Threat Classification Research Articles

Leptospermum hoipolloi (Myrtaceae), a new species from Aotearoa / New Zealand, segregated from Leptospermum scoparium s. l.

Leptospermum hoipolloi de Lange & L.M.H. Schmid sp. nov. (Myrtaceae) is segregated from L. scoparium J.R. Forst. & G. Forst. (sensu lato). The new species is endemic to Te Ika a Maui / North Island and the northern part of Te Wai Pounamu / South Island of Aotearoa / New Zealand. The new species is morphologically distinguished from L. scoparium s. str. by the distinctly sericeous, narrower, and longer (up to 30 × 6 mm) lanceolate to elliptic lanceolate leaves, larger (up to 30 mm in diameter) flowers (these white, pink-tinged, pink-streaked or red); capsules up to 15.1 × 14.1 mm (unopened) and 16.6 × 18.0 mm (opened). Three formae are recognised, f. hoipolloi, for those plants with shorter, narrower, glabrescent leaves, mostly white (occasionally pink tinged or red) flowers, and smaller capsules; f. procumbens L.M.H. Schmid & de Lange f. nov., for those plants with a decumbent / prostrate growth habit, and silver-white to silvery grey hairy leaves, larger, white, pink-tinged or pink flowers, and larger capsules; and f. incanum (Cockayne) de Lange & L.M.H. Schmid f. comb. & stat. nov., for those plants previously recognised as L. scoparium var. incanum Cockayne, and which have an erect shrub growth habit, with longer, often broader leaves, whose young and maturing lamina is invested in silvery-grey or grey hairs; larger white, pink-tinged or streaked, pink or red flowers and capsules. Conservation assessments using the New Zealand Threat Classification System are proposed and a revised key to the Leptospermum of Aotearoa / New Zealand provided.

A list of the invertebrates of the Mackenzie area, New Zealand

ABSTRACT A list of 3052 invertebrate taxa of the Mackenzie area, South Island, New Zealand is compiled from published surveys, museum catalogues and other sources. The class Insecta comprised 90% of all taxa recorded, followed by Arachnida (5%). The most diverse orders were Lepidoptera (24%), Diptera (19%), Coleoptera (18%) and Hymenoptera (11%). Over all taxa, 64% are endemic, 6% native, 7% exotic and 23% undetermined. Twenty-eight are only found in the Mackenzie region and 123 are assessed in the New Zealand Threat Classification System.

Classification of Non-Traditional Maritime Security Threats and Challenges with the Indian and International Legal Framework

Classification of Non-Traditional Maritime Security Threats and Challenges with the Indian and International Legal Framework

The Role of the Yogyakarta Community Early Warning Forum in Supporting the National Defense

This study aims to explain the role of the Yogyakarta City Government in forming the Community Early Warning Forum (Forum Kewaspadaan Dini Masyarakat or FKDM) in supporting the national defense. The city of Yogyakarta currently has various problems that, if not detected early on, will threaten Indonesia. To anticipate existing threats, the Yogyakarta City Government established the FKDM. The formation of FKDM in Yogyakarta is by the policies, strategies, and development of national defense capabilities listed in the Defense White Paper. So, FKDM plays an important role in supporting national defense and preventing threats. This study uses a qualitative method. The results of the study found that Yogyakarta City's FKDM has played a role in supporting national defense, namely by carrying out early vigilance even though in carrying out its role Yogyakarta City's FKDM has not been maximized because of its capabilities and capacity. Members of FKDM and classification of threats in a report format that is not by the non-military threats listed in the national defense posture book. Because Yogyakarta City FKDM has not been optimal in carrying out its role, it is necessary to classify the types of threats according to the national defense posture book; retraining members of Yogyakarta City FKDM as well as sub-district FKDM and village FKDM in Yogyakarta City regarding the forms of threats; to maximize the use of the Lapak Deni application, it is necessary to consider age when recruiting FKDM members; as well as the need for additional personnel from the teaching staff by the Regulation of the Minister of Home Affairs of the Republic of Indonesia Number 46 of 2019 concerning Amendments to Minister of Home Affairs Regulation Number 2 of 2018 concerning Early Alertness in the Regions, article 16 paragraph (3).

