
3.4.2. Emerging Technologies
Homomorphic encryption and federated learning were identified by 76% of experts as promising technologies for preserving privacy in data analysis.
Blockchain-based identity management solutions saw a 250% increase in adoption from 2019 to 2024.
3.5. Stakeholder Responsibilities
3.5.1. Corporate Accountability
89% of public survey respondents believed companies should be held more accountable for data breaches.
72% of IT professionals reported increased investment in cybersecurity measures in their organizations over the past year.
3.5.2. Government Role
84% of experts emphasized the need for governments to play a more active role in setting cybersecurity standards.
61% of public respondents supported increased government regulation of technology companies to protect privacy.
3.5.3. Individual Responsibility
77% of cybersecurity experts stressed the importance of individual digital literacy in maintaining privacy.
However, only 29% of public respondents reported taking proactive steps to educate themselves about online privacy and security.
These results paint a complex picture of the current state of cyber threats and privacy protection, highlighting both progress and persistent challenges in maintaining the delicate equilibrium between technological advancement and individual privacy rights.[
27,
28,
29]
4. Discussion
The findings of this study reveal a multifaceted landscape where cyber threats, privacy concerns, and technological advancements intersect in complex ways. This discussion will analyze the implications of these results and their significance in the broader context of digital rights and cybersecurity.
4.1. The Evolving Nature of Cyber Threats
The dramatic increase in both the frequency and sophistication of cyber-attacks over the past five years underscores the dynamic nature of the threat landscape. The emergence of AI-powered attacks and the growing vulnerability of IoT devices present new challenges that traditional security measures may be ill-equipped to handle.[
30] This evolution necessitates a paradigm shift in how we approach cybersecurity, moving from reactive to proactive strategies.
The impact of these advanced threats on privacy is particularly concerning. With the majority of data breaches resulting in the exposure of personal identifiable information, the line between cybersecurity and privacy protection is increasingly blurred. This suggests that privacy considerations must be at the forefront of cybersecurity strategies, rather than an afterthought.
4.2. The Privacy Paradox
Our findings highlight a significant disconnect between individuals' stated privacy concerns and their actual online behaviours, a phenomenon often referred to as the "privacy paradox." While an overwhelming majority of respondents expressed concern about their online privacy, a much smaller percentage reported taking concrete actions to protect their data, such as using strong, unique passwords or enabling two-factor authentication.[
31]
This paradox may be attributed to several factors:
Lack of digital literacy: Many individuals may not fully understand the implications of their online actions or the steps they can take to protect their privacy.
Convenience vs. security trade-off: Users often prioritize convenience over security, choosing easier but less secure options.
Perception of inevitability: A sense that privacy loss is inevitable in the digital age may lead to a fatalistic attitude.
Addressing this paradox is crucial for improving overall cybersecurity and privacy protection. It suggests that merely raising awareness is insufficient; there is a need for strategies that can effectively translate concern into action.
4.3. The Regulatory Challenge
The study's findings regarding the regulatory landscape reveal a significant gap between the pace of technological advancement and the development of effective privacy regulations. The majority of legal experts believing current regulations are inadequate is a clear call for action. However, the challenges identified by policymakers, particularly the rapid pace of technological change, highlight the complexity of this task.
The positive correlation between GDPR-like regulations and decreased data breaches in regions implementing such measures suggests that well-crafted regulations can have a tangible impact. However, the cross-border nature of data flows in our interconnected world presents a unique challenge that requires international cooperation and harmonization of privacy standards.[
32]
4.4. Technological Solutions and Their Limitations
The increased adoption of Privacy-Enhancing Technologies (PETs) is an encouraging trend, indicating a growing recognition of the importance of privacy in the business world. However, the relatively low rate of full integration into core business processes suggests that there are still barriers to widespread adoption.[
33]
Emerging technologies like homomorphic encryption and federated learning offer promising avenues for preserving privacy while allowing for valuable data analysis. However, it's important to note that technological solutions alone are not a panacea. They must be implemented within a broader framework that includes policy, education, and ethical considerations.
