Current Security Level Research Articles

A Multi-Level Security Model with Least Privilege Support for Trusted Subject

The trusted subject supports of the existing multi-level security models are reviewed and a new model called DLS (discrete label sequence) is proposed. It decomposes the lifecycle of a trusted subject into a sequence of untrusted states (US). Each untrusted state is associated with a certain current security label, and only the predefined trusted request events (TRE) can trigger the transition from one US to the other. Thus, the current security level of a trusted subject is dynamically changed according to its application's logic. Definitions of secure states and rules to preserve security are also presented. Compared with the trusted subject implemented by security level range, this model gives a better support of least privilege and achieves the support within the MLS policy framework.

Management of Sports Facilities: Stress and Terrorism Since 9/11

Since 9/11, the world has been on alert and it is just a matter of time before a sports facility is targeted. No empirical studies have examined the stress levels of employees in sports facilities. Tangential studies will show, stress symptoms, changes in behavior and life style continued long after 9/11 to the point that it became a habit and no longer an isolated event. However, there is still the question of a secure work environment for the employees of these sports facilities. The current level of security being implemented in sport facilities is no longer sufficient to ensure the safety of employees, participants and spectators. Recommendations have been chosen carefully and are budget dependent. The implementation of biometrics will potentially reduce the stress levels of the targeted work environments by making it a safer place. The increased level of stress in the work environment has been partially reduced by several stress management techniques that include: task redesign, flexible work schedul...

New security measures for the international shipping community

On 1 July 2004 the new maritime security regulatory regime set out in the International Convention for the Safety of Life at Sea (SOLAS), 1974 as amended, namely the new chapter XI-2 on Special measures to enhance maritime security and the International Ship and Port Facility Security (ISPS) Code entered into force only 18 months after adoption by the SOLAS Conference in December 2002. Following the devastating terrorist acts of 11 September 2001 in the United States, the international community recognised the need to protect the international maritime transport sector against the threat of terrorism. IMO responded swiftly and firmly by developing these new requirements, which represent the culmination of co-operation between Governments, Government agencies, local administrations and shipping and port industries. The new requirements form the international framework through which Governments, ships and port facilities can co-operate to detect and deter acts, which threaten security in the maritime transport sector. In order to determine what security measures are appropriate, Governments must assess the threat and evaluate the risk of a potential unlawful act. The ISPS Code provides a standardized, consistent framework for managing risk and permitting the meaningful exchange and evaluation of information between Contracting Governments, companies, port facilities, and ships. The requirements also include provisions, which establish the right of a State to impose control and compliance measures on ships in or intending to visit its ports. It also provides for Contracting Governments to take further action when relevant requirements are not met or when there are other clear grounds for taking such action. In addition, where a risk of attack has been identified, the coastal State concerned shall advise the ships concerned of the current security level; of any security measures that should be put in place by the ships concerned to protect themselves from attack; and of the security measures that the coastal State has decided to put in place. The new requirements entered into force only recently and this paper also reports, notwithstanding the fact that Contracting Governments to the 1974 SOLAS Convention were obliged to give full and complete effect to the requirement by the aforesaid date, on the status of their implementation, so far, both by ships and port facilities. It further discusses the consequences for the shipping and port industry, including human element factors as well as the financial aspects involved, and for the economy of a country of the failure to comply.

‘There be Dragons!’

What about this for a dramatic opener? “Greetings! Without your knowledge or explicit permission, the Windows networking technology which connects your computer to the Internet may be offering some or all of your computer’s data to the entire world at this very moment!” The website from which this is taken is called Shields Up ( https://grc.com) and is dedicated to researching Internet security for Windows users. There are tools here for the taking that will give you an instant picture of your current level of security — or lack of it, as the case may be.

IMHP: A mobile host protocol for the internet

This paper describes a protocol that allows transparent routing of IP packets to mobile hosts in the Internet, while using only the mobile host's home IP address. The protocol, called IMHP (Internet Mobile Host Protocol), requires no changes in stationary hosts that communicate with mobile hosts, and requires no changes in mobile hosts above the IP level. IMHP quickly converges to optimal routing following the movement of a mobile host, while preserving the current level of security in the Internet. Detailed examples of operation are presented.