Аналіз методів і засобів забезпечення кібербезпеки веб-сервісів з використанням штучного інтелекту

A thorough analysis of literary sources on the application of artificial intelligence (AI) in cyber security was carried out. During the examination, the most significant attention was paid to sources describing the use of AI-based applications to analyze and evaluate existing systems for vulnerabilities, as well as to sources that consider the features of using built-in AI mechanisms for searching, detecting, classifying, and combating attacks on the system during her works. The types, impacts, and features of attacks on web services are defined. The features of the application of AI for the classification of web services under test are considered, with the aim of further justifying the selection of the best tools for ensuring their cyber security. The methods of using AI in the cyber security of web services during the introduction of built-in mechanisms and models for searching, detecting, classifying, and countering threats are analyzed. The accuracy of machine learning methods used to detect intrusions was compared. Directions for further research can cover: the development of methods, models, and applications based on the use of AI for analyzing the source code for possible vulnerabilities of a web service with support for various programming languages and the development of mechanisms for search and classification of threats based on the use of AI built into the web service.

Autonomous Vehicles Security: Challenges and Solutions Using Blockchain and Artificial Intelligence

The arrival of autonomous vehicles (AVs) promises many great benefits, including increased safety and reduced energy consumption, pollution, and congestion. However, these engines have many security and privacy issues that could undermine the expected benefits if not addressed. AVs will provide new opportunities for hackers to carry out malicious attacks, posing a great threat to the future of mobility and data protection. The research trend in this field indicates that combining Blockchain and AI could bring strong protection for AVs against malicious attacks. Blockchain and AI have different working paradigms, but when merged, they can empower each other, and solve many security and privacy issues of AVs. AI can optimise the construction of the Blockchain to make it more efficient, secure and energy-saving, where Blockchain provides data immutability and trust mechanism for AI-based solutions and makes them more transparent, trustful, and explainable. Although some research is being conducted on this area, the topic of applying Blockchain and AI for securing AVs is not deeply investigated. In this paper, we explore the possible application of an amalgamation of Blockchain and AI solutions for securing AVs. We first introduce a classification of security and privacy threats that may arise from the application of AVs. Then, we provide an overview of recent literature regarding Blockchain and AI usage for securing AVs. Finally, we highlight limitations and challenges that may face the integration of Blockchain and AI with AVs based on our systemic review and suggest potential future directions for research in this field.

ТЕОРЕТИЧНІ АСПЕКТИ УПРАВЛІННЯ ФІНАНСОВОЮ БЕЗПЕКОЮ ВІТЧИЗНЯНИХ ПІДПРИЄМСТВ

Financial security and its provision is an important component of effective strategic management of enterprises. Not only the level of competitiveness of the enterprise, but also the issue of its functioning depends on the sufficiency of financial resources, the sources of their formation, the influence of internal and external factors on the level of financial security.
 The issue related to the management of financial security in the conditions of martial law remains insufficiently researched.
 The purpose of the article is to systematize theoretical and methodological approaches to managing financial security under martial law.
 Approaches to determining the essence of financial security are systematized. Financial security is interpreted as a certain financial condition, a complex characteristic, the level of the enterprise's provision of financial resources, the ability to promote and expand economic processes.
 Approaches to the classification of threats to financial security are summarized: By place of occurrence, By severity of consequences, By attitude to threats, By form of damage, By duration of action, By level of predictability, By duration of action, place of action. factors affecting financial security are summarized. The main tasks that must be solved for the effective management of financial security are identified. To reduce the impact of threats to financial security, it is important to form an effective enterprise management strategy, which will include a financial security management strategy.

The Constitutionalization of information security in Russian Law: improving the theoretical model

Research discusses one of the constitutional amendments of 2020. In accordance with the new version of paragraph “m” of Part 1 of Article 71 of the Constitution of the Russian Federation, the exclusive powers of the Russian Federation include issues of ensuring the security of the individual, society and the state when applying information technologies, and digital data turnover. The consolidation of the problem of information security at the constitutional level determines the need for a partial modernization of its theoretical model. Modification and revision of some of its components will lead to higher effectiveness of constitutional regulation and improve the quality of application of industry legislation in the field of information technology and information protection. The purpose of the research is to investigate the main directions of enhancing the theoretical model of information security in terms of constitutional changes. The employed research methods are formal-legal, logical, system, statistical, structural-functional, modeling, and forecasting. The outcome of the study can be outlined as follows. The research clarifies the concept of information security, proposes to generalize the range of basic subjects of public relations related to information security, expand their rights and obligations, highlight the constitutional and sectoral legal regimes of information protection, and strengthen responsibility for offenses in the information sphere. In conclusion the study argues that updating the theoretical model of information security of the Russian Federation should be carried out in the following key areas: firstly, developing information security targets expressed in strategic and program documents of the state; secondly, clarifying classification of information security threats; thirdly, expanding legal regulation density; fourth, strengthening the law-enforcement mechanisms of information security; fifth, establising and maintening optimal balance between legal, technical and ethical regulation of information technologies, primarily digital technologies; and finally, definiing acceptable and unacceptable boundaries of application of information technology and digital data in people's lives.

