Continuous Verification Research Articles

The Legal Handling of Digital Accessibility: a Comparison of Evaluation and Policy Approaches in Federal-Level Cases in Brazil and the United States

Countries in the Global South still have less well-established procedures and resources to enact public policies and surveillance of digital accessibility. This paper presents a comparative study on the legal handling of digital accessibility in one country in the Global North and one in the Global South – the United States and Brazil. The study analyzed federal-level procedures handled by government surveillance bodies concerning public and private organizations, involving 26 cases in Brazil and 124 in the United States. The results showed that most cases in Brazil were finalized based on automated accessibility evaluations and with little evidence of long-term actions for sustained accessibility. All cases analyzed from the United States resulted in settlement agreements leading to medium to long-term initiatives, which covered continuous verification of conformance to accessibility standards and, in many cases, demanded inspections by accessibility specialists and tests with users with disabilities. The paper discusses the implications of including effective accessibility evaluation methods and long-term solutions in legal cases.

A Formal Verification Approach for Linux Kernel Designing

Although the Linux kernel is widely used, its complexity makes errors common and potentially serious. Traditional formal verification methods often have high overhead and rely heavily on manual coding. They typically verify only specific functionalities of the kernel or target microkernels and do not support continuous verification of the entire kernel. To address these limitations, we introduce LMVM (Linux Kernel Modeling and Verification Method), a formal method based on type theory that ensures the correct design of the Linux architecture. In the model, the kernel is treated as a top-level type, subdivided into the following sublevels: subsystem, dentry, file, struct, function, and base. These types are defined in the structure and relationships. The verification process includes checking the design specifications for both type relationships and the presence of each type. Our contribution lies primarily in the following two points: 1. This is a lightweight verification. As long as the modeling is complete, architectural errors in the design phase can be identified promptly. 2. The designed “model refactor” module supports kernel updating, and the kernel can be continuously verified by extending the kernel model. To test its usefulness, we develop a set of security communication mechanisms in the kernel, which are verified using our method.

Reliability in mass alert system for dam emergencies: Case study of Vale S/A

AbstractIn its iron ore operations, Vale, the largest mining company in Brazil and the fourth largest mining company in the world by market value, has 77 dams considered with high potential damage in case of a failure in the stability controls. This classification follows the criteria of the sector regulatory agency in Brazil and determines that, for this class, a mass alert system is necessary for the resident population and workers immediately downstream of the dam within a region preset by legislation, considering a simulated flood area. For Vale, the mass alert system for dam emergencies is part of a critical mitigating control for a business risk analysis considering the hypothetical dam break as an unwanted material event. Therefore, both the probability of failure on demand, spurious failure, and availability of the assets of this protection barrier are important elements for this purpose, as well as the emergency response plan and the evacuation simulation of flood areas, which are part of a risk management system that require continuous verification and continuous improvement. Currently, Vale has 375 sirens, and it is planned to reach 420 sirens by the end of 2024. The purpose of this article is to present how the safety concepts applied to these systems were developed, the good practices applied from this study, and the lessons learned from the dam emergency management arising from the break of the Brumadinho dam in 2019. The reliability analyses of the systems involved and the main contributors to the Safety Critical Unavailability are presented, as well as the results of the reduction in the maintenance time and increase in system availability.

School Leadership Strategy to IncreaseTeacher Professionalism and Its Impact on the Quality of Learning Education at Marcelo 2 Comoro School

