Enforcement Point Research Articles

Non-Deterministic and Risk Based Security Services

This paper presents a comprehensive framework to address these challenges. Understanding various social engineering tactics is crucial for effective prevention and detection. Trust based models in entities enable many business objectives that may include speed to market, scalability, decentralization etc However, they also increase the attack surface due to "loose boundaries" between enforcement points or corresponding resource authorization servers and the service orchestration layer. The control points of enforcement are generally static across a spectrum of threat vectors such as Identity, Fraud, Authentication, Authorization, Cyber security and physical security etc. in this paper we propose a "Trust based security framework aka " Interdiction Services" that fundamentally is non-deterministic and risk based. This paper presents a converged security framework towards a comprehensive prevention and detection controls mechanism. The paper proposes a converged security framework that allows various parties from fraud, cyber, and physical security to collaborate but operate independently through a common framework of Interdiction Services.

Explaining Asylum Law Using Qualitative Comparative Analysis

This article demonstrates how Qualitative Comparative Analysis (QCA) can be applied to the study of case law, with an emphasis on the granular analysis of jurisprudence. This article’s empirical focus is a study of asylum decisions issued by the US Circuit Courts. Prior research, using statistical methods, has observed disparities in asylum case outcomes that are partly explained by sociopolitical factors such as the partisan affiliation, gender, and home-state politics of the judiciary. This article uses QCA to revisit these findings; incorporating an analysis of jurisprudential criteria alongside the sociopolitical factors that have been identified by prior studies. All of the Circuit Court decisions for the cases included in the QCA analysis were issued during the first year of the Trump presidency; a time at which asylum-seekers at the US–Mexico border were becoming a focal point both for immigration enforcement and a polarized national debate over immigration policy. Despite the charged political context for these decisions, the QCA findings show that the two most decisive factors for Circuit Court decision-making on these cases were their rulings on nexus and patterns of decision-making that were specific to each court. The closing discussion cautions the reader against generalizing these findings to all appellate-level asylum decisions out of consideration for the epistemological orientation of QCA. Hence, the findings from this study should not be taken as conclusive evidence that sociopolitical factors are of little causal value for research on the appellate courts. Nevertheless, the findings do indicate that more attention should be paid to the explanatory power of jurisprudence. The concluding discussion also highlights the potential that QCA holds for building out a logic-based theory of legal decision making that can account for jurisprudence in tandem with sociopolitical factors and localized cultures of decision-making that help to explain disparate applications of the law.

Does Digital Status Unlawfully Penalise EU Citizens Accessing the UK's Private Rented Sector?

In the past few years, more than six million EU citizens living in the UK have transitioned to a new immigration status. The only evidence they have of this new status is in digital form. This group is now navigating the UK's ‘compliant environment,’ designed to deter unauthorised migration, with this new form of status. This has created an unpredictable new dynamic with serious risks of discrimination in everyday interactions, such as when people are trying to rent a property. In this article, we explore the impact of this digital‐only status by drawing on a large‐scale discrete choice experiment with private rented sector landlords, which shows that people with digital‐only immigration status are substantially penalised on the private rental market due to the form of their ID. We argue that this discrimination is not only troubling in substance but also arguably amounts to a breach of non‐discrimination and equal treatment provisions under the Withdrawal Agreement (Article 12 and Article 23 respectively). The apparent lack of effective enforcement points to the potential limits of such protections after Brexit.

Differentially Private Ad Conversion Measurement

In this work, we study ad conversion measurement, a central functionality in digital advertising, where an advertiser seeks to estimate advertiser website (or mobile app) conversions attributed to ad impressions that users have interacted with on various publisher websites (or mobile apps). Using differential privacy (DP), a notion that has gained in popularity due to its strong mathematical guarantees, we develop a formal framework for private ad conversion measurement. In particular, we define the notion of an operationally valid configuration of the attribution rule, DP adjacency relation, contribution bounding scope and enforcement point. We then provide, for the set of configurations that most commonly arises in practice, a complete characterization, which uncovers a delicate interplay between attribution and privacy.

