Cybersecurity Features Research Articles

The Copenhagen School’s widening security theory in relation to cybersecurity. Applicability and Implications

This paper critically examines the relationship between cybersecurity and Copenhagen School’s widening security theory, with the aim of assessing the possibility of applying this theoretical framework to the cyber realm. As cybersecurity is a relatively recent addition to the security discourse, this research explores whether the Copenhagen School’s traditional framework, which was primarily focused on securitisation processes in the five main sectors (military, political, economic, environmental, and societal), adequately encompasses the unique aspects and dynamics of cyber domain. The research question is: Why the cybersecurity field can’t become a separate constructivist sector? The study begins with a detailed overview of both cybersecurity landscape and Copenhagen School’s fundamental principles to provide the context for a comparative analysis of the Copenhagen theory and contemporary cybersecurity literature. In doing so, the research delves into the features of cybersecurity, with a focus on the evolving nature of cyber threats and vulnerabilities. By performing a qualitative analysis of the existing literature, the paper assesses the limitations of integrating these two concepts, ultimately concluding that cybersecurity lacks the distinct characteristics required to be considered a separate sector under the Copenhagen School’s framework. The findings contribute to the ongoing discussions regarding the adaptation of traditional security theories to address contemporary security challenges in the digital age.

Comparative study of novel packet loss analysis and recovery capability between hybrid TLI-µTESLA and other variant TESLA protocols

Analyzing packet loss, whether resulting from communication challenges or malicious attacks, is vital for broadcast authentication protocols. It ensures legitimate and continuous authentication across networks. While previous studies have mainly focused on countering Denial of Service (DoS) attacks' impact on packet loss, our research introduces an innovative investigation into packet loss and develops data recovery within variant TESLA protocols. We highlight the efficacy of our proposed hybrid TLI-µTESLA protocol in maintaining continuous and robust connections among network members, while maximizing data recovery in adverse communication conditions. The study examines the unique packet structures associated with each TESLA protocol variant, emphasizing the implications of losing each type on the network performance. We also introduce modifications to variant TESLA protocols to improve data recovery and alleviate the effects of packet loss. Using Java programming language, we conducted simulation analyses that illustrate the adaptability of variant TESLA protocols in recovering lost packet keys and authenticating previously buffered packets, all while maintaining continuous and robust authentication between network members. Our findings also underscore the superiority of the hybrid TLI-µTESLA protocol in terms of packet loss performance and data recovery, alongside its robust cybersecurity features, including confidentiality, integrity, availability, and accessibility. Additionally, we demonstrated the efficiency of our proposed protocol in terms of low computational and communication requirements compared to earlier TESLA protocol variants, as outlined in previous publications.

A Novel IDS with a Dynamic Access Control Algorithm to Detect and Defend Intrusion at IoT Nodes.

The Internet of Things (IoT) is the underlying technology that has enabled connecting daily apparatus to the Internet and enjoying the facilities of smart services. IoT marketing is experiencing an impressive 16.7% growth rate and is a nearly USD 300.3 billion market. These eye-catching figures have made it an attractive playground for cybercriminals. IoT devices are built using resource-constrained architecture to offer compact sizes and competitive prices. As a result, integrating sophisticated cybersecurity features is beyond the scope of the computational capabilities of IoT. All of these have contributed to a surge in IoT intrusion. This paper presents an LSTM-based Intrusion Detection System (IDS) with a Dynamic Access Control (DAC) algorithm that not only detects but also defends against intrusion. This novel approach has achieved an impressive 97.16% validation accuracy. Unlike most of the IDSs, the model of the proposed IDS has been selected and optimized through mathematical analysis. Additionally, it boasts the ability to identify a wider range of threats (14 to be exact) compared to other IDS solutions, translating to enhanced security. Furthermore, it has been fine-tuned to strike a balance between accurately flagging threats and minimizing false alarms. Its impressive performance metrics (precision, recall, and F1 score all hovering around 97%) showcase the potential of this innovative IDS to elevate IoT security. The proposed IDS boasts an impressive detection rate, exceeding 98%. This high accuracy instills confidence in its reliability. Furthermore, its lightning-fast response time, averaging under 1.2 s, positions it among the fastest intrusion detection systems available.