Problem Formulation How are the school director's strategy steps to increase Professionalism Teacher in basic education. Research Objectives To analyses the School Director's strategy to increase Teacher Professionalism and its impact on improving the quality of basic education. The research findings will build theories for the School Leadership Strategy, especially increasing teacher professionalism, which focuses on the quality of learning. This knowledge will be a reference for the academic community and professionals to carry out continuous verification and discovery of this branch of science. In order to deepen our efforts, it is a basis to deepen and develop further for further research. Education is an inspiration for science, when the quality of the country's development process is in progress, the quality of basic education that is strong and strong can also affect the future development of the Nation. The leadership strategy has a range of ways to increase Professionalism teachers in order to have a good quality impact on learning for students. The method also has two or more meanings that are sought to find the practice of attitude, mentality, intellectual capacity, which has their purpose. The time for conducting the survey is on the start date and the end date. The start date of the survey was July 31th and August 11th 2023 and the location of the survey was conducted in the Basic. Education of Marcelo 2 Comoro Administrative Post of Dom Aleixo, Dili Municipality. Data collection techniques include Observation, Interview, documentation, data analysis techniques by qualitative methods, such as data collection, data reduction, data display, data verification. Research findings show that leadership responds to the same purpose that leaders aim to improve the quality of teaching learning through various ways to increase teacher professionalism to ensure quality of learning. In conclusion, the steps used by the leadership to improve the quality of the teacher's professionalism through a range of academic training, the leadership strategy is used to facilitate teachers at different levels of education to ensure quality, when implementing these strategies there are always obstacles but the leadership is low in order to overcome them, through leadership efforts it can contribute to improving the quality and quality of learning.

A Trusted Execution Environment RISC-V System-on-Chip Compatible with Transport Layer Security 1.3

The Trusted Execution Environment (TEE) is designed to establish a safe environment that prevents the execution of unauthenticated programs. The nature of TEE is a continuous verification process with hashing, signing, and verifying. Such a process is called the Chain-of-Trust, derived from the Root-of-Trust (RoT). Typically, the RoT is pre-programmed, hard-coded, or embedded in hardware, which is locally produced and checked before booting. The TEE employs various cryptographic processes throughout the boot process to verify the authenticity of the bootloader. It also validates other sensitive data and applications, such as software connected to the operating system. TEE is a self-contained environment and should not serve as the RoT or handle secure boot operations. Therefore, the issue of implementing hardware for RoT has become a challenge that requires further investigation and advancement. The main objective of this proposal is to introduce a secured RISC-V-based System-on-Chip (SoC) architecture capable of securely booting a TEE using a versatile boot program while maintaining complete isolation from the TEE processors. The suggested design has many cryptographic accelerators essential for the secure boot procedure. Furthermore, a separate 32-bit MicroController Unit (MCU) is concealed from the TEE side. This MCU manages sensitive information, such as the root key, and critical operations like the Zero Stage BootLoader (ZSBL) and key generation program. Once the RoT is integrated into the isolated sub-system, it becomes completely unavailable from the TEE side, even after booting, using any method. Besides providing a secured boot flow, the system is integrated with essential crypto-cores supporting Transport Layer Security (TLS) 1.3. The chip is finally fabricated using the Complementary Metal–Oxide–Semiconductor (CMOS) 180 nm process.

Zenith Armor : Advancing Security with Zero Trust Measures

In an era of unprecedented digital connectivity and evolving cyber threats, traditional security paradigms have proven insufficient to safeguard sensitive information. This research paper introduces "Zenith Armor," a comprehensive exploration and implementation of Zero Trust Architecture (ZTA) in the realm of cybersecurity. The paper delves into the core principles of ZTA, emphasizing the imperative shift from implicit trust to continuous verification in securing organizational assets. "Zenith Armor" stands as a testament to the evolving landscape of security frameworks, challenging conventional models by prioritizing identity verification, least privilege access, micro-segmentation, and continuous monitoring. The framework not only mitigates the risks associated with unauthorized access but also addresses the lateral movement of threats within a network, enhancing overall resilience. This paper outlines the essential components of Zenith Armor, emphasizing its dynamic risk assessment capabilities, stringent access control policies, and encryption measures for safeguarding data. Additionally, the framework's applicability to diverse devices, coupled with user education initiatives, creates a robust security ecosystem. The implementation extends beyond traditional network perimeters, incorporating adaptive security measures, and continuous updates. Furthermore, "Zenith Armor" recognizes the significance of a proactive approach to security incidents. A well-defined incident response plan, coupled with vendor and third-party access controls, ensures a swift and effective response to potential breaches. The research paper concludes with a reflection on the transformative potential of "Zenith Armor" in redefining organizational security postures. By embracing the Zero Trust paradigm, organizations can fortify their defenses against an ever-evolving threat landscape, thereby establishing a new zenith in cybersecurity resilience. Keywords—delves ,imperative, micro-segmentation,proactive, zenith.v

