Confidentiality, Integrity, Availability Research Articles

A Two-Stage Data Security Classification Model: Taking Securities Firm for Example

In the era of big data, maximizing the circulation and sharing of data on the basis of ensuring its security is a challenge. Data security classification provides an effective solution for data security protection. This paper proposes a two-stage data classification method based on nine CIA (Confidentiality, Integrity, Availability) indicators, and introduces an expert scoring mechanism to achieve quantitative and precise data classification. In the empirical research part, this paper applies the new method to G Securities Company and first classifies the company’s data into 76 categories. Then the second stage of grading is carried out based on the scores of each index of different categories. The results show that the proposed method is more accurate and robust in terms of data protection and in terms of increasing the value of data sharing and circulation.

CORMAND2: A Deception Attack Against Industrial Robots

Industrial robots are becoming increasingly vulnerable to cyber incidents and attacks, particularly with the dawn of the Industrial Internet-of-Things (IIoT). To gain a comprehensive understanding of these cyber risks, vulnerabilities of industrial robots were analyzed empirically, using more than three million communication packets collected with testbeds of two ABB IRB120 robots and five other robots from various original equipment manufacturers (OEMs). This analysis, guided by the confidentiality–integrity–availability (CIA) triad, uncovers robot vulnerabilities in three dimensions: confidentiality, integrity, and availability. These vulnerabilities were used to design Covering Robot Manipulation via Data Deception (CORMAND2), an automated cyber–physical attack against industrial robots. CORMAND2 manipulates robot operation while deceiving the Supervisory Control and Data Acquisition (SCADA) system that the robot is operating normally by modifying the robot's movement data and data deception. CORMAND2 and its capability of degrading the manufacturing was validated experimentally using the aforementioned seven robots from six different OEMs. CORMAND2 unveils the limitations of existing anomaly detection systems, more specifically the assumption of the authenticity of SCADA-received movement data, to which we propose mitigations for.

A security view for LIDO

This article deals with cybersecurity and specially IoT security. We add a seven view to the Internet of Things (IoT) universal modelling language called “LIDO”. “LIDO” has six (6) different views each represents an aspect of the IoT domain. Security deals with tree aspects: Confidentiality, Integrity, Availability (CIA). This CIA triad model is a safety model that is intended to guide strategies for data security inside the places of a society or corporation. The “OSI” propose a model made of seven security layers that satisfies this CIA triad Model. We present in this article a layered IoT security view based on standards. We have retained this OSI model in seven layers to build the security view. The most delicate layer that we can't control is the “human layer”. To address this lack, we propose to set up an ethic which regulates the conscience and the behavior of man. We propose to include this ethic that educators and security specialists will define in the textbooks of generations to come.

A Newly Proposed Cloud Computing Based Strengthen Distributed Database System Model and Its Applications in Database Modelling

Abstract: In the modern era of today’s exceptional Information age, the day to day transactions of huge sensitive data sets, which is in the form of PBs (Peta-Bytes) 250 bytes and YBs (Yotta – Bytes) 280 bytes are drastically increases with enormous speed on CLOUD data storage environment. CLOUDs data storage environment are one of the most superior and reliable platform for storing a large sets of data both at enterprise level or local level. Because CLOUD provides online data fetching capability to restore or fetching data at any geographical locations through login their correspondent credentials. But to enhancement or spread of these large data sets are becomes also very complex with respect to maintenance of these data with take concern of consistency and data security, because to maintain these large data sets with full of consistency and integrity are really a very typical and rational tasks, so here In this paper we proposed a distributed database management systems for CLOUD interface also preserves or to take concern data security features with full restoration of CIA (Confidentiality, Integrity, Availability or Authenticity) trade of Information Security. Here we also improvised the mechanisms of traditional distributed database management systems because the tendency to preserves information and recover ability after any misconceptions happens that we restore data which belongs to similar person may have to be stored at different locations, but this newly proposed distributed database systems architecture contains all information or record which belong to similar person are stored in one database rather restore it different databases but the location of these data have to be changes mean while that the content or data which resides in one databases have to be moved to some other database and also preserves the security features, and this model also have capability to run older traditional methodology based distributed database management systems using this model. So the detailed description about these models and communication infrastructure among different CLOUDs are append in the upcoming sections of this paper. Keywords: Cloud based Distributed Database system model, Distributed system, Distributed Database model of CLOUD, Cloud Distributed Database, CLOUD based database systems

Defining Cyber Security and Cyber Security Risk within a Multidisciplinary Context using Expert Elicitation.