Obustava ovrhe zbog ovrhovoditeljevog nepoduzimanja radnji u postupku

At the end of 2020, the amended provision of Art. 72 of the Croatian Enforcement act entered into force, paragraph 3 of which now provides that enforcement shall be terminated ex officio if the party seeking enforcement did not perform a single legal action in the proceedings within one year. After the introduction which reflects on general and special reasons for termination of enforcement in general, the authors analyze the subject provision de lege lata. They point out the positive and negative effects of that provision, linking them with the original intent that the legislator had upon its enactment. In that part of the paper, the authors compare the subject provision with the provision of Art. 72 para 2 of the Enforcement act and point out its (in)existence in the legal orders of other European countries. Special attention in the analysis is given to the character i.e. to the content of the legal action that the party seeking enforcement has to undertake within a year in order to avoid termination of enforcement by application of the subject provision. The authors also point out the modalities in which domestic courts interpret the subject provision and it is also analyzed from the viewpoint of the right of access to a court. Finally, the authors warn about the problems that may appear because of egregious formalistic interpretation of the subject provision and they discuss de lege ferenda suggestions to limit its application exclusively to proceedings for enforcement of monetary claims.

Ways to improve administrative and legal ensuring the activities of law enforcement agencies of Ukraine

It is emphasized that domestic law enforcement agencies occupy a central place in the implementation of law enforcement activities. With the aim of researching the legal perspective ways of improving the administrative and legal support of the activities of law enforcement agencies, the author carried out an analysis of law enforcement activities, including the violation by law enforcement agencies and their officials of the rights and freedoms of people and citizens, the norms of current domestic and international legislation, as well as various circles scientists who in their writings explored the prospects for improving the activities of law enforcement agencies of Ukraine. It is emphasized that as a result of the military aggression of the Russian Federation against Ukraine, the introduction of the martial law regime and the associated socio-economic crisis, the unequal approach to the regulatory and legal regulation of the status and the organizational and legal support of the activities of law enforcement agencies, along with other factors, have a negative impact on protection of the rights and freedoms of citizens, the fight against crime and the security of the state, which in turn puts forward demands for ways to improve the activity of law enforcement agencies of Ukraine under the introduction of the martial law regime. Attention is drawn to the fact that many domestic jurists have researched the problematic issues of law enforcement agencies. The works of individual legal scientists who studied the activities of domestic and foreign law enforcement agencies and who proposed various ways to improve the activities of domestic law enforcement agencies are briefly presented. Based on the analysis of scientific works, it was established that the majority of scientists are concerned about the current state of law enforcement agencies and point to the need to build a model of a law enforcement agency system that would be able to ensure the rights and freedoms of people and citizens guaranteed by the Constitution and laws of Ukraine. It was concluded that the considered issues lead to the formation of an effective legal mechanism for improving the administrative and legal support of the activities of law enforcement agencies of Ukraine, and specific proposals for improving their activities are offered.

Paradigma Positivisme Hukum John Austin Di Era Posmodernisme

The purpose of this research is to find out how the legal positivism paradigm of John Austin in the era of postmodernism and explain the relevance of legal positivism in law enforcement in Indonesia. This research uses method of philosophy of law. The results are that John Austin's legal positivism paradigm in the era of postmodernism is increasingly losing its way because it is exclusive. The legal positivism paradigm cannot be a guidance in law because the shortcomings of the legal positivism paradigm include the legal positivism paradigm constructed by Austin that is unable to accommodate important aspects outside the specified elements such as ethical, moral, and religious elements. Although, the paradigm of legal positivism in Indonesia has become the main point of law enforcement because of the continental European legal tradition. However, in practice the legal positivism paradigm is not compatible with the existing legal patterns in Indonesia because: (1) Indonesian society is heterogeneous; (2) Social, political, and economic developments are transforming so rapidly that the law is lagging behind; and (3) Indonesian people are religious but have no absolute ideology of religion.