Next-Generation Threat Detection and Mitigation in 6G Wireless Networks Using IAM, ZTNA and Advanced Security Mechanisms

As the deployment of 6G wireless networks looms on the horizon, the imperative to fortify their security infrastructure becomes increasingly pressing. One way to achieve this is through Identity and Access Management (IAM) frameworks to implement strong authentication and authorization mechanisms. Zero Trust Network Access (ZTNA) architectures advocate for a shift towards continuous verification and least-privileged access principles. Secure network segmentation and behavior anomaly detection systems limit the scope of potential breaches. Intrusion Detection and Prevention Systems (IDPS) detect and block cyber threats. These advanced security mechanisms improve the resilience of 6G networks and ensure the integrity, confidentiality, and availability of critical network assets. IAM protocols exhibit fast user authentication speeds with average authentication time of 0.5 seconds. ZTNA frameworks ensure high network security with a 98% detection rate of abnormal network behaviors

Next-Generation Threat Detection and Mitigation in 6G Wireless Networks Using IAM, ZTNA and Advanced Security Mechanisms

As the deployment of 6G wireless networks looms on the horizon, the imperative to fortify their security infrastructure becomes increasingly pressing. One way to achieve this is through Identity and Access Management (IAM) frameworks to implement strong authentication and authorization mechanisms. Zero Trust Network Access (ZTNA) architectures advocate for a shift towards continuous verification and least-privileged access principles. Secure network segmentation and behavior anomaly detection systems limit the scope of potential breaches. Intrusion Detection and Prevention Systems (IDPS) detect and block cyber threats. These advanced security mechanisms improve the resilience of 6G networks and ensure the integrity, confidentiality, and availability of critical network assets. IAM protocols exhibit fast user authentication speeds with average authentication time of 0.5 seconds. ZTNA frameworks ensure high network security with a 98% detection rate of abnormal network behaviors.

Transfer Learning Method from Parameter Scene to Physical Scene Based on Self-Game Theory

Due to the inherent challenges in meeting the comprehensive training requirements of combat scenarios within a digital environment, this paper proposes innovative solutions. Firstly, a parametric scene training method is introduced, aiming to enhance the adaptability of the training process. Secondly, the utilization of the digital environment as a test environment is suggested, which can significantly improve the efficiency of iterative virtual-to-real conversion. Additionally, employing digital simulation as a pre-test environment for the physical setting can effectively reduce deployment costs and enhance the safety of virtual reality migration experiments. The proposed approach involves constructing a training model based on the parameterized environment and implementing a feedback loop utilizing the digital environment agent model. This framework enables continuous verification of the environment’s parameters, ensuring the accuracy of decision-making strategies and evaluating the transferability of the decision-making model.

Sharing Experiences in Selecting Clinical Outcome and Approving Validated Questionnaires : Insights from an Elderly Registry Study

Objectives: Underpinned by the context of a Korean traditional medicine cohort study on healthy aging, this research primarily aims to guide the selection of Clinical Outcome Assessments (COAs) for elderly healthy aging patient registry research, offering insights into the selection process; and secondly, to streamline the resource-intensive process of obtaining permissions for validated COAs, benefiting future traditional Korean medicine clinical researchers.Methods : In this study, we identified outcomes through a review of previous studies, followed by a process involving expert consultations to select the final outcomes. Subsequently, for the selected outcomes that were Clinical Outcome Assessments (COAs) developed tools, we searched in commercial databases to confirm the availability of Korean versions and the necessity of obtaining permissions. Finally, we obtained permissions for their utilization and, when needed, acquired the original instrument questionnaire through payment.Results: Through a literature review of existing observational studies, a total of 57 outcomes were selected, with 19 of them identified as COA instruments. Upon verifying usage permissions for these 19 instruments, it was found that 17 required author-specific permissions, and among these, 2 needed a purchase as they were commercially available.Conclusion: This study provides a detailed overview of outcome selection and permission acquisition for elderly patient registry research. It underscores the importance of Clinical Outcome Assessment (COA) tools and the rigorous approval process, aiming to enhance research reliability. Continuous verification of COA information is essential, and future research should explore Core Outcome Set (COS) development through consensus-building approaches like Delphi studies.

