Existing Security Systems Research Articles

통합 보안 시스템에서의 효율적인 보안 정책 관리 모델

본 논문에서는 기존의 단일 보안 시스템의 Firewall과 IPS 시스템의 문제점 분석을 통하여 통합보안 시스템 강화가 비용 대비 효율적임을 나타내었다. 문제점 분석 결과 Firewall과 IPS 의 처리 시간 지연과 효율성 부재를 나타냈다. 따라서 개별 Firewall과 IPS 시스템과 통합 시스템으로 성능 평가를 하였다. 평가 결과 기존 시스템 보다 제안한 통합보안시스템이 응답 처리 시간에서는 평균 5배 이상 성능을 나타났고, 초당 세션 처리에서도 5배 이상 그리고 CPU 처리 성능에서는 6배의 처리 속도가 우수함을 나타냈다. 또한 여러 보안 정책들을 수용하였고, 유해 트랙픽 처리에서도 높은 성능을 나타났다. 결론적으로 본 논문에서는 통합 보안 시스템이 개별 시스템 강화 보다 경제적 측면, 관리적 측면, 물리적 측면, 시간적 측면, 공간적 측면 등 여러 측면에서 효율적임을 강조하였다. This paper showed that the integrated system to fortify security was much more efficient than the respective system through the analysis of problems from Firewall and IPS system in the existing security systems. The results of problem analysis revealed that there were the delay of processing time and lack of efficiency in the existing security systems. Accordingly, their performance was evaluated by using the separated Firewall, IPS system, and the integrated system. The result of evaluation shows that the integrated security system this paper suggested is five times faster than the existing one in terms of processing speed of response. This paper demonstrated the excellence of the proposed security system is also more than fivefold in session handling per second and six times process speeding in the CPU processing performance. In addition, several security policies are applied, and it provided a fact that it gave an excellent performance when it comes to protecting from harmful traffic attacks. In conclusion, this paper emphasized that fortifying the integrated security system was more efficient than fortifying the existing one considering in various respects such as cost, management, time, space and so on.

A critical review on the existing security system in the preservative procedure

A critical review on the existing security system in the preservative procedure

Priority indexing model for evaluating and analysing organisations' information security systems

Information technology (IT) has come to play an important and vital role in any organisation. As a consequence, security has become an essential aspect of IT and the negative impacts of security threats will affect not only systems or individuals but also organisations and society. In this paper, a priority indexing model (PIM) was proposed to evaluate organisation's information security system and to calculate a development priority index that can be used as an indicator for development needs. To examine the validity of the proposed model, the information security system in Ministry of Education (MOE) in the State of Kuwait was evaluated to determine the overall development priority indexes. The results showed that the proposed model can assist decision makers to consider different criteria and indicators before committing to a particular choice of security system development or to evaluate any existing security system. Finally, the general development priority index derived in this work can be used as a reference for information security planning and management process improvements.

Specification of a Model of Honeypot Attack Based On Raised Data

The security of their network remains the priorities of almost all companies. Existing security systems have shown their limit; thus a new type of security systems was born: honeypots. Honeypots are defined as programs or intended servers which have to attract pirates to study theirs behaviours. It is in this context that the leurre.com project of gathering about twenty platforms was born. This article aims to specify a model of honeypots attack. Our model describes, on a given platform, the evolution of attacks according to theirs hours. Afterward, we show the most attacked services by the studies of attacks on the various ports. It is advisable to note that this article was elaborated within the framework of the research projects on honeyspots within the LABTIC (Laboratory of Information Technologies and Communication). Keywords—Honeypot, networks, attack, leurrecom, computer network

Champlin Water Works Seeks Right Level of Security Against Terrorist Threat

Shortly after Sept. 11, 2001, during one of the national states of high alert, an alarm sounded at the Champlin, Minnesota, water treatment facility. When investigators found a door ajar at the facility, speculation about possible terrorist sabotage took off quickly. Because the existing security system provided no information about where or whether an intruder might have gained access to the water supply, the city conducted testing and flushing of the distribution system. The Minnesota Department of Health, which had budgeted for security contingencies, covered the $23,000 cost. After the tests were conducted, no evidence of tampering was found, but because of the heightened state of alert and the need to take costly measures in the face of uncertainty, the city acted quickly to allot funds for an improved security system to monitor access to offices, water towers, and wellheads. This article describes system improvements that include interior and exterior monitoring to provide a deterrent as well as sufficient data to evaluate the nature and extent of any future security breaches.