Organizational Cybersecurity Post The Pandemic: An Exploration of Remote Working Risks and Mitigation Strategies

The Covid-19 pandemic has forced organisations to embrace the largest remote workforce in history, yet this upheaval also brought an increasing number of cyber vulnerabilities to the fore. Organisations must remain committed to not leaving business processes, personal data, or vital infrastructure at risk, which has proved challenging for most. As remote working establishes itself as the new normal, criminals are seeking to capitalize on the widespread cybersecurity uncertainty, and succeeding. Private organisations and cybersecurity professionals must come together to establish robust solutions for home working cybersecurity. 
 This investigation explores several prevalent cyber risks (private networks, public hotspots, remote desktop protocol, authentication policies, virtual private network configuration and phishing attacks) across three key threat classifications of management, technical and human factors when remote working from the perspective of twenty industry experts. These findings offer key insights to emerging vulnerabilities, while also revealing defined strategies for organisations to help mitigate these challenges.

Information Security and Online Education During the COVID-19 Pandemic

Relevance of the problem in question is associated with academics facing information threats in the virtual educational environment during the COVID-19 pandemic and the short-term transition of the education process to distance learning. We aim to analyze information threats to individuals in the Runet virtual educational environment and suggest measures to neutralize them. Research into this problem relies on a structural and comparative analysis as the theoretical approach. The empirical method of exploring this problem is an Internet-based study of user engagement in the Runet, focusing on cases in question and identifying the content that is most popular with the users. A classification of the current information threats is provided, and mechanisms for the elimination of emerging threats are discussed. Although Russia puts considerable effort, at the legislative level, into the prevention of malevolent information actions on academics, a number of particularities of virtual social environments allow for partial implementation of the measures only. The results may be of interest for specialists dealing with challenges of modern education, information warfare, information security of virtual social environments.

An efficient pattern-based approach for insider threat classification using the image-based feature representation

Insider threats are expensive, difficult to detect, and sadly, on the rise. Despite significant research efforts, existing approaches are inadequate in accuracy and precision. They also suffer from a high false-positive rate in detecting insider attacks due to the heterogeneous nature of available insider threat data. Researchers have attempted an image-based approach for detecting insider threats to overcome the challenges from existing techniques. Most existing image-based approaches utilized Convolutional neural networks (CNN) to detect insider threats. Moreover, the CNN-based model lost the important user behavioral features due to the pooling operation. Also, they are often unsuitable for predictive modeling with features that lack spatial correlations. Aiming to address this issue, the Wavelet convolutional neural network (WCNN) is proposed. The WCNN model takes advantage of spectral and spatial analysis to classify insider threats using image-based feature representations. The proposed approach combines the scenario-specific single-day features from the user activity logs into a one-dimensional feature vector. It is then represented as images that reveal visual patterns effectively to identify malicious insiders using WCNN. In addition, the proposed approach adopts the SMOTEENN sampling technique to solve the class imbalance problem. The performance of the proposed approach is evaluated on the benchmark dataset. Experimental results show the improvement of the proposed approach over the current state-of-the-art techniques in terms of classification accuracy (97.19%), AUC (97.30%), and low false positives to identify malicious insiders.

Methods for eliciting and measuring behavioral and physiological consequences of stress and uncertainty in virtual reality

Military operations are characterized by high levels of stress and uncertainty, and these states can influence cognitive and physical performance outcomes. These states, however, can be difficult to reliably induce in laboratory contexts, making it challenging to quantify and model their influences on perceptual and cognitive processes underlying performance on applied tasks. Herein we describe the development and validation of a novel scenario-based virtual reality methodology, the decision making under uncertainty and stress (DeMUS) scenario, that accomplishes four primary goals. First, it induces physiological and biochemical stress responses through a threat of shock manipulation. Second, it induces transient states of uncertainty by manipulating stimulus clarity in a perceptual decision-making task. Third, it generates several performance metrics regarding recognition memory, spatial orienting, threat classification, and marksmanship decision making. Finally, the task combines behavioral, physiological, and biochemical measures to provide a more comprehensive understanding of how stress and uncertainty influence applied task performance. To provide an initial validation of the scenario and its associated tasks and measures, we conducted a pilot study (n= 18) involving stress induction and cognitive performance assessment. Analyses revealed that: 1) the DeMUS scenario elicited tonic and phasic biochemical (salivary alpha amylase and cortisol) and physiological (heart rate, pupil diameter) stress responses, 2) the scenario elicited variable sympathetic autonomic nervous system and hypothalamic-pituitary adrenal (HPA) axis responses, and 3) stress influenced some measures of memory and decision-making in both negative and positive directions. Continuing research will assess individual- and group-level predictors of performance on these virtual reality tasks, and emerging performance enhancement techniques that can help military personnel sustain performance during stressful operations.