A Systematic Survey on 5G and 6G Security Considerations, Challenges, Trends, and Research Areas

With the rapid rollout and growing adoption of 3GPP 5thGeneration (5G) cellular services, including in critical infrastructure sectors, it is important to review security mechanisms, risks, and potential vulnerabilities within this vital technology. Numerous security capabilities need to work together to ensure and maintain a sufficiently secure 5G environment that places user privacy and security at the forefront. Confidentiality, integrity, and availability are all pillars of a privacy and security framework that define major aspects of 5G operations. They are incorporated and considered in the design of the 5G standard by the 3rd Generation Partnership Project (3GPP) with the goal of providing a highly reliable network operation for all. Through a comprehensive review, we aim to analyze the ever-evolving landscape of 5G, including any potential attack vectors and proposed measures to mitigate or prevent these threats. This paper presents a comprehensive survey of the state-of-the-art research that has been conducted in recent years regarding 5G systems, focusing on the main components in a systematic approach: the Core Network (CN), Radio Access Network (RAN), and User Equipment (UE). Additionally, we investigate the utilization of 5G in time-dependent, ultra-confidential, and private communications built around a Zero Trust approach. In today’s world, where everything is more connected than ever, Zero Trust policies and architectures can be highly valuable in operations containing sensitive data. Realizing a Zero Trust Architecture entails continuous verification of all devices, users, and requests, regardless of their location within the network, and grants permission only to authorized entities. Finally, developments and proposed methods of new 5G and future 6G security approaches, such as Blockchain technology, post-quantum cryptography (PQC), and Artificial Intelligence (AI) schemes, are also discussed to understand better the full landscape of current and future research within this telecommunications domain.

Evaluation of the Informativeness of Features in Datasets for Continuous Verification

Continuous verification eliminates the flaws of existing static authentication, e.g. identifiers can be lost or forgotten, and the user logs in the system only once, which may be dangerous not only for areas requiring a high level of security but also for a regular office. Checking the user dynamically during the whole session of work can improve the security of the system, since while working with the system, the user may be exposed to an attacker (to be assaulted for example) or intentionally transfer rights to him. In this case, the machine will not be operated by the user who performed the initial login. Classifying users continuously will limit access to sensitive data that can be obtained by an attacker. During the study, the methods and datasets used for continuous verification were checked, then some datasets were chosen, which were used in further research: smartphone and smart watch movement data (WISDM) and mouse activity (Chao Shen’s, DFL, Balabit). In order to improve the performance of models in the classification task it is necessary to perform a preliminary selection of features, to evaluate their informativeness. Reducing the number of features makes it possible to reduce the requirements for devices that will be used for their processing, and to increase the volume of enumeration of classifier parameter values at the same time, thereby potentially increasing the proportion of correct answers during classification due to a more complete enumeration of value parameters. For the informativeness evaluation, the Shannon method was used, as well as the algorithms built into programs for data analysis and machine learning (WEKA: Machine Learning Software and RapidMiner). In the course of the study, the informativeness of each feature in the selected datasets was evaluated, and then users were classified with RapidMiner. The used in classifying features selection was decreased gradually with a 20% step. As a result, a table was formed with recommended sets of features for each dataset, as well as dependency graphs of the accuracy and operating time of various models.

Periodic event-based sliding mode tracking control of Euler–Lagrange systems with dynamic triggering

In this article, we propose the design of a robust tracking controller of perturbed Euler–Lagrange systems (ELSs) based on dynamic event-triggered (DET) sliding mode control (SMC) with periodic evaluation of triggering rule. To ensure robustness, we employ the SMC technique and introduce a dynamic periodic event-triggering strategy to reduce communication frequency significantly. This strategy involves the incorporation of an auxiliary dynamic variable to formulate the event-triggering condition, leading to the generation of sparser triggering instants. An upper bound of the sampling period is also obtained in this design to facilitate the periodic assessment of the event-triggered strategy, alleviating the need for continuous verification of the event condition. This technique is more economical with respect to communication resources and practical than its continuous counterpart due to the relaxation of continuous measurements. The stability of the closed loop system is established using Lyapunov analysis within the dynamically triggered event-based SMC framework. The necessary switching gain for maintaining the stable motion of the sliding variable is derived with the help of Lyapunov analysis. The tracking error is shown to be ultimately bounded, and Zeno-behaviour is excluded to ensure finite sampling. A comparative analysis based on simulation results is included to highlight the effectiveness of the proposed scheme, especially in reducing the network usage in the transient phase of the response while achieving comparable steady-state behaviour. Ultimately, we validate the effectiveness of the proposed algorithm by simulating a two-link manipulator and experimentally implementing it with a one-link manipulator.