Endpoint security reinforcement via integrated zero-trust systems: A collaborative approach

In the rapidly evolving field of information technology, network security, especially enterprise endpoint security, has emerged as a major challenge. This paper presents a comprehensive and interactive method for network access and user authentication utilizing a zero-trust framework. This method integrates key elements, including the Network Access (NA) Agent, Identity and Access Management (IAM) Agent, Policy Enforcement Point (PEP) Agent, and Situational Awareness (SA) Agent, to mitigate security risks associated with critical business information exposure and unauthorized network access. Leveraging a zero-trust approach, the method dynamically controls user permissions, thereby enhancing endpoint security. It also introduces an efficient solution that coexists with legacy infrastructures, balancing security necessities with user accessibility, and offering a unified solution for both internal corporate networks and the Internet. We present a thorough analysis of potential risks associated with this method and propose preventative measures to minimize these threats. We conclude that our method provides a more secure and efficient approach to enterprise network security compared to traditional static rule-based systems, offering a promising direction for future research and implementation.

Instantiation and Implementation of HEAD Metamodel in an Industrial Environment: Non-IoT and IoT Case Studies

Access to resources can take many forms: digital access via an onsite network, through an external site, website, etc., or physical access to labs, machines, information repositories, etc. Whether access to resources is digital or physical, it must be allowed, denied, revoked, or disabled using robust and coherent access control (AC) models. What makes the process of AC more complicated is the emergence of digital transformation technologies and pervasive systems such as the internet of things (IoT) and industry 4.0 systems, especially with the growing demand for transparency in users’ interaction with various applications and services. Controlling access and ensuring security and cybersecurity in IoT and industry 4.0 environments is a challenging task. This is due to the increasing distribution of resources and the massive presence of cyber-threats and cyber-attacks. To ensure the security and privacy of users in industry sectors, we need an advanced AC metamodel that defines all the required components and attributes to derive various instances of AC models and follow the new and increasing demand for AC requirements due to continuous technology upgrades. Due to the several limitations in the existing metamodels and their inability to answer the current AC requirements, we have developed a Hierarchical, Extensible, Advanced, Dynamic (HEAD) AC metamodel with significant features that overcome the existing metamodels’ limitations. In this paper, the HEAD metamodel is employed to specify the needed AC policies for two case studies inspired by the computing environment of Institut Technologique de Maintenance Industrielle (ITMI)-Sept-Îles, QC, Canada; the first is for ITMI’s local (non-IoT) environment and the second for ITMI’s IoT environment. For each case study, the required AC model is derived using the domain-specific language (DSL) of HEAD metamodel, then Xtend notation (an expressive dialect of Java) is utilized to generate the needed Java code which represents the concrete instance of the derived AC model. At the system level, to get the needed AC rules, Cypher statements are generated and then injected into the Neo4j database to represent the Next Generation Access Control (NGAC) policy as a graph. NGAC framework is used as an enforcement point for the rules generated by each case study. The results show that the HEAD metamodel can be adapted and integrated into various local and distributed environments. It can serve as a unified framework, answer current AC requirements and follow policy upgrades. To demonstrate that the HEAD metamodel can be implemented on other platforms, we implement an administrator panel using VB.NET and SQL.

Authorization Recycling in Attribute-Based Access Control

In most access control scenarios, the communication between the PDP (policy decision point) and the PEP (policy enforcement point) can cause high authorization overhead. Authorization recycling enables PEP to use the previous access control decisions fetched from the PDP to handle some upcoming access control requests, reduce authorization costs, and increase the efficiency of access control decision-making. Inspired by the RBAC (role-based access control) authorization recycling mechanism, this article first presents an ABAC (attribute-based access control) model based on Boolean expressions of subject and object attributes. It then proposes an authorization recycling approach for this model. In this approach, we provide construction and update methods for authorization data caches and access control decision-making rules for SDP (secondary decision point) by using the caches. The proposed approach can deduce precise and approximate access control decisions from the cache of authorization data, reducing communication between the PEP and the PDP. Finally, the feasibility of the proposed method is verified by conducting a small-scale test. ABAC, SDP, authorization recycling, and authorization caching.