It is important to have and use standardized terminology and develop a comprehensive common understanding of what is meant by cyber security and cyber security risk given the multidisciplinary nature of cyber security and the pervasiveness of cyber security concerns throughout society. Using expert elicitation methods, collaborating cyber researchers from multiple disciplines and two sectors (academia, government–military) were individually interviewed and asked to define cyber security and cyber security risk. Data‐driven thematic analysis was used to identify the most salient themes within each definition, sector, and cyber expert group as a whole with results compared to current standards definitions. Network analysis was employed to visualize the interconnection of salient themes within and across sectors and disciplines. When examined as a whole group, “context‐driven,” “resilient system functionality,” and “maintenance of CIA (confidentiality, integrity, availability)” were the most salient themes and influential network nodes for the definition of cyber security, while “impacts of CIA vulnerabilities,” “probabilities of outcomes,” and “context‐driven” were the most salient themes for cyber security risk. We used this expert elicitation process to develop comprehensive definitions of cyber security (cybersecurity) and cyber security risk that encompass the contextual frameworks of all the disciplines represented in the collaboration and explicitly incorporates human factors as significant cyber security risk factors.

RANSOMWARE SPREAD PREVENTION SYSTEM USING PYTHON, AUDITD AND LINUX

The data-driven period produces more and more security-related challenges that even experts can hardly deal with. One of the most complex threats is ransomware, which is very taxing and devastating to detect and mainly prevent. The success of correlation lies in the variety of data sources. During the study of the methods of action of ransomware viruses, it was found that the main purpose is to demand ransom for decryption of data that were on the file system and during the penetration of the system, the ransomware virus successfully encrypted. The first global attack of the ransowmare (NotPetya) on the territory of Ukraine was on June 27, 2017. According to the Administration of US President Donald Trump, the attack using the NotPetya virus in June 2017 became the largest hacker attack in history. In a joint statement, the Five Eyes claimed responsibility for the attack on Russian authorities. The governments of Denmark and Ukraine are also blaming Russia for the attack. Many analysts have called these actions not just political in nature, but military aggression. A honeypot trap method was found while researching methods for detecting and counteracting ransomware. It was planned to develop a honeypot system on its own based on the Linux file system. Our research methods showed significant results in identifying ransomware processes using the honeypot concept augmented with symbolic linking to reduce damage made to the file system. The CIA (confidentiality, integrity, availability) metrics have been adhered to. We propose to optimize the malware process termination procedure and introduce an artificial intelligence-human collaboration to enhance ransomware classification and detection.

A Survey of Moving Target Defenses for Network Security

Network defenses based on traditional tools, techniques, and procedures (TTP) fail to account for the attacker’s inherent advantage present due to the static nature of network services and configurations. To take away this asymmetric advantage, Moving Target Defense (MTD) continuously shifts the configuration of the underlying system, in turn reducing the success rate of cyberattacks. In this survey, we analyze the recent advancements made in the development of MTDs and highlight (1) how these defenses can be defined using common terminology, (2) can be made more effective with the use of artificial intelligence techniques for decision making, (3) be implemented in practice and (4) evaluated. We first define an MTD using a simple and yet general notation that captures the key aspects of such defenses. We then categorize these defenses into different sub-classes depending on what they move, when they move and how they move. In trying to answer the latter question, we showcase the use of domain knowledge and game-theoretic modeling can help the defender come up with effective and efficient movement strategies. Second, to understand the practicality of these defense methods, we discuss how various MTDs have been implemented and find that networking technologies such as Software Defined Networking and Network Function Virtualization act as key enablers for implementing these dynamic defenses. We then briefly highlight MTD test-beds and case-studies to aid readers who want to examine or deploy existing MTD techniques. Third, our survey categorizes proposed MTDs based on the qualitative and quantitative metrics they utilize to evaluate their effectiveness in terms of security and performance. We use well-defined metrics such as risk analysis and performance costs for qualitative evaluation and metrics based on Confidentiality, Integrity, Availability (CIA), attack representation, QoS impact, and targeted threat models for quantitative evaluation. Finally, we show that our categorization of MTDs is effective in identifying novel research areas and highlight directions for future research.