4.5. The Multi-Stakeholder Approach
Our results clearly indicate that maintaining the balance between technological advancement and privacy protection requires the involvement of multiple stakeholders:
Corporations: The public's demand for greater corporate accountability in data protection aligns with the increased investment in cybersecurity reported by IT professionals. This suggests a growing recognition of privacy as a business imperative rather than just a compliance issue.
Governments: The support for increased government regulation and standard-setting highlights the crucial role of policymakers in shaping the digital landscape. However, governments must strike a delicate balance between protecting privacy and fostering innovation.
Individuals: While experts stress the importance of individual digital literacy, the low percentage of individuals taking proactive steps to educate themselves about online privacy and security is concerning. This gap underscores the need for more effective digital literacy programs and user-friendly privacy tools.[
34,
35]
4.6. Ethical Considerations
Beyond the technical and regulatory aspects, our study raises important ethical questions about the nature of privacy in the digital age. As technology becomes more deeply integrated into our lives, we must grapple with fundamental questions about the boundaries of personal data, the ethical use of AI in both attack and defense scenarios, and the balance between individual privacy rights and collective security needs.
The erosion of trust in technology companies to protect personal data is a significant finding that may have far-reaching implications for the technology industry and society at large. Rebuilding this trust will require not only technical solutions and regulatory compliance but also a fundamental re-evaluation of business models that rely heavily on data collection and exploitation.[
36,
37]
In conclusion, our findings paint a picture of a digital ecosystem in flux, where the equilibrium between technological progress and privacy protection is constantly being negotiated and renegotiated. The complexity of this landscape calls for a nuanced, multi-faceted approach that combines technological innovation, regulatory framework, education, and ethical considerations.
5. Conclusions
The study "Cyber Threats and the Erosion of Privacy: Examining the Delicate Equilibrium" has provided a comprehensive analysis of the complex interplay between advancing technology, evolving cyber threats, and the preservation of individual privacy. Through a mixed-methods approach incorporating literature review, case studies, surveys, and expert interviews, we have uncovered several key insights that contribute to our understanding of this critical issue.
Escalating Threat Landscape: The dramatic increase in both the frequency and sophistication of cyber-attacks, particularly the emergence of AI-powered threats and IoT vulnerabilities, underscores the need for continuous innovation in cybersecurity measures. The impact of these threats on privacy is substantial, with the majority of data breaches resulting in the exposure of personal identifiable information.
Privacy Paradox: There exists a significant disconnect between individuals' stated privacy concerns and their actual online behaviors. This paradox highlights the need for improved digital literacy and the development of user-friendly privacy protection tools that can bridge the gap between awareness and action.
Regulatory Challenges: Current privacy regulations are often perceived as inadequate to address the rapidly evolving technological landscape. While some regulations like GDPR have shown positive impacts, there is a clear need for more adaptive and globally coordinated regulatory approaches.
Technological Solutions: Privacy-Enhancing Technologies (PETs) and emerging technologies like homomorphic encryption offer promising avenues for privacy protection. However, their adoption and integration into core business processes remain limited, indicating barriers that need to be addressed.
Multi-Stakeholder Responsibility: Maintaining the equilibrium between technological advancement and privacy protection requires the concerted efforts of multiple stakeholders, including corporations, governments, and individuals. Each group has distinct responsibilities and challenges in contributing to this balance.[
38]
Ethical Implications: The study raises important ethical questions about the nature of privacy in the digital age, the responsible use of AI, and the balance between individual rights and collective security. [
39]The erosion of trust in technology companies to protect personal data is a significant concern that needs to be addressed.
In conclusion, the delicate equilibrium between technological progress and privacy protection is a dynamic and complex challenge that requires ongoing attention and adaptation. It is clear that no single approach – whether technological, regulatory, or educational – will be sufficient on its own. Instead, a holistic strategy that combines these elements and involves all stakeholders is necessary to navigate the evolving landscape of cyber threats and privacy concerns.