Patterns of risk-Using machine learning and structural neuroimaging to identify pedophilic offenders.

Child sexual abuse (CSA) has become a focal point for lawmakers, law enforcement, and mental health professionals. With high prevalence rates around the world and far-reaching, often chronic, individual, and societal implications, CSA and its leading risk factor, pedophilia, have been well investigated. This has led to a wide range of clinical tools and actuarial instruments for diagnosis and risk assessment regarding CSA. However, the neurobiological underpinnings of pedosexual behavior, specifically regarding hands-on pedophilic offenders (PO), remain elusive. Such biomarkers for PO individuals could potentially improve the early detection of high-risk PO individuals and enhance efforts to prevent future CSA. To use machine learning and MRI data to identify PO individuals. From a single-center male cohort of 14 PO individuals and 15 matched healthy control (HC) individuals, we acquired diffusion tensor imaging data (anisotropy, diffusivity, and fiber tracking) in literature-based regions of interest (prefrontal cortex, anterior cingulate cortex, amygdala, and corpus callosum). We trained a linear support vector machine to discriminate between PO and HC individuals using these WM microstructure data. Post hoc, we investigated the PO model decision scores with respect to sociodemographic (age, education, and IQ) and forensic characteristics (psychopathy, sexual deviance, and future risk of sexual violence) in the PO subpopulation. We assessed model specificity in an external cohort of 53 HC individuals. The classifier discriminated PO from HC individuals with a balanced accuracy of 75.5% (sensitivity = 64.3%, specificity = 86.7%, P 5000 = 0.018) and an out-of-sample specificity to correctly identify HC individuals of 94.3%. The predictive brain pattern contained bilateral fractional anisotropy in the anterior cingulate cortex, diffusivity in the left amygdala, and structural prefrontal cortex-amygdala connectivity in both hemispheres. This brain pattern was associated with the number of previous child victims, the current stance on sexuality, and the professionally assessed risk of future sexual violent reoffending. Aberrant white matter microstructure in the prefronto-temporo-limbic circuit could be a potential neurobiological correlate for PO individuals at high-risk of reoffending with CSA. Although preliminary and exploratory at this point, our findings highlight the general potential of MRI-based biomarkers and particularly WM microstructure patterns for future CSA risk assessment and preventive efforts.

XACML for Mobility (XACML4M)-An Access Control Framework for Connected Vehicles.

The automotive industry is experiencing a transformation with the rapid integration of software-based systems inside vehicles, which are complex systems with multiple sensors. The use of vehicle sensor data has enabled vehicles to communicate with other entities in the connected vehicle ecosystem, such as the cloud, road infrastructure, other vehicles, pedestrians, and smart grids, using either cellular or wireless networks. This vehicle data are distributed, private, and vulnerable, which can compromise the safety and security of vehicles and their passengers. It is therefore necessary to design an access control mechanism around the vehicle data's unique attributes and distributed nature. Since connected vehicles operate in a highly dynamic environment, it is important to consider context information such as location, time, and frequency when designing a fine-grained access control mechanism. This leads to our research question: How can Attribute-Based Access Control (ABAC) fulfill connected vehicle requirements of Signal Access Control (SAC), Time-Based Access Control (TBAC), Location-Based Access Control (LBAC), and Frequency-Based Access Control (FBAC)? To address the issue, we propose a data flow model based on Attribute-Based Access Control (ABAC) called eXtensible Access Control Markup Language for Mobility (XACML4M). XACML4M adds additional components to the standard eXtensible Access Control Markup Language (XACML) to satisfy the identified requirements of SAC, TBAC, LBAC, and FBAC in connected vehicles. Specifically, these are: Vehicle Data Environment (VDE) integrated with Policy Enforcement Point (PEP), Time Extensions, GeoLocation Provider, Polling Frequency Provider, and Access Log Service. We implement a prototype based on these four requirements on a Raspberry Pi 4 and present a proof-of-concept for a real-world use case. We then perform a functional evaluation based on the authorization policies to validate the XACML4M data flow model. Finally, we conclude that our proposed XACML4M data flow model can fulfill all four of our identified requirements for connected vehicles.