Security of the Internet of Things: Vulnerabilities, Attacks, and Countermeasures

Wireless Sensor Networks (WSNs) constitute one of the most promising third-millennium technologies and have wide range of applications in our surrounding environment. The reason behind the vast adoption of WSNs in various applications is that they have tremendously appealing features, e.g., low production cost, low installation cost, unattended network operation, autonomous and longtime operation. WSNs have started to merge with the Internet of Things (IoT) through the introduction of Internet access capability in sensor nodes and sensing ability in Internet-connected devices. Thereby, the IoT is providing access to huge amount of data, collected by the WSNs, over the Internet. Hence, the security of IoT should start with foremost securing WSNs ahead of the other components. However, owing to the absence of a physical line-of-defense, i.e., there is no dedicated infrastructure such as gateways to watch and observe the flowing information in the network, security of WSNs along with IoT is of a big concern to the scientific community. More specifically, for the application areas in which CIA (confidentiality, integrity, availability) has prime importance, WSNs and emerging IoT technology might constitute an open avenue for the attackers. Besides, recent integration and collaboration of WSNs with IoT will open new challenges and problems in terms of security. Hence, this would be a nightmare for the individuals using these systems as well as the security administrators who are managing those networks. Therefore, a detailed review of security attacks towards WSNs and IoT, along with the techniques for prevention, detection, and mitigation of those attacks are provided in this paper. In this text, attacks are categorized and treated into mainly two parts, most or all types of attacks towards WSNs and IoT are investigated under that umbrella: “Passive Attacks” and “Active Attacks”. Understanding these attacks and their associated defense mechanisms will help paving a secure path towards the proliferation and public acceptance of IoT technology.

Modeling Access Control on Streaming Data in Apache Storm

Abstract Streaming analytics on real-time data is very important in the IOT world since analytics, decisions and operations have to be done in real-time for practical applicability. In such scenarios, one key consideration is the security of the real-time stream. Stream security as in other network security can be modeled using the CIA (Confidentiality/Integrity/Availability) model [1]. However, most practical implementations just take care of the first two aspects viz Confidentiality and Integrity using standard techniques such as encryption and signatures. In this paper, we introduce an access control mechanism on the stream that annotates the stream with additional security metadata. This metadata can be used to allow/deny access to elements in the stream and also protect the privacy of the data. We demonstrate a work in progress implementation of the access control mechanism on the popular streaming engine Apache Storm [2] and demonstrate how access control can be modeled and implemented on streaming data.

Multidimensional Security Provision for Secure Communication in Vehicular Ad Hoc Networks Using Hierarchical Structure and End-to-End Authentication

Vehicular ad hoc networks (VANETs) have been considered as one of the most influential applications of mobile ad hoc networks. The VANETs have also become an important part of Internet of Things. Along with the advantages, such networks are facing a number of security issues. A number of research have been done so far to identify the solution of the security problems in the VANETs. But the existing solutions do not confirm the confidentiality-integrity-availability (CIA) triad services simultaneously. Therefore, in this paper, we have provided a solution for the VANETs security using end-to-end authentication to avoid intrusion in the VANETs. After verifying the communicating entities, the data are transmitted in encrypted form thus the proposed approach provides CIA security services to VANETs communication. Along with this, we have used a sandboxing method for in-vehicle communication for prevention of intrusion in form of downloaded information. Moreover, in this paper, the VANETs are considered as a hierarchical model to concentrate on a less number of message exchanges. Furthermore, the simulation results show the efficiency of our proposed solution.

Cybersecurity and Rural Electric Power Systems: Considering Competing Requirements for Implementing a Protection Plan

Cybersecurity is a topic of increasing importance and interest to small utility operators like rural electric associations. Cyberattacks are a threat to our society's functioning, and cybersecurity is an urgent need in areas that include national security, business operations, and regulatory compliance. Several fundamental concepts can guide an operator when implementing a cybersecurity plan. Operators must consider the competing requirements of confidentiality, integrity, availability (CIA), and cost. They must also consider the potential of impact levels for an incident. While implementing a cybersecurity plan, operators will constantly identify adversaries, threats, vulnerabilities, consequences, and risks. They will implement physical, technical, and administrative controls to protect networks and other assets, detect attacks, respond to those attacks, and recover from any damage. The process will be continuous as operators respond to the changing environment.

User Authentication Framework with Improved Performance in Multi-cloud Environment

Cloud computing is an internet-based computing where shared resources, software and information provided to the end-users, on demand. The end users can be comfortable with the cloud as its features on-demand self-services, broad network access, resource pooling, rapid elasticity and measured service, make it more efficient. Security is one of the major issues which hamper the growth of cloud. Confidentiality–Integrity–Availability are the major security goals to be ensured by the security mechanisms. Authentication could provide a better solution in all three aspects. Various authentication based methodologies proposed by experts are in the field, with their own strength and weakness. This paper proposed an authentication scheme along with performance enhancement. Initial phase of the proposal differentiates the request as wired or wireless network. Based on which, appropriate authentication protocol comes into play, wired adopts keystroke behaviour and wireless follows SSID. In the second phase, users behaviour were analysed and credits assigned to them, based on which resource accessibility is restricted. In the third phase, performance characteristics were taken into account. Analytical results support the claim to enhance the security services and also the performance factors such as resource utilizations and cost.