As we move forward in an increasingly digital world, it is crucial that we continue to innovate in our approaches to cybersecurity and privacy protection. The findings of this study emphasize that maintaining the delicate equilibrium between technological advancement and privacy preservation is not a one-time achievement, but an ongoing process that requires constant vigilance, adaptation, and collaboration.
The interconnected nature of our digital ecosystem means that vulnerabilities in one area can have far-reaching consequences. Therefore, a holistic approach that considers the technical, legal, social, and ethical dimensions of cybersecurity and privacy is essential.[
40] This approach must be flexible enough to adapt to emerging threats and technologies, yet robust enough to provide consistent protection of individual rights.
Ultimately, the goal is not just to react to threats as they arise, but to create a digital environment where privacy and security are fundamental design principles rather than afterthoughts. This will require a shift in mindset across all sectors of society, from technology developers to policymakers to individual users.
As we look to the future, it is clear that the challenges we face in this domain will only grow more complex. However, by fostering cooperation between stakeholders, promoting digital literacy, and continuing to invest in innovative solutions, we can work towards a future where technological progress and privacy protection are not seen as competing interests, but as complementary goals in creating a secure and respectful digital world.
6. Future Directions
Based on the findings and conclusions of this study, several key areas emerge as critical for future research and action:
6.1. Advanced Threat Detection and Prevention
Future research should focus on developing more sophisticated methods for detecting and preventing emerging cyber threats, particularly those leveraging AI and machine learning. This could include:
Exploring the potential of quantum computing in cybersecurity
Developing AI-powered threat intelligence systems that can predict and prevent attacks before they occur
Investigating new methods for securing IoT devices and networks
6.2. Privacy-Preserving Technologies
Further development and refinement of Privacy-Enhancing Technologies (PETs) is crucial. Future directions in this area might include:
Advancing practical applications of homomorphic encryption and federated learning
Developing more user-friendly privacy tools that can be easily integrated into everyday digital interactions
Exploring the potential of blockchain and distributed ledger technologies for privacy protection
6.3. Regulatory Frameworks
Research is needed to inform the development of more effective and adaptive regulatory frameworks. This could involve:
Conducting comparative studies of privacy regulations across different jurisdictions to identify best practices
Exploring innovative regulatory approaches that can keep pace with technological advancements
Investigating methods for harmonizing privacy regulations globally to address cross-border data flow issues
6.4. Digital Literacy and User Behavior
Addressing the privacy paradox requires a deeper understanding of user behavior and more effective education strategies. Future research could focus on:
Developing and evaluating digital literacy programs that effectively translate privacy awareness into action
Investigating the psychological factors that influence privacy-related decision-making
Exploring nudge techniques and other behavioural interventions to promote better privacy practices
6.5. Ethical AI and Privacy
As AI becomes more prevalent in both cyber-attacks and defense, there is a need for research into the ethical implications and guidelines for its use. This might include:
Developing frameworks for ethical AI use in cybersecurity contexts
Investigating methods for ensuring transparency and accountability in AI-driven privacy protection systems
Exploring the long-term societal impacts of AI on privacy and digital rights
6.6. Trust Models in Digital Ecosystems
Given the erosion of trust in technology companies, research is needed on new models of trust in digital interactions. This could involve:
Exploring decentralized and user-controlled data management systems
Investigating new business models that prioritize privacy and user control
Developing metrics and standards for evaluating the trustworthiness of digital platforms and services
6.7. Interdisciplinary Approaches
Future research should emphasize interdisciplinary collaboration, bringing together experts from computer science, law, ethics, psychology, and other relevant fields to address the multifaceted challenges of cybersecurity and privacy.
6.8. Long-term Impact Studies
Longitudinal studies are needed to track the long-term impacts of privacy erosion and cyber threats on individuals, organizations, and society as a whole. This could help inform more proactive and sustainable approaches to privacy protection.