SysFlow: Toward a Programmable Zero Trust Framework for System Security

Zero Trust, as an emerging trend of cybersecurity paradigms in modern infrastructure (e.g., enterprise, cloud, edge, IoT, and 5G), is moving security defenses from static and perimeter-based control systems to focus on users and resources with no assumption of implicit trust. However, the current Zero Trust Architecture (ZTA) mainly focuses on the network security and lacks in-depth considerations on system-level security policies and abstractions, which leaves the realization of the principle incomplete. To bridge the gap, we propose an innovative <italic xmlns:mml="http://www.w3.org/1998/Math/MathML" xmlns:xlink="http://www.w3.org/1999/xlink">programmable</i> system security framework called SYSFLOW to enable unified, dynamic, and fine-grained Zero Trust security control for system resources. SYSFLOW introduces a novel <italic xmlns:mml="http://www.w3.org/1998/Math/MathML" xmlns:xlink="http://www.w3.org/1999/xlink">system flow</i> abstraction to model <italic xmlns:mml="http://www.w3.org/1998/Math/MathML" xmlns:xlink="http://www.w3.org/1999/xlink">system activities</i> across the entire infrastructure, and provides a system-level data plane and control plane separation and abstraction. The new logically centralized controller accommodates a unified <italic xmlns:mml="http://www.w3.org/1998/Math/MathML" xmlns:xlink="http://www.w3.org/1999/xlink">programmable</i> Policy Decision Point (PDP) that acquires a holistic view of system behaviors for controlling system resource accesses by translated programmable security policies into system flow rules. The SYSFLOW data plane, acting as Policy Enforcement Point (PEP), enforces translated system flow rules, which can be updated dynamically and facilitate fine-grained responsive actions. Our extensive evaluations demonstrate the effectiveness and scalability of SYSFLOW, which addresses the security issues in various scenarios with a minor performance overhead.

RSM analysis based cloud access security broker: a systematic literature review.

A Cloud Access Security Broker (CASB) is a security enforcement point or cloud-based software that is placed between cloud service users and cloud applications of cloud computing (CC) which is used to run the dimensionality, heterogeneity, and ambiguity correlated with cloud services. They permit the organization to amplify the reach of their security approaches past their claim framework to third-party computer programs and storage. In contrast to other systematic literature reviews (SLR), this one is directed at the client setting. To identify and evaluate methods to understand CASB, the SLR discusses the literature, citing a comprehension of the state-of-the-art and innovative characterization to describe. An SLR was performed to compile CASB related experiments and analyze how CASBs are designed and formed. These studies are then analyzed from different contexts, like motivation, usefulness, building approach, and decision method. The SLR has discussed the contrasts present between the studies and implementations, with planning accomplishments conducted with combinations of market-based courses of action, simulation tools, middleware’s, etc. Search words with the keywords, which were extracted from the Research Questions (RQs), were utilized to recognize the essential consideration from the journal papers, conference papers, workshops, and symposiums. This SLR has distinguished 20 particular studies distributed from 2011 to 2021. Chosen studies were evaluated concurring to the defined RQs for their eminence and scope to particular CASB in this way recognizing a few gaps within the literature. Unlike other studies, this one concentrates on the customer's viewpoint. The survey uses a systematic analysis of the literature to discover and classify techniques for realizing CASB, resulting in a comprehensive grasp of the state-of-the-art and a novel taxonomy to describe CASBs. To assemble studies relating to CASB and investigate how CASB are engineered, a systematic literature review was done. These investigations are then evaluated from a variety of angles, including motivation, functionality, engineering approach, and methodology. Engineering efforts were directed at a combination of “market-based solutions”, “middlewares”, “toolkits”, “algorithms”, “semantic frameworks”, and “conceptual frameworks”, according to the study, which noted disparities in the studies’ implementations. For further understanding, the different independent parameters influencing the CASB are studied using PCA (Principal Component Analysis). The outcome of their analysis was the identification of five parameters influencing the PCA analysis. The experimental results were used as input for Research Surface Methodology (RSM) to obtain an empirical model. For this, five-level coding was employed for developing the model and considered three dependent parameters and four center values. For more understanding of these independent variables' influence, on the CASB study, RSM analysis was employed. It was observed from the CCD (Central Composite Design) model that the actual values show significant influence with R2 = 0.90. This wide investigation reveals that CASB is still in a formative state. Even though vital advancement has been carried out in this zone, obvious challenges stay to be tended to, which have been highlighted in this paper.