Classification of Threat and Nonthreat Objects Using the Magnetic Polarizability Tensor and a Large-Scale Multicoil Array

This article describes the development of a large-scale multicoil arrangement capable of characterizing the magnetic polarizability tensor (MPT) of large threat objects such as firearms. The system has been applied to the measurement of a comprehensive range of weapons made available by the National Firearms Centre of the U.K. For comparison, a number of nonthreat items such as metallic belt buckles, keys, and coins have also been characterized. Clear differences in the magnitude and spectroscopic response of the MPT data for different firearm types and nonthreat items are presented. The application of unsupervised machine-learning (ML) algorithms to MPT data of threat and nonthreat objects enables a better understanding of target object classification. The presented results are encouraging as they demonstrate the ability of the MPT used in combination with the adopted classification algorithms to robustly discriminate between threat and nonthreat objects.

Towards The Secure Internet of Things: Threats and Solution

The use of the Internet of Things (IoT) has recently become a worldwide trend, as this technology can connect various types of equipment such as sensors, cameras, and other devices via the internet. The broad adoption of various IoT technologies makes life easier and better for people. Internet of things applications has been widely used in Smart Building, Smart Vehicles, Construction Management, health management and many other applications. However, the IoT technology still has many flaws and weakness especially in its security and defense mechanism. This paper reviews and elaborate type of security vulnerabilities, issue and threats that IoT technology faces from academic research paper in the past 10 years. This review also aims to find the possible solutions proposed by researchers to overcome security weakness, threats and issue in IoT technology and its application. This research goal to provide guidelines for those who want to develop and improve IoT security. A systematic review was used as the methodology in this paper. The purpose of this systematic review is to survey the threats and vulnerabilities of IoT technology as reported in previous studies. This review also proposes a comprehensive countermeasure to the previously mentioned threats and weaknesses. This study's findings include the identification and classification of various threats in IoT, as well as methods for countermeasures against these attacks. It concludes with reviews of research gaps and future research directions to improve IoT security.

Improvement of security management in the warehouse space through the use of a vision system in a selected enterprise

Purpose: The purpose of the presented research and analysis was to create design assumptions for a vision system supporting security supervision in the warehouse space to reduce threats. Design/methodology/approach: In the first phase of creating the project concept, two methods of hazard analysis (FTA and ETA) were used in the warehouse facility. Then, at the stage of selecting the devices included in the video surveillance system, a simple FOKUS program was used to scale the cameras. Findings: In order to create a vision system project for a selected warehouse facility, an analysis of its spatial structure, weak points and identification of possible threats was carried out, taking into account the specificity of work performed within the working space of the warehouse. Then, video surveillance zones were determined based on the classification of threats in the space of the facility. The devices included in the vision system were also selected according to the assumed functions of this system and their distribution in the tested object. In addition, the optimal parameters of the cameras (using a scaling program) and the characteristics of other necessary devices of the vision system were determined. Practical implications: The solution can be an aid in making an investment decision by the management in order to improve security management in the examined warehouse facility of company X. Originality/value: As a result of the analyses, an optimal and original design solution for the vision system was obtained for the tested warehouse in company X. Keywords: security management, storage facility security, threat monitoring, video surveillance system. Category of the paper: technical document, case study.

Financial security of the banking system of Ukraine under the conditions of martial state: classification of possible threats

Financial security of the banking system of Ukraine under the conditions of martial state: classification of possible threats

Justification of the identification of threats and problematic components of sustainable regional development in the security dimension

The issue of substantiation of the problematic components of sustainable development in the security dimension and threat identification methodology is investigated. The methodology consists of directly combining the identification of threats with the need to observe the limits of the safe existence of dynamic economic systems, which connects the problem of sustainable development with the problem of security. The explanation of the extended homeostatic plateau, which explains the conditions for the transition to a higher technological system, or the complication of functioning and the loss of the main functions of the existing technological system, has gained further development. A theoretical substantiation of the limits of secure existence in terms of security gradations is proposed: critical, threshold, and optimal on both sides of the “extended homeostatic plateau”. Quantitative values of security gradations are associated with the extension of the “t-criterion” method for the formal determination of bifurcation points for characteristic types of distribution, that is, threats. The identification, classification, and analysis of problematic components and critical threats at the level of components and indicators were carried out, which made it possible to identify only four strategic directions of institutional measures that allow covering almost all indicators of sustainable development at the regional level.

