Field Of Information Security Research Articles

Magnetic media synergistic carbon fiber@Ni/NiO composites for high-efficiency electromagnetic wave absorption

Electromagnetic wave (EMW) absorbing materials have garnered significant attention for their potential applications in information security and military stealth fields. However, the development of highly efficient EMW absorbing materials possessing characteristics such as being “thin, lightweight, broadband and strong” remains a considerable challenge. Addressing this challenge involves the construction of low-dimensional composite material systems, which proves to be an effective approach. Carbon fiber (CF) is highly regarded for its light weight. In this study, we developed a simple and innovative sol–gel strategy to fabricate CF@Ni/NiO composites. The results demonstrate that the incorporation of Ni/NiO particles into CF materials substantially enhances the ferromagnetic properties of CF@Ni/NiO composites. An optimum reflection loss (RL) of CF@Ni/NiO-3 is −55.58 dB at 15.4 GHz with a corresponding thickness of merely 1.7 mm. An effective absorption bandwidth (EAB) reaches a maximum of 6.0 GHz at a thickness of 1.8 mm. Meanwhile, the radar cross section (RCS) reduction value at 6 GHz reaches 29.92 dB m2. The uniform distribution of Ni/NiO nanoparticles not only establishes a magnetic coupling network but also creates abundant heterogeneous interfaces with CF, thereby enhancing interfacial polarization. The successful fabrication of CF@Ni/NiO composites will facilitate the development and broad application of advanced electromagnetic wave (EMW) absorption materials in the aviation and aerospace sectors.

Protection of Personal Data in Telemedicine

The protection of personal data in telemedicine in the context of current legislation and regulatory acts of the European Union is considered. Social relations in the field of use of personal data in telemedicine are studied, in particular, legal regulation of the use of personal data processed in health care information systems. In the information society, the right to health care and medical care is closely related to the right to access information. The right to access to information is a guarantee of the exercise of the right to health care and medical care, defines its content and contributes to equal access of every person to medical care. It is indicated that ensuring the balance of private and public interests in telemedicine requires differentiation of the conditions for processing personal health data. As an additional condition for the processing of personal data for specific purposes, it is proposed to provide for the consent of the subject of personal data to data processing with the right to refuse processing. Such purposes may include, in particular, the processing of electronic health records in the unified state health information system, the processing of depersonalized personal health data for research purposes. This approach contributes to the protection of public interests in health care and takes into account the autonomy of the will of the subject of personal data, his interests in the field of personal information security, corresponds to approaches to legal regulation in the European Union.

Multi-step FRET systems based on discrete supramolecular assemblies.

Fluorescence resonance energy transfer (FRET) from the excited state of the donor to the ground state of the acceptor is one of the most important fluorescence mechanisms and has wide applications in light-harvesting systems, light-mediated therapy, bioimaging, optoelectronic devices, and information security fields. The phenomenon of sequential energy transfer in natural photosynthetic systems provides great inspiration for scientists to make full use of light energy. In recent years, discrete supramolecular assemblies (DSAs) have been successively constructed to incorporate donor and multiple acceptors, and to achieve multi-step FRET between them. This perspective describes recent advances in the fabrication and application of DSAs with multi-step FRET. These DSAs are categorized based on the non-covalent scaffolds, such as amphiphilic nanoparticles, host-guest assemblies, metal-coordination scaffolds, and biomolecular scaffolds. This perspective will also outline opportunities and future challenges in this research area.

Problems of training specialists in the field of information security

Problems of training specialists in the field of information security

High-dimensional Poincaré beams generated through cascaded metasurfaces for high-security optical encryption

Optical encryption plays an increasingly important role in the field of information security owing to its parallel processing capability and low power consumption. Employing the ultrathin metasurfaces in optical encryption has promoted the miniaturization and multifunctionality of encryption systems. Nevertheless, with the few number of degrees of freedom (DoFs) multiplexed by single metasurface, both key space and encoding space are limited. To address this issue, we propose a high-security and large-capacity optical encryption scheme based on perfect high-dimensional Poincaré beams with expanded DoFs. By cascading two arrayed metasurfaces, more beam properties can be independently engineered, which gives rise to the extensively expanded key and encoding spaces. Our work provides a promising strategy for optical encryption with high security level and large information capacity and might facilitate the applications of Poincaré beams in optical communications and quantum information.

ВЫЯВЛЕНИЕ ПРОБЛЕМ ИНФОРМАЦИОННОЙ БЕЗОПАСНОСТИ МЕТОДОМ СИСТЕМАТИЧЕСКОГО ОБЗОРА ЛИТЕРАТУРЫ

The field of information security covers a wide range of technical, organizational and social aspects, requiring information security specialists to take a unique and comprehensive approach to the development, support, operation, evaluation and improvement of information security management systems. An important element of successful information protection is the accurate identification and assessment of risks and vulnerabilities that may become a source of threats. In existing publications, as a rule, it is assumed that specialists have the necessary experience and knowledge to conduct risk analysis. However, in the dynamic world of information technology and threats, an information security specialist faces a huge amount of information and potential risks that are constantly evolving. Because of this, it is an impossible task to keep in mind all kinds of threats to information security. 
 The purpose is to identify actual problems of information security, potentially acting as sources of information security risk, based on the method of systematic review of the literature. Results: 73 actual problems of information security have been identified, which an information security specialist should take into account in his activities. Understanding these issues makes it possible to develop more effective protection strategies, as well as to make informed and informed decisions when developing and applying security measures.