A data-driven UUV decision-making test strategy design method

Based on the analysis of UUV control architecture and workflow, a data-driven test strategy design method was proposed to realize comprehensive online inspection of UUV, aiming at the requirements of full-process and full-function commissioning, system-level fault testing, single-step action of the actuator, software boundary testing, emergency control and fault-tolerant function verification of a certain UUV. At the same time, three types of typical faults of software, sensors and actuators are identified, and pseudo-random fault codes are injected into UUV control flow or information flow to realize the test verification of action continuity, function matching and control effectiveness under UUV operating conditions. The engineering application proves that the strategy has clear logic and comprehensive functional coverage, laying the foundation for improving UUV reliability and sailing safety.

Mobile Affinity Selection Chromatography Analysis of Therapeutic Monoclonal Antibodies.

Federal regulatory agencies require continuous verification of recombinant therapeutic monoclonal antibody (mAb) quality that is commonly achieved in a two-step process. First, the host-cell proteome and metabolome are removed from the production medium by protein A affinity chromatography. Second, following recovery from the affinity column with an acidic wash, mAb quality is assessed in multiple ways by liquid chromatography-mass spectrometry (LC-MS). However, lengthy sample preparation and the lack of higher-order structure analyses are limitations of this approach. To address these issues, this report presents an integrated approach for the analysis of two critical quality attributes of mAbs, namely titer and relative aggregate content. Integration of sample preparation and molecular-recognition-based analyses were achieved in a single step utilizing an isocratically eluted mobile affinity selection chromatography (MASC) column. MASC circumvents the protein A step, simplifying sample preparation. Within 10 min, (i) mAbs are fluorescently coded for specific detection, (ii) monomers and aggregates are resolved, (iii) the mAb titer is quantified, (iv) relative aggregate content is determined, (v) analytes are detected, and (vi) the column is ready for the next sample. It is suggested herein that this mode of rapid quality assessment will be of value at all stages of discovery (screening, clone selection, characterization), process R&D, and manufacturing. Rapid monitoring of variant formation is a critical element of quality evaluation.

‘Stability is a foggy concept’: work stability from the perspective of young people with mobility experiences

ABSTRACT Currently, substantial attention is being paid to flexibility in the working life of young people. Stability is a conceptual companion of flexibility; however, its role has been vastly underestimated in the literature on working life. The key aim of this article is to explore the processes of meaning-making concerning work stability among young people with mobility experiences. Focusing on the intersection between career studies, mobility studies, and youth studies, the aim is to answer the following research questions. (1) How do young people with mobility experiences perceive stability in the context of the labour market? (2) What are the roles of spatial mobility and previous work experience in the perception of work stability? Based on qualitative data, the process of defining, redefining, questioning and denying the concept of work stability is discussed, showing that this process is subject to continuous verification and re-evaluation based on previous work experiences.

Continuous verification with acknowledged MAPE-K pattern and time logic-based slicing: A platooning system of systems case study