Mahalla Law Enforcement Point (The Lowest Stage of Public Security System)

In order to raise public safety to a qualitatively new level, completely new mechanisms for organizing the activities of law enforcement agencies are being introduced. In this regard, the article highlights the legal status of the mahalla law enforcement points established as the lowest steam of the public security system in the process of reforms carried out in the bodies of Internal Affairs on the basis of a systematic approach and analysis, their main tasks, the essence and content of the new procedures and measures implemented in the activities of them.

Research on Distributed Dynamic Trusted Access Control Based on Security Subsystem

The flow of data across nodes has become the dominant feature of data sharing in distributed environments with increasingly blurred boundaries, where it is crucial to maintain data access dynamic, trusted, and efficient. However, traditional centralized access control models are not only difficult to apply in distributed environments but also ignore trusted verification of authorized entities. What’s worse, existing access control models rarely consider themselves security, lack independence, at a high risk of being bypassed or tampered with. Thus, we propose in this paper a distributed, dynamic, and trusted access control model, DDTAC-BSS, where the standard Attribute-Based Access Control (ABAC) architecture is modified and extended. To reduce the attack surface, we separate policy enforcement point (PEP) from other core components, they are located in the node system and access control system, respectively. Then, the access control entry point (ACEP) is added as the only interface for the node system to interact with the access control system. Subsequently, the model introduces the entity trusted assessment mechanism to improve the trustworthiness of access control services. Driven by the dynamic attributes, our model can achieve dynamic trusted authorization and fine-grained access control. Moreover, we implement a lightweight, independent, and distributed security subsystem to achieve unified management of policies and decision-making autonomy by message-driven. By considering the independence of the security subsystem, a trusted operating environment is built based on Trusted Execution Environment (TEE) to ensure the security of the access control mechanism itself. The security of our model is proved rigorously based on the non-interference theory. Comprehensive experiments and comparisons have demonstrated the superior functionality, comparable performance, and strong security of our model.

A Reality Check of the Schrems Saga

From an enforcement point of view, the revocation of the European Commission’s two adequacy decisions on the federal US system of data protection raises many questions regarding the interrelations between the EU data protection regime and the Union’s legal frameworks for data ‘transfers’. Whereas data uploaded in the Union was once upon a time wired over the Atlantic to be downloaded in the US and vice versa, data packets are nowadays often exchanged over various radio spectra. As online resources around the world can be used to store data, and the data is made available and retrieved from domains rather than ‘exported’ and ‘imported’, the idea that the EU data protection regime would no longer apply when data is ‘transferred’ from the Union easily leads astray. In fact, the location of data or data processing equipment is irrelevant for the applicability of EU law as its territorial scope is determined by the location of the data subjects or undertakings concerned. Whereas the EU legislation applies with regard to legal entities overseas with affiliated undertakings in the Union, the Union seeks to guarantee the EU data subjects an adequate level of protection also in cases of onward transfers of data to non-affiliated organisations and unwarranted interceptions. Furthermore, the European Commission promotes a level of protection in non-EU Member States that is essentially equivalent to that enjoyed under the EU data protection regime since the authorities and courts may refrain from applying EU law pursuant to private international law. However, the Cases which resulted in the revocation of the two adequacy decisions concerned an Austrian citizen filing complaints against an undertaking established in Ireland and its US parent company. Hence, it must be called into question whether the EU data protection regime should at all have been substituted by the US system irrespective of whether it provided an adequate level of data protection. An argument could be made that the adequacy decisions applied beyond the substantive scope of EU law, but that brings questions to fore about the competence of the Union to adopt such decisions. In addition, the procedural system introduced in the first Case regarding Mr. Schrems is rather problematic as it requires national authorities and courts to assess the validity of adequacy decisions. Besides the distortion of the right for national courts to request preliminary rulings into an obligation to do so, most data subject are reluctant to get involved in disputes about the entire legal regime. In many instances, the data subject may rather rely on her or his procedural rights as a consumer. In this article, a systematic analysis of these aspects of the EU privacy safeguards is provided.