Cyberzagrożenia w cyberprzestrzeni. Cyberprzestępczość, cyberterroryzm i incydenty sieciowe

Nowadays, taking into account the number of Internet users, as well as the increasing use of ICT solutions in public administration, we are dealing with the intensification of cyberthreats, which take the form of cybercrimes, cyberterrorism or network incidents. The aim of the article is to characterize the threats occurring in cyberspace. The subject of the study covers the classification of cybercriminal and cyberterrostic threats, including their criminalization. In addition, due to the variety of cyberthreats, aspects of the national cybersecurity system related to incident handling and the implementation of cybersecurity policy is presented. The analysis of the issues will allow to answer the following questions: are we dealing with the intensification of cyberthreats today, and if so, are they homogeneous or diverse? Whether the only solution in the fight against cyberthreats is to penalise them? and what factors should be taken into account in order to minimise the negative effects of cyberthreats? The study will discuss issues related to the systematics of network threats in the framework of cyberterrorism, cybercrime and network incidents. The adopted research methods include the analysis of basic legal acts and the literature on the subject.

GENERALIZED RISK ASSESSMENT PROCEDURE FOR SOFTWARE TESTING OF LEGALLY REGULATED MEASURING INSTRUMENTS

The legal metrology covers measuring instruments (MI), the measurement results of which are used in calculations for consumed energy resources, in the fields of information protection, security, environmental protection, etc. Most modern MIs use microcontrollers or are controlled by computers. The software (SW) of such MIs provides an opportunity not only to automate the processes of measurement and calculation of results but also to ensure long-term storage and data transfer. The manufacturer is responsible for investigating and assessing all possible risks related to the MI SW. The task of the conformity assessment body is to assess the conformity of MIs adequately in general and software, in particular, to the established requirements based on the analysis of risk classes. Standards for information security risk management, information technology security assessment, and information technology security assessment criteria consider only general issues of software security and risk assessment without taking into account the scope of its application. The existing regulatory documents on software risk management were considered. Modern methods of assessing the risks of the MI SW were studied. To assess the risks of software of legally regulated MIs, a general classification of threats and vulnerabilities of MI SW was made. For choosing threats that affect functionality, only those that affect metrological characteristics during measurement are taken into account. Possible manifestations of the impact of threats on stored data can be their distortion or destruction, and transmissions of data can be data distortion during transmission or data loss due to a break in the telecommunications connection. A proposed simplified risk assessment methodology for assessing the compliance of MI SW without statistical data on the probabilities of threats and the amount of harm from the implementation of threats is presented. Risk is defined as the probability of harm due to a certain vulnerability, taking into account the conditional amount of harm.

Системні характеристики, фактори та загрози економічній безпеці підприємств

The article emphasizes the relevance of new research in the field of management of economic security of business entities, in the focus of which the leading role is assigned to the characteristics, factors and threats to the economic security of business. The purpose of the study is to generalize system characteristics, factors and threats to the economic security of enterprises. The internal factors that pose a threat to the economic security of enterprises are identified, namely, the structural deformation of the economy inherited from the period of "active reforms", the low competitiveness of the national economy, caused by the backwardness of the technological base of most industries, high energy and resource intensity, a high level of monopolization of the economy, a high level of inflation and others. The classification of threats to the economic security of enterprises according to such features as the degree of predictability, the lag of threat realization, spheres of life activities, the location of threats in relation to the socioeconomic system, the nature of occurrence, the dominance of the regional or national factor in the formation of threats, the degree of probability of occurrence, the factor of influence on the object. The levels of contradictions of the economic interests of the subjects of market relations are shown. It was established that the main task of the economic security of the enterprise is to prevent without special reasons actions that limit the self-organization and self-regulation of economic development and to promote the predictability of activity by means of diagnosing the most significant phenomena and processes for this. It is pointed out that the conditions of economic activity in Ukraine are fundamentally different from the conditions of more developed economies. In connection with this, in the domestic economy there are a number of factors characteristic only for our country, namely the non-obligation and irresponsibility of economic entities, the absence of real economic law, the dependence of a number of managers on the criminal world, the wide spread of methods of unfair competition and others. Accordingly, it was established that ensuring the economic security of the enterprise should be based on the unity of the goals and methods of the government economic policy, both at the national and regional levels.