An efficient polynomial-based verifiable computation scheme on multi-source outsourced data

With the development of cloud computing, users are more inclined to outsource complex computing tasks to cloud servers with strong computing capacity, and the cloud returns the final calculation results. However, the cloud is not completely trustworthy, which may leak the data of user and even return incorrect calculations on purpose. Therefore, it is important to verify the results of computing tasks without revealing the privacy of the users. Among all the computing tasks, the polynomial calculation is widely used in information security, linear algebra, signal processing and other fields. Most existing polynomial-based verifiable computation schemes require that the input of the polynomial function must come from a single data source, which means that the data must be signed by a single user. However, the input of the polynomial may come from multiple users in the practical application. In order to solve this problem, the researchers have proposed some schemes for multi-source outsourced data, but these schemes have the common problem of low efficiency. To improve the efficiency, this paper proposes an efficient polynomial-based verifiable computation scheme on multi-source outsourced data. We optimize the polynomials using Horner’s method to increase the speed of verification, in which the addition gate and the multiplication gate can be interleaved to represent the polynomial function. In order to adapt to this structure, we design the corresponding homomorphic verification tag, so that the input of the polynomial can come from multiple data sources. We prove the correctness and rationality of the scheme, and carry out numerical analysis and evaluation research to verify the efficiency of the scheme. The experimental indicate that data contributors can sign 1000 new data in merely 2 s, while the verification of a delegated polynomial function with a power of 100 requires only 18 ms. These results confirm that the proposed scheme is better than the existing scheme.

Finger Print Voting System

The field of biometrics, or the identification of people based on physiological or behavioral characteristics [6], has recently received a significant amount of attention in current research as a result of its applicability in the fields of information technology and security. With the increased usage of PIN numbers and passwords in everyday life, the vulnerabilities of these two technologies are becoming more apparent (e.g. password-cracking). Biometric authorization’s strengths are that it requires the user to be present and that it eliminates the hassles of passwords and PIN’s (or can be used in parallel with these for added security). Specifically, online identity verification, ATM machines, and building entrance authorization, are all areas where it is very useful to implement an automatic identification system.

Reliable human authentication using AI-based multibiometric image sensor fusion: Assessment of performance in information security

Reliable human authentication is essential for assuring the availability, confidentiality, and integrity of sensitive data and resources in the field of information security. Due to the vulnerabilities of conventional authentication techniques like passwords and PINs, interest in biometric-based authentication systems has developed. To get over this, we suggest an efficient voice and iris recognition-based multimodal biometric verification strategy for human authenticating tools. We first collect the voice and iris datasets from 150 people. Then, we used a median filter and high pass filter to preprocess the voice and iris data. The features of voice identification are extracted using the shifted delta cepstral coefficient (SDCC) and the Mel frequency discrete wavelet coefficient (MFCC), and these two coefficients are evaluated. The outcomes of the extraction of iris identification features using Local binary pattern (LBP) and Speeded robust features (SURF) are evaluated. The classifier Fine Tuned Cuckoo Search Optimized Convolutional Neural Network (FCSO-CNN) performs voice and iris recognition modalities. Voice and iris biometric systems may be combined into a single multimodal biometric system by fusing their respective feature sets and scoring algorithms. The results of the computer simulation demonstrate that for speech recognition, using the SDC and MFC coefficients produces better results, while for iris recognition, using the LBP and FCSO-CNN experiment produces superior outcomes. Additionally, the scores fusion works superior to other scenarios in the proposed multimodal biometrics system. The suggested system provides a dependable and strong solution for human identification, assisting in the improvement of security measures across a variety of industries, including financial institutions, governmental agencies, and the defense of key infrastructure.

Upconversion fluorescent Sr9In(PO4)7:Yb3+, Er3+ phosphors with applications in temperature measurement and anti-counterfeiting

In this work, Yb3+ and Er3+-co-doped Sr9In(PO4)7 upconversion fluorescent materials with dual functionality were synthesized though simple high-temperature solid state method. Based on International Commission on Illumination (CIE) color coordinates, the calculation of color purity at different temperatures demonstrates the attainment of highly pure green luminescence (color purity >90 %) for the synthesized materials. The analysis of activation energy proves that synthesized materials are stable. Utilizing the fluorescence intensity ratio (FIR) of the thermally coupled energy levels (2H11/2, 4S3/2) as a metric for optical sensing performance, absolute sensitivity and relative sensitivity are determined, and their maximum values are 0.44 % and 1.13 %, respectively. Inspired by the variation in CIE coordinates with temperature, thermally responsive two-dimensional barcode image was developed, demonstrating the practical application of Sr9In(PO4)7:Yb/Er materials in the field of information security and anti-counterfeiting.