Multisided Platform Analysis and Competition Law Enforcement Practice in Brics Countries

Abstract As leading businesses organize themselves as two-sided platforms, developed economies competition authorities have adapted their practice. Younger jurisdictions also face the challenge to review and use new analytics. We explore the recent evolution of two-sided platform markets analysis in BRICS countries, focusing on a key point for competition policy enforcement: relevant market definition. The extensive review suggests that the countries have adopted the concepts and analytical practice for two-sided platform relevant market definition at different paces. Differences in competition policy institutional design might account for the heterogeneity. BRICS authorities with broader mandates, that handle larger number of cases, and with no separation between adjudication and investigation have lagged in the adoption of such tools and practices.

Betamax V. STC: Alleged Illegality, Public Policy and the Model Law

Public policy can be raised in the context of setting aside or enforcing an arbitral award, and there is within international commercial arbitration a general consensus that the public policy concept should be defined narrowly. There is one aspect of public policy in particular which highlights the tension between the finality of awards and the right of the forum state to uphold its public policy. That is the situation where, in the face of alleged illegality, the arbitral tribunal concludes the underlying contract is lawful and enforceable. The question then arises: should a national court be permitted to re-examine the tribunal’s findings in this regard at the point of setting aside or enforcement? Relying on authorities from Singapore and England, the Judicial Committee of the Privy Council in Betamax v State Trading Corporation – a case appealed from Mauritius and which concerned an alleged breach of public procurement rules – has held that the answer to that question should be no. The Privy Council’s decision will be an important addition to the Model Law jurisprudence on Articles 34(2)(b)(ii) and 36(1)(b)(ii), and one can expect it to be cited and discussed beyond the confines of Mauritius. international arbitration, domestic arbitration, remission, partial remission, suspension of proceedings, Article 34(4) of UNCITRAL Model Law, arbitral tribunal, judicial intervention, powers of arbitrators, modified award, Arbitration and Conciliation Act 1996, curability, International Arbitration Act, Singapore Arbitration Act, resumption, fresh evidence.

A new WAF architecture with machine learning for resource-efficient use

Web Application Firewalls penalizes everyone, including latency in all requests, whether they are malicious or not. Several studies have reported the benefits of using Machine Learning to extract new rules to detect malware and malicious web requests. However, comparing the metrics of the models with their use of computational resources remains to be accomplished. This work aims to show a distributed WAF architecture, using ML classifiers as one of its components. Instead of having an enforcement point that analyzes the complete HTTP protocol for violations in this architecture, we have a trained classifier to detect them. The first part of this work verifies the viability of using classifiers based on their metrics, such as accuracy and recall. We analyze two datasets and make comparisons about their use. The second part of this paper compares ML models’ prediction processing time and a rules-based engine’s processing time. The classifiers used in this paper had a processing time of about 18x less than a rule-based engine. We also show that a classifier can find errors in the classification of a dataset generated by a WAF based on rules. We present samples and experimental codes to show the difference in approaches.