A system of Systems (SoS) has emerged to achieve goals beyond the capabilities of a single system. Platooning is a representative SoS where vehicles are driven in a group for energy efficiency. A leader of a platoon can control followers, but the followers can also leave the platoon independently. During follower leave, energy efficiency and the independent operation of followers may conflict. To resolve the conflicts of the platooning SoS and operate safe platooning maneuvers, continuous verification of platooning is required. Continuous verification is performed repeatedly in a control loop that allows system monitoring and verification. However, there are two problems in the existing approaches: there are no suitable control loop patterns to support the resilient reconfiguration, and the SoS verification cost is high. We propose an approach, called continuous verification of platooning (CVP), that solves these two problems. CVP includes an acknowledged MAPE-K pattern for resilience and a fast and accurate slicing for low verification costs. The acknowledged MAPE-K pattern and slicing algorithm proposed in the paper can be independently used for other systems and models. In the case of the acknowledged MAPE-K pattern, we applied it to a mass casualty incident response SoS, which is another acknowledged type of SoS in the paper, and showed its effectiveness. Our experiments on CVP showed that the pattern reduced the incidence rate of 10 types of failure by 97.3%, and ensured the leave of followers. We also proved the correctness of slicing and demonstrated experimentally that it reduces the verification costs by 68.62.Editor’s note: Open Science material was validated by the Journal of Systems and Software Open Science Board.

Scalable Zero-Trust Architectures for Enhancing Security in Multi-Cloud SaaS Platforms

The recent advancement in cloud computing technology has led organizations to embrace multi-cloud systems, wherein they utilize services from many cloud service providers. The increasing reliance on Software as a Service (SaaS) platforms across multiple cloud environments has underscored the need for robust security frameworks that can effectively address contemporary cyber threats. This review paper explores the scalable Zero-Trust Architectures (ZTA) as a vital security measure for multi-cloud SaaS platforms. By advocating a security paradigm that assumes no implicit trust, regardless of network location, ZTA provides a framework for continuous verification of users and devices accessing sensitive resources. We examine a number of ZTA architectural components, including micro-segmentation, identity and access management, and real-time threat detection. Furthermore, we emphasise the importance of ZTA in improving data security, compliance, and overall resilience against complex assaults, as well as the difficulties and advantages of integrating ZTA within multi-cloud environments. The analysis indicate that a scalable Zero-Trust approach can significantly improve security posture while maintaining operational efficiency across diverse cloud infrastructures

An Incentive-Compatible Mechanism for Decentralized Storage Network

The dominance of a few big companies in the storage market arising various concerns including single point of failure, privacy violation, and oligopoly. To eliminate the dependency on such a centralized storage architecture, several Decentralized Storage Network (DSN) schemes such as Filecoin, Sia, and Storj have been introduced. DSNs leverage blockchain technology to create a storage platform such that the micro storage providers can also participate in the storage market. To verify the accurate data storage by the storage providers during a storage contract, DSNs apply a Proof of Storage (PoS) scheme to continuously inspect the storage service. However, continuous verification of the storage provider imposes an extra cost to the network and therefore end-users. Moreover, DSN's PoS verification is vulnerable to a service denying attack in which the storage provider submits valid PoS to the network while denying the service to the client. Considering the benefits and existing challenges of DSNs, this paper introduces a novel incentive-compatible DSN scheme. In this scheme, the PoS is conducted only if the client submits a challenge request. We model the storage service as a repeated dynamic game and set the players' payoffs such that the storage provider's dominant strategy is to honestly follow the storage contract. Our proposed mechanism leverages the smart-contract and oracle network to govern the storage agreement between the client and storage provider efficiently. Furthermore, our scheme is independent of a specific blockchain platform but can be plugged into any blockchain platform with smart-contract execution capability. As a proof of concept, we have implemented our scheme using solidity language and chainlink oracle network. The performance analysis demonstrates the applicability of our scheme.

The Zappa method for ascertaining business continuity and its application in the 1934 Comit Report

Introduction. The verification of business continuity has significant theoretical and empirical implications, the complexity of which is amplified in large companies such as the Banca Commerciale Italiana analysed in this study. Aim of the work. This study aims to reconstruct Zappa's method of ascertaining business continuity, both from the point of view of its founding theoretical princi-ples and its concrete application. Methodological approach. The study combined two methodologies: (a) a literature review to analyse Zappa's works published up to 1935, the year in which the Comit Report was drafted; and (b) a case study to investigate the 1934 Comit Report, drawn up by Zappa on behalf of the Presidency of the I.R.I. Main findings. This study identified Gino Zappa's interpretative paradigms and elaborated an explanatory scheme for his method. Originality. The originality of this study lies in the unitary composition of Zappa's procedure through the empirical confirmation of his theoretical postulates.