Countermeasure against blinding attack for single-photon detectors in quantum key distribution

Quantum key distribution (QKD), rooted in quantum mechanics, offers information-theoretic security. However, practical systems open security threats due to imperfections, notably bright-light blinding attacks targeting single-photon detectors. Here, we propose a concise, robust defense strategy for protecting single-photon detectors in QKD systems against blinding attacks. Our strategy uses a dual approach: detecting the bias current of the avalanche photodiode (APD) to defend against continuous-wave blinding attacks, and monitoring the avalanche amplitude to protect against pulsed blinding attacks. By integrating these two branches, the proposed solution effectively identifies and mitigates a wide range of bright light injection attempts, significantly enhancing the resilience of QKD systems against various bright-light blinding attacks. This method fortifies the safeguards of quantum communications and offers a crucial contribution to the field of quantum information security.

МЕТОДИКА ОБЕСПЕЧЕНИЯ БЕЗОПАСНОСТИ ТРАНЗАКЦИЙ НА ОСНОВЕ ИСПОЛЬЗОВАНИЯ АНТИФРОД-СИСТЕМЫ

The aim of this scientific work is to propose a methodology for ensuring the security of transactions in commercial structures using an anti-fraud system. The article is devoted to analyzing the current problems in the field of information security in the financial sector, namely the use of anti-fraud systems designed to correctly identify illegitimate payment transactions for their timely prevention. The paper considers the feasibility question using machine learning in anti-fraud systems as a tool responsible for increasing the accuracy of checks while working with big data. The novelty of the study lies in proposing a scheme for the subsystem interaction of anti-fraud mechanisms using an expert’s manual verification, which is suitable for organizations that need to manually review each identified case of the Internet fraud. The work results in recommendations for preparing for the selection of an anti-fraud system, and a scheme for the subsystem interaction of the anti-fraud program.

The moderating impact of organizational culture on information security compliance

This research paper investigates the association between organizational culture and employees' compliance with information security policies. Drawing upon rational choice theory (RCT) and the competing values framework (CVF), our study explores the moderating effects of cultural dimensions on information security compliance in a diverse range of organizations. We employ a scenario-based approach and analyze the data using Partial Least Squares Structural Equation Modeling (PLS-SEM). Our findings underscore the robustness of the model and emphasize the pivotal role of cultural dimensions in influencing employees' compliance intentions.
 The study contributes by synthesizing non-fear-based deterrence theory with organizational culture theory, offering practical insights for information security managers. Recommendations include framing compliance as a moral duty, involving end-users in policy development, utilizing effective communication, implementing monitoring systems, and fostering a consistency culture. For organizations, the research underscores the importance of cultivating an ethical culture, emphasizing moral beliefs, and leveraging cultural dimensions to enhance compliance intentions.
 Acknowledging limitations related to single-country data collection, a focus on compliance intentions, and the selection of organizations with established policies, this research paves the way for future studies. Future research should aim to replicate this study in diverse cultural settings, consider individual-level culture measurement, and explore additional moderating factors. This research contributes to understanding the intricate relationship between organizational culture and information security compliance, offering actionable insights for practitioners and prospects for further exploration in the information security field.

Incorporating Machine Learning Strategies to Smart Gloves Enabled by Dual-Network Hydrogels for Multitask Control and User Identification.

Smart gloves are often used in human-computer interaction scenarios due to their portability and ease of integration. However, their application in the field of information security has been less studied. Herein, we propose a smart glove using an iontronic capacitive sensor with significant pressure-sensing performance. Besides, an operator interface has been developed to match the smart glove, which is capable of multitasking integration of mouse movement, music playback, game control, and message typing in Internet chat rooms by capturing and encoding finger-tapping movements. In addition, by integrating machine learning, we can mine the characteristics of individual behavioral habits contained in the sensor signals and, based on this, achieve a deep binding of the user to the smart glove. The proposed smart glove can greatly facilitate people's lives, as well as explore a new strategy in research on the application of smart gloves in data security.

What are developers talking about information security? A large-scale study using semantic analysis of Q&A posts.

Digitalization and rapid technological improvement in the present day bring numerous benefits, but they also raise the complexity and diversity of cyber security risks, putting critical information security issues on the agenda. Growing issues and worries about information security endanger not only the security of individuals and organizations but also global social and economic stability. This study investigates the issues and challenges regarding information security by analyzing all the postings on ISSE (Information Security Stack Exchange), a Q&A website focused on information security. In order to identify the primary topics addressed in postings shared on the ISSE platform, we employed a probabilistic topic modeling method called latent Dirichlet allocation (LDA), which is generative in nature and relies on unsupervised machine learning processes. Through this investigation, a total of 38 topics were identified, demonstrating the present state of information security issues and challenges. Considering these topics, a comprehensive taxonomy of seven categories was devised to address information security issues, taking into account their backgrounds and perspectives. Subsequently, we conducted an examination of the prevalence and complexity of the matters at hand. In addition, we have defined the prevailing technologies utilized in the realm of information security, including tasks, certifications, standards, methods, tools, threats, and defenses. We have provided a number of implications for different stakeholders, including academics, developers, educators, and practitioners, who are working towards