Enable Excel-Based Basic Cybersecurity Features for End Users by Using Python-Excel Integration

Enable Excel-Based Basic Cybersecurity Features for End Users by Using Python-Excel Integration

Cybersecurity enabled electric vehicle charging and battery management system

Electric vehicles (EVs), which are become easier to get, are displacing conventional gasoline-powered cars. Because of this, there is a great demand for electric vehicle charging systems (EVCS), which has led to a major expansion of the public and private EVCS infrastructure. The threats related to cybersecurity have significantly increased as a result of the EVCS’s growing network. In this light, this article offers an examination of the cybersecurity threats associated with the network of EVCS. First, recent trends in EV adoption, charging use cases, and the most recent advancements in the EVCS network give context for the research subject. Second, while describing cybersecurity features of EVCS, possible cyberattack scenarios as well as vulnerabilities centered on infrastructure and protocols have been taken into account. Thirdly, risks in EVCS have been confirmed through real-time data-centric analysis of EVs.

Smart railways: the design and construction of an autonomous inspection and maintenance vehicle

The Railway Inspection and Maintenance Vehicle (RIMV) is a state-of-the-art autonomous ground robot for the railway environment. The robot has specialised hardware tailored for specific functionalities, ensuring optimal performance in its designated tasks. It incorporates a GPS, IMU, and encoder for robust localisation, and it integrates a LiDAR system and a depth camera for collision avoidance. Prioritising safety, the RIMV features an IP camera for real-time environmental monitoring and is equipped with emergency stop mechanisms. An Ubuntu Linux machine manages the robot’s data processing, complemented by a 5G Wi-Fi router for remote monitoring and operation when necessary. ROS2 is the primary platform for robot operations, standing out for its open-source solution and enhanced cybersecurity features. We validated the RIMV in a heritage railway setting with an ultrasonic inspection kit to detect rail-track defects. Beyond this specific application, the RIMV is versatile and designed to serve as a platform for other autonomous inspection and maintenance tasks within the railway sector. Its adaptability highlights its potential to enhance efficiency and safety in railway maintenance, offering invaluable assistance to human operators across varied scenarios.

Conceptualising securitisation in the field of cyber security policy

ObjectivesThis article will attempt to analyse securitisation theory to explore the discursive features of cyber security, using a multi-actor approach that considers the role of state and non-state actors in the creation and management of cyber security discourses.Material and methodsThe paper aims to assess the contribution of securitization theory to the understanding of both traditional and contemporary security policy issues. More specifically, it is an attempt to reflect on the identification of the challenges facing the modern state.ResultsGrowing dependence on digital technology is inevitable, making the future more threatening than the present. Cyber technology is inherently vulnerable and thus impossible to fully secure. The call for "greater security" becomes justified because the more a country depends on cyber technology, the more inevitable cyber threats become. They are consistently treated by government circles as a security challenge, meaning that the problem is presented as an existential threat, requiring emergency measures and justifying action beyond the normal bounds of political procedure.ConclusionsAs some conclusion and conclusion, it is worth reiterating observations about the multi-stakeholder nature of cyber security and observations about the co-creation of this security by a wide range of actors representing different and in some cases conflicting interests. It can be argued that there is no single discourse on cyber security or cyber threats, and it is simplistic to assume that there is even a single discourse that represents every securitization actor, be it government or the private sector. This diversity explains why the assumption and logic of securitization theory can only apply to some, but not all, cyber security discourses.

Analysis of cybersecurity features in banking mobile applications

This article discusses important aspects of cybersecurity in mobile banking applications. The article analyses in detail potential threats and effective strategies for their prevention and counteraction. Due to the rapid development of digital technologies in the banking industry, mobile applications and online services have become a necessary component of financial interaction between customers, providing convenient and efficient financial transactions. However, the development of the functionality of such applications gives rise to new cybersecurity challenges that information security professionals are actively addressing. The article is devoted to a comprehensive review of international and Ukrainian cybersecurity standards in the banking sector, and also contains quick review of mobile applications of well-known Ukrainian banks. Based on this review basic recommendations for improving cybersecurity in such applications are formulated. The article considers the impact of customer comfort on the level of security. In addition, the article considers the impact of the level of security in the banking sector on the overall digitalisation of the financial industry. It is noted that improving the level of security can stimulate and support digitalisation processes, ensuring customer trust and optimal use of mobile banking applications. A comprehensive approach to assessing the level of security, comparing various applications and standards (both Ukrainian and international), as well as considering the relationship between security issues and innovations in banking, make this work useful for understanding the genesis of cyber security in mobile banking.