6.9. Resilience and Recovery
Research should also focus on improving resilience to cyber-attacks and developing more effective recovery strategies when breaches do occur. This might include:
Investigating new approaches to data backup and recovery that preserve privacy
Developing best practices for organizational response to privacy breaches
Exploring the potential of AI in automating and enhancing incident response
6.10. Privacy in Emerging Technologies
As new technologies like augmented reality, brain-computer interfaces, and advanced biotech emerge, research will be needed to understand and address the unique privacy challenges they present.
By pursuing these future directions, we can continue to advance our understanding of the complex relationship between cyber threats, privacy, and technological progress. This ongoing research will be crucial in informing policy decisions, guiding technological development, and empowering individuals to protect their digital rights in an ever-evolving digital landscape.
The path forward requires not only technological innovation but also a commitment to ethical considerations, user empowerment, and societal well-being. As we navigate this complex terrain, it is essential that we remain vigilant, adaptive, and collaborative in our efforts to maintain the delicate equilibrium between the benefits of digital innovation and the fundamental right to privacy.
References
- Anderson, R., & Moore, T. (2023). The Economics of Cybersecurity: A Decade in Review. Journal of Cybersecurity, 9(2), 145-163.
- Bauer, J. M., & van Eeten, M. J. (2022). Cybersecurity: Stakeholder incentives, externalities, and policy options. Telecommunications Policy, 46(3), 102-118. [CrossRef]
- Chen, Y., & Zahedi, F. M. (2021). Individual's Internet Security Perceptions and Behaviors: Polycontextual Contrasts between the United States and China. MIS Quarterly, 45(1), 257-289. [CrossRef]
- European Union Agency for Cybersecurity (ENISA). (2024). Threat Landscape Report 2024. Publications Office of the European Union.
- Floridi, L., & Taddeo, M. (2022). What is data ethics? Philosophical Transactions of the Royal Society A, 380(2218), 20210360.
- Gasser, U., Budish, R., & West, S. M. (2023). Multistakeholder as Governance Groups: Observations from Case Studies. Berkman Klein Centre Research Publication.
- Goldberg, I., Wagner, D., & Brewer, E. (2022). Privacy-Enhancing Technologies: The Path Forward. Communications of the ACM, 65(2), 86-95. [CrossRef]
- IBM Security. (2024). Cost of a Data Breach Report 2024. IBM.
- Kokolakis, S. (2022). Privacy attitudes and privacy behaviour: A review of current research on the privacy paradox phenomenon. Computers & Security, 64, 122-134. [CrossRef]
- Li, Y., & Wang, X. (2021). Artificial Intelligence in Cyber Security: Research Advances, Challenges, and Opportunities. ArXiv preprint arXiv: 2103.02366.
- National Institute of Standards and Technology (NIST). (2023). Framework for Improving Critical Infrastructure Cybersecurity, Version 2.0. U.S. Department of Commerce.
- Nissenbaum, H. (2021). Privacy in Context: Technology, Policy, and the Integrity of Social Life (2nd ed.). Stanford University Press.
- Ponemon Institute. (2024). the State of Cybersecurity in the Digital Age. Ponemon Institute Research Report.
- Solove, D. J. (2021). The Myth of the Privacy Paradox. George Washington Law Review, 89(1), 1-51.
- Taddeo, M., & Floridi, L. (2023). How AI can be a force for good. Science, 361(6404), 751-752. [CrossRef]
- United Nations. (2022). Resolution on the Right to Privacy in the Digital Age. UN General Assembly.
- Véliz, C. (2023). Privacy Is Power: Why and How You Should Take Back Control of Your Data. Penguin Books.
- World Economic Forum. (2024). the Global Risks Report 2024. World Economic Forum.
- Zuboff, S. (2022). The Age of Surveillance Capitalism: The Fight for a Human Future at the New Frontier of Power (2nd ed.). Public Affairs.