An introduction evaluating biometric systems

On the basis of media hype alone, you might conclude that biometric passwords will soon replace their alphanumeric counterparts with versions that cannot be stolen, forgotten, lost, or given to another person. But what if the actual performance of these systems falls short of the estimates? The authors designed this article to provide sufficient information to know what questions to ask when evaluating a biometric system, and to assist in determining whether performance levels meet the requirements of an application. For example, a low-performance biometric is probably sufficient for reducing-as opposed to eliminating-fraud. Likewise, completely replacing an existing security system with a biometric-based one may require a high-performance biometric system, or the required performance may be beyond what current technology can provide. Of the biometrics that give the user some control over data acquisition, voice, face, and fingerprint systems have undergone the most study and testing-and therefore occupy the bulk of this discussion. This article also covers the tools and techniques of biometric testing.

2.1.1 Synthesis of an Anti‐Terrorist Air Transportation Security System

AbstractThe paper explores how a systems engineering methodology, based on a diagrammatic modeling approach which adopts a variety of viewpoints and perspectives, can be used to develop an initial understanding of the air transportation system (ATS) and an assessment of its susceptibility to terrorist threats. The ATS model is extended and refined in order to incorporate existing security systems, which can be assessed with regard to the susceptible components of the ATS. Similarly, the terrorist threat capability is modeled, providing a means by which future threats may be anticipated. Analysis of the interaction points between the systems allows the air transportation system's vulnerability to specific threats to be assessed. Since there are a large number of potential attack modes, there has to be some rationalization and down‐selection in order to give focus to what are perceived to be the most serious threats. This focus leads to the identification of counter‐measure concepts that can then be built into a comprehensive integrated security system.Clearly, this topic involves high levels of security restriction. It is not the intent of this paper to enter into confidential or classified topics, but rather to illustrate how a systems engineering approach can be utilized to provide a top‐level introduction to the problem of countering terrorist threats to air transportation in order to synthesize a layered security system.

Accessibility vs. security: A look at the demand for computer security

The central objective of any security system is the ability to prevent undesired access, while still allowing authorized access to information. As computer usage expands into more areas and the number and variety of users increase, we expect to see an increased demand for more complex security provisions. The purpose of this study is to examine existing attitudes toward this trade-off. A nationwide survey is used to examine current demands for information security systems. Analysis shows that there is a strong demand today for more complex security provisions. The study also reveals that, although most of the respondents are satisfied with their existing security systems, over one-fourth are dissatisfied. This paper also examines the security demands by industry, functional area of the respondent, types of computer, and by number of employees.

Contested Order: The Struggle over British Security Policy in Northern Ireland

The security sector of a state-that cluster of organs with direct responsibility for internal and external security-can be viewed as the state's inner core, the locus of ultimate state power. Under normal conditions, security systems enjoy substantial autonomy and insulation from accountability and pressure group influence.' Outside actors typically have little information about and access to this sphere. These realities tend to make security institutions the least amenable of any state organs to fundamental transformation. This does not imply that these agencies are immune to modification and innovation, but suggests that far-reaching change is rare, especially in a highly repressive internal security apparatus. Northern Ireland (or Ulster) is particularly interesting in this regard because it has been the site of a protracted struggle to defend, refashion, and dissolve the basic policies and institutional foundations of internal security. Along with the conflict over the constitutional status of the province, security matters have been perhaps the most vehemently contested of all issues. But despite the fact that the security core has become such an object of struggle, it remains relatively autonomous and unresponsive to direct social pressures. How can this state of affairs be explained? The British government, which took power from Northern Ireland's Protestant-dominated Unionist government in 1972, has consistently hinged any further liberalization of the system of control on the defeat of political violence.2 Yet, although violence is certainly a central feature of the trauma of Northern Ireland, it is not necessarily the chief determinant of the character of security arrangements there. Political violence has steadily diminished over the past fifteen years, yet several of the more illiberal features of the security enterprise have become only more firmly institutionalized.3 Political conditions may have at least as great an impact on the character of a security system as the persistence of violence and unrest.4 This article therefore examines the ongoing struggle in Northern Ireland to shape internal security policies and structures in terms of three factors: (1) regime priorities and capacities, (2) the influence of organized party pressure, particularly that of the Protestant Unionist parties,5 and (3) the impact of collective protest and resistance. I will suggest that the existing security system reflects the short-term interests and objectives primarily of the British state, but also that the state's capacity to act is constrained to some extent by popular Protestant (or loyalist) and Catholic (or nationalist) forces.6 This analysis will also shed light on the larger question of the distinctive character of British rule in Northern Ireland, an issue that has not received sufficient scholarly attention.