Anjali Kaushik: Sailing safe in cyberspace: protect your identity and data

Anjali Kaushik reviews 50 global cyber crime incidents reported in the last decade (pg xxii) and tries to analyze them based on (i) motivation that lead to it, (ii) technological exploits (threats and methods used), (iii) impact, trends and role of government in combating them and (iv) recommend methods for being against them. The author acknowledges the fact that cyber security breach, though results in loss of confidentiality–integrity–availability (CIA) of data, is not a technical issue alone. It impacts individuals, organisations and nations at large. A ‘risk management’ approach with effective use of controls (Straub and Welke 1998) would be better way to address cyber attacks. The author hints at (i) risk assessment, (ii) risk quantification and (iii) risk mitigation strategies, in a cursory manner in this book. In section I, the author sites variables such as (i) social, (ii) economic, (iii) biological and (iv) criminal justice system as being instrumental in promoting cyber crime. The author may have also referred to Deterrence Theory (Gibbs 1968; Bulgurcu et al. 2010) and Protection Motivation Theory (Rogers 1975, 1983; Bulgurcu et al. 2010) for arriving at the motivational factors for cyber crime. Throughout the entire book, the author focuses on external attacks, but internal attacks by disgruntled employees (Pahnila et al. 2007; Herath and Rao 2009) are an issue of serious concern too. In Section 2, the author takes the readers through a journey of the various threats that lead to cyber attacks, namely (i) spam, (ii) malware, (iii) phishing, (iv) identity theft, (v) denial-of-service attacks, (vi) botnets, (viii) hacking, (ix) social engineering. She uses recent security breach incidents to (a) illustrate the mechanism in which these attacks impacted individuals, organizations and countries at large and (b) propose mitigating strategies for them. She concludes this section by highlighting the imminent threats to currently popular technologies such as (i) mobile computing, (ii) social media and (iii) cloud computing. Use of controls and best practices along with technological solution will be a better mitigation strategy. In Section 3, the author discusses the monetary losses arising from cyber crime based on data from various surveys conducted by Antivirus publishers. She also sites instances of intangible losses to nations which are political and social in nature. The author also suggests that organization do face loss of reputation due to cyber attacks, but do not refer to studies by Campbell et al. (2003), Cavusoglu et al. (2004), Chai et al. (2011) and Chen et al. (2011), where they use event study methods to quantify the impact. The author highlights the problem of estimating the frequency of cyber attack and its severity in this section, but does not refer to any of the existing literature where researchers (Bohme 2010, 2005; Bohme and Schwartz (2010); Bohme and Kataria A. Mukhopadhyay (&) Information Technology and Systems Area, Indian Institute of Management, Lucknow, India e-mail: arunabha@iiml.ac.in

THREE TIER DATA STORAGE SECURITYIN CLOUD USING FACE FUZZY VAULT

The well-known buzzword, say Cloud Computing, attracts the attention from both academy and industry across the world, because of its potential in achieving the long-held dream, say Utility Computing and opens a new era for new spawned companies to provide services above this new concept[6],[8]. At the same time hackers have also turned their faces to cloud to breach the security. The best software solution provides utilization of cloud computing and take full advantage of it with best security solutions and assurance. To achieve this goal proposed system provides the following solution, which uses three tier security in cloud environment. Set of biometric features are first extracted from user’s face image, The extracted features are then quantized and mapped to binary representation for feature point matching. The produced features and the secret key (which will restrict unauthorized access) are bound using Face fuzzy vault scheme .During authentication key will be correctly retrieved if face vault matches. Also to prevent data from cloud service provider, data is encrypted while saving it on the cloud using Confidentiality, Integrity, Availability (CIA) values which will categorize data in three rings. While providing data if user is authorized then the concerned password gets extracted from the fuzzy vault and the extracted password will help to decide which user belongs to which data ring.

Computer Security in Electronic Government

As e-government projects proliferate at all levels of government, and as they transition from voluntary to mandatory participation, close examination is required, particularly the examination of security issues. The CIA (Confidentiality, Integrity, Availability) model offers a framework for examining e-government projects. This study examines the factors impacting security, using as a case study an education information system in the 2003-2004 school year. The study focuses on how CIA factors relate to a host of variables, such as school district size, software selection, technology staffing, technical competence and support, awareness of security issues, and project commitment. For the organizations participating in the project, typical factors of district size and software selection are found to be insignificant, and technical support is identified as one of the key factors promoting security.