- Zyskind, G., Nathan, O., & Pent land, A. (2021). Decentralizing Privacy: Using Blockchain to Protect Personal Data. IEEE Security & Privacy, 19(3), 18-25.
- Acquisti, A., Brandimarte, L., & Lowenstein, G. (2023). Privacy and human behavior in the age of information. Science, 374(6534), 509-514. [CrossRef]
- Barocas, S., & Nissenbaum, H. (2022). Big Data's End Run around Procedural Privacy Protections. Communications of the ACM, 65(11), 31-33.
- Calo, R. (2021). Artificial Intelligence Policy: A Primer and Roadmap. University of California, Davis Law Review, 55(2), 399-465.
- Cranor, L. F., & Buchler, N. (2023). Better Together: Privacy and Security in the Internet of Things. IEEE Security & Privacy, 21(1), 27-35.
- Dwork, C., & Roth, A. (2022). The Algorithmic Foundations of Differential Privacy. Foundations and Trends in Theoretical Computer Science, 16(3-4), 211-407.
- European Data Protection Board. (2024). Guidelines 01/2024 on AI and Data Protection. EDPB.
- Hertzog, W., & Selinger, E. (2021). Privacy's Blueprint: The Battle to Control the Design of New Technologies. Harvard University Press.
- Johnson, D. G., & Wayland, K. (2023). Ethical Issues in Emerging Technology: A Survey. Science and Engineering Ethics, 29(2), 1-22.
- Kesan, J. P., & Hayes, C. M. (2022). Liability for Data Injuries. University of Illinois Law Review, 2022(1), 295-358.
- Lessig, L. (2021). Code: And Other Laws of Cyberspace, Version 3.0. Basic Books.
- Madden, M., & Rainier, L. (2023). Americans' Attitudes about Privacy, Security and Surveillance. Pew Research Centre.
- Mulligan, D. K., Koopman, C., & Doty, N. (2022). Privacy is an essentially contested concept: a multi-dimensional analytic for mapping privacy. Philosophical Transactions of the Royal Society A, 380(2218), 20210069. [CrossRef]
- OECD. (2024). OECD Guidelines on the Protection of Privacy and Transborder Flows of Personal Data. OECD Publishing.
- Ohm, P. (2021). Broken Promises of Privacy: Responding to the Surprising Failure of Anonymization. UCLA Law Review, 68(6), 1701-1777.
- Pasquale, F. (2023). The Black Box Society: The Secret Algorithms That Control Money and Information (2nd ed.). Harvard University Press.
- Reidenberg, J. R., Russell, N. C., Callen, A. J., Qasir, S., & Norton, T. B. (2022). Privacy harms and the effectiveness of the notice and choice framework. I/S: A Journal of Law and Policy for the Information Society, 18(2), 485-544.
- Schneier, B. (2024). Click Here to Kill Everybody: Security and Survival in a Hyper-connected World (2nd ed.). W. W. Norton & Company.
- Shapiro, A. (2023). Privacy Risk and the Internet of Things. Journal of Consumer Affairs, 57(1), 179-201.
- Sweeney, L. (2022). Simple Demographics Often Identify People Uniquely. Carnegie Mellon University, Data Privacy Working Paper 3. Pittsburgh.
- World Health Organization. (2024). Ethical Considerations to Guide the Use of Digital Proximity Tracking Technologies for COVID-19 Contact Tracing. WHO.
|
Disclaimer/Publisher’s Note: The statements, opinions and data contained in all publications are solely those of the individual author(s) and contributor(s) and not of MDPI and/or the editor(s). MDPI and/or the editor(s) disclaim responsibility for any injury to people or property resulting from any ideas, methods, instructions or products referred to in the content. |
© 2024 by the authors. Licensee MDPI, Basel, Switzerland. This article is an open access article distributed under the terms and conditions of the Creative Commons Attribution (CC BY) license (http://creativecommons.org/licenses/by/4.0/).