Eco-friendly microgrid carport charging station for electric vehicles (EVs)

Utilizing renewable energy sources is a crucial and promising way to reduce CO2 emissions and global warming. The use of electric vehicles (EVs) in transportation has signaled a paradigm change from earlier technologies that relied on fossil fuels. This paper provides a techno-economic feasibility study of an optimal energy layout configuration for an EV charging station carport infrastructure. The geographical and meteorological data of the location for the EV charging station carport infrastructure is obtained from NASA through HOMER software. Two different locations are considered as case 1 and case 2. Solar PV/Battery/WT/Converter is the optimum energy arrangement in terms of optimization for case 1, where the net present value of the optimised energy flow is $ 212,096, and the cost of energy (COE) is $ 0.450 per kWh. The best energy configuration in case 2 is solar PV/Battery/Converter, with a COE of $ 0.476 per kWh and a net present value of $ 224,524. The optimal HRES design results in 100% renewable generation, as compared to the study's grid connection scenario, which emits 632 g/kWh of CO2, 2.74 g/kWh of sulfur dioxide, and 1.34 g/kWh of nitrogen oxide into the environment. This study presents the individual degradation cost of the hybrid system components and battery state of charge (SoC), as well as a quick overview of the cyber-security features in EVs. An optimal hybrid microgrid offers both social and environmental benefits to EV owners.

Digital exchange attributes and the risk of closure

Presently, there are over 500 cryptocurrency exchanges worldwide and more than 19,700 different cryptocurrencies. Despite the fact that cryptocurrency trading is possible via private peer-to-peer transactions, more than 90% of trading occurs on organised exchanges, which provide convenience and liquidity. However, centralised cryptocurrency exchanges are regarded as high-value targets by criminals and are often victims of cyberattacks. In this paper, we investigate the risk of cryptocurrency exchange closures and develop predictive models to forecast which markets will close down and which ones will remain active using publicly available data. Our models perform well and reach a high level of classification accuracy. Exchange trading volume, the availability of public information on exchange staff, exchange lifetime, and several cybersecurity features are identified as key attributes in predicting exchange closures. Nevertheless, our models do not account for all sources of risk, e.g., potential fraud and mismanagement of client funds committed by the exchanges themselves, and market participants are encouraged to carefully consider where and how they store their digital assets.

Design of a Novel Information System for Semi-automated Management of Cybersecurity in Industrial Control Systems

There is an urgent need in many critical infrastructure sectors, including the energy sector, for attaining detailed insights into cybersecurity features and compliance with cybersecurity requirements related to their Operational Technology (OT) deployments. Frequent feature changes of OT devices interfere with this need, posing a great risk to customers. One effective way to address this challenge is via a semi-automated cyber-physical security assurance approach, which enables verification and validation of the OT device cybersecurity claims against actual capabilities, both pre- and post-deployment. To realize this approach, this article presents new methodology and algorithms to automatically identify cybersecurity-related claims expressed in natural language form in ICS device documents. We developed an identification process that employs natural language processing (NLP) techniques with the goal of semi-automated vetting of detected claims against their device implementation. We also present our novel NLP components for verifying feature claims against relevant cybersecurity requirements. The verification pipeline includes components such as automated vendor identification, device document curation, feature claim identification utilizing sentiment analysis for conflict resolution, and reporting of features that are claimed to be supported or indicated as unsupported. Our novel matching engine represents the first automated information system available in the cybersecurity domain that directly aids the generation of ICS compliance reports.

Automated Cybersecurity Tester for IEC61850-Based Digital Substations

Power substations are the crucial nodes of an interconnected grid, serving as the points where power is transferred from the transmission/distribution grids to the loads. However, interconnected cyberphysical systems and communication-based operations at substations lead to many cybersecurity vulnerabilities. Therefore, more sophisticated cybersecurity vulnerability analyses and threat modeling are required during productization phases, and system hardening is mandatory for the commercialization of products. This paper shows the design and methods to test the cybersecurity of multicast messages for digital substations. The proposed vulnerability assessment methods are based on the semantics of IEC61850 Generic Object Oriented Substation Event (GOOSE) and Sampled Value (SV), and cybersecurity features from IEC62351-6. Different case scenarios for cyberattacks are considered to check the vulnerabilities of the device under test (DUT) based on the IEC62351-6 standard. In order to discover security vulnerabilities in a digital substation, the proposed cybersecurity tester will generate malicious packets that compromise the regular functionality. The results show that the proposed cybersecurity testing module is able to detect potential vulnerabilities in multicast messages and the authentication methods (e.g., message authentication code) of multicast communications. Both commercial and simulated devices are used for the case studies.

Survey on Blockchain Technology

The digital world has brought efficiencies, innovative new products and strong relationships with customers worldwide through the effective use of mobile devices, IoT (Internet of Things), social media, analytics, and cloud technologies to generate models for better decisions. Blockchain was recently introduced and revolutionized the digital world by bringing a new perspective on the security, resilience, and efficiency of systems. Although originally popularized by bitcoin, blockchain is much more than oneBase for cryptocurrency. It provides a secure way to share any kind of good, service or transaction. In addition, blockchain offers lower business costs with a trusted contract that is monitored without third-party intervention, which may not add direct value. It enables smart contracts, commitments and agreements with strong, inherent cyber security features. This paper contains a complete description of blockchain technology..

Security in Digital Aeronautical Communications A Comprehensive Gap Analysis

Aeronautical communications still heavily depend on analog radio systems, despite the fact that digital communication has been introduced to aviation in the 1990’s. Since then, the digitization of civil aviation has been continued, as considerable pressure to rationalize the aeronautical spectrum has built up. In any modern digital communications system, the threat of digital attacks needs to be considered carefully. This is especially true for safety-critical infrastructure, which aviation’s operational communication services clearly are. In this article, we reverse the traditional approach in the aeronautical industry of looking at a system from the safety perspective and assume a security-oriented point of view. We use the lens of security properties to review the requirements and specifications of aeronautical communications infrastructure as of 2021 and observe that most standards lack cybersecurity as a key requirement. Furthermore, we review the academic literature to identify possible solutions for the lack of cybersecurity measures in aeronautical communications system. We observe that most systems have been thoroughly analyzed within the academic security community, some for decades even, with many papers proposing concrete solutions to missing cybersecurity features. We conclude that there is a systematic problem in the design process of aeronautical communication systems. We provide a list of eight key findings and recommendations to improve the process of specifying such systems in a secure manner.

Cyber Security Issues and Challenges - A Review

Cyber security has become essential for information security. Keeping the information safe is one of the major challenges nowadays. Given the unrestricted number of free websites, the Internet has undeniably opened a new way of exploitation known as cybercrime. Governments and private sectors are taking many measures in order to control these cybercrimes. Handling cyber security is still a very huge concern. This research paper focuses on the various problems in cyber security during the current scenario .It also bring on focus on emerging technologies in the field of cyber security , ethics and the trends changing the features of cyber security.

Integrated Hydraulics-Modeling Platform Automates Managed-Pressure Drilling

This article, written by JPT Technology Editor Chris Carpenter, contains highlights of paper IPTC 19671, “Integrated Hydraulics Modeling for Managed-Pressure Drilling,” by Sayamik A. Rostami, Jose Brana, and Thomas Koithan, SPE, Weatherford. The paper has not been peer reviewed. Copyright 2021 International Petroleum Technology Conference. Reproduced by permission. Technologies aimed at better performance and lower cost are more important to the oil and gas industry than ever. This emphasis drives hardware manufacturers to innovate quickly and create devices with more capabilities so that what was impossible a few short years ago is reality today. In the complete paper, the authors describe a platform that integrates advanced data analytics and hydraulic modeling in real time, coupled with cybersecurity features applied through an open-platform communications unified-architecture protocol directed at automation controllers for managed-pressure-drilling (MPD) applications. MPD Control System An intelligent MPD system automatically controls all the components of an MPD system, including a rotating control device, annular isolation device, flow spool, buffer manifold, choke manifold, and pressure-relief valves. Aside from communicating with and controlling this equipment, such a system is able to communicate with the overarching rig-control system. The system uses the control capabilities of a centralized programmable automation controller with an integrated human/machine-interface screen. Another advantage of the intelligent MPD system is the built-in functionality to track the performance of the system in terms of performance and health through component monitoring to enable condition-based maintenance (CBM).

6G Networks: Is This an Evolution or a Revolution? [From the Guest Editors

The lessons learned from the third industrial revolution taught us that the transformation from mechanical and analog technology to digital electronics have changed the world once and forever. While computers and communication networks have become the new oil that defines the wealth of countries, research and industrial communities have been the driving forces that have made this transition possible. In the future, the same communities and stakeholders are required to enable the transition to net-zero communication networks. With reference to mobile communications, 5G is an evolution from all previous networks with the adoption of new radio access technologies, multisliced architecture, cloud-native and automation, and so on. By definition, 5G is a network that adapts to user needs and dynamic changes in traffic, designed to serve a new class of users: “machines.” Therefore, latency has become a critical metric in 5G. Looking forward, 6G shall employ cell-less access networks, integrated nonterrestrial networks, joint sensing and communications, new spectrums such as terahertz (THz) communications, switching from traditional channel-based design paradigms to designing channels through novel technologies such as intelligent reconfigurable surfaces, open interfaces that interconnect all network functions, end-to-end orchestrators, and, most noticeably, artificial intelligence (AI) machines that govern all functional modules and operational services. The various network functions generate traces of various operations that are ingested into databases; then AI will leverage this data for optimized decisions that are reflected into network status transitions, resource utilization, service enhancement, and ultimately lead to self-synthesizing networks. Built upon commercial clouds, 6G will have the flexibility to scale and restructure for more resilient response to traffic fluctuations and user requirements. To this end, cybersecurity features will become an embedded part of network functions to shield the network services not only from external threats but also from hosting domains. From an air interface perspective, 6G will integrate nonterrestrial (space, air, drone, and ocean) communications technologies to connect and route new users such as drones and coastal trading vessels. Furthermore, future wireless networks need to make use of a spectrum that extends into the optical spectrum and includes the THz range. The channel becomes a critical component due to the impact of blockages and random orientations at these frequencies. Active and passive intelligent reflecting surfaces (IRSs) will become a new wireless system element that will help overcome new challenges related to coverage and the propagation channel.

Enabling cybersecurity features using a layered connectivity to promote secure remote operation and maintenance

The cyber attacks which resulted in power outages in Ukraine in 2015 and 2016 generated a great awareness regarding the requirement for cyber secure operations. Securing the connection by employing virtual private networks (VPN) creates a layer of security around legacy systems but operating only at the network level is not sufficient to achieve a defence in depth with the required level of security expected of energy providers. Since it is common to find old software running on outdated operating systems that no longer can have its vulnerabilities patched, the security analogous to internal network provided by VPN is not sufficient to protect legacy devices with known vulnerabilities. In order to work around those issues while maintaining compatibility with legacy systems, it is possible to add layers of security virtualising the computer running the configuration tools and HMI. The virtualised machine can have all its external connections secured by the host computer and can be backed-up and restored into a different host if necessary. This paper investigates managing the access to the configuration computer on the host computer which can be interfaced with common access control strategies used by IT/OT networks with LDAP or RADIUS technologies.

A Shared Two-way Cybersecurity Model for Enhancing Cloud Service Sharing for Distributed User Applications

Cloud services provide decentralized and pervasive access for resources to reduce the complex infrastructure requirements of the user. In decentralized service access, the implication of security is tedious to match the user requirements. Therefore, cloud services incorporate cybersecurity measures for administering standard resource access to users. In this paper, a shared two-way security model (STSM) is proposed to provide adaptable service security for the end-users. In this security model, a cooperative closed access session for information sharing between the cloud and end-user is designed with the help of cybersecurity features. This closed access provides less complex authentication for users and data that is capable of matching the verifications of the cloud services. A deep belief learning algorithm is used to differentiate the cooperative and non-cooperative secure sessions between the users and the cloud to ensure closed access throughout the data sharing time. The output of the belief network decides the actual session time between the user and the cloud, improving the span of the sharing session. Besides, the proposed model reduces false alarm, communication failures, under controlled complexity.

Application of Feature Extraction Methods for Chemical Risk Classification in the Pharmaceutical Industry

The features that are used in the classification process are acquired from sensor data on the production site (associated with toxic, physicochemical properties) and also a dataset associated with cybersecurity that may affect the above-mentioned risk. These are large datasets, so it is important to reduce them. The author’s motivation was to develop a method of assessing the dimensionality of features based on correlation measures and the discriminant power of features allowing for a more accurate reduction of their dimensions compared to the classical Kaiser criterion and assessment of scree plot. The method proved to be promising. The results obtained in the experiments demonstrate that the quality of classification after extraction is better than using classical criteria for estimating the number of components and features. Experiments were carried out for various extraction methods, demonstrating that the rotation of factors according to centroids of a class in this classification task gives the best risk assessment of chemical threats. The classification quality increased by about 7% compared to a model where feature extraction was not used and resulted in an improvement of 4% compared to the classical PCA method with the Kaiser criterion, with an evaluation of the scree plot. Furthermore, it has been shown that there is a certain subspace of cybersecurity features, which complemented with the features of the concentration of volatile substances, affects the risk assessment of chemical hazards. The identified cybersecurity factors are the number of packets lost, incorrect Logins, incorrect sensor responses, increased email spam, and excessive traffic in the computer network. To visualize the speed of classification in real-time, simulations were carried out for various systems used in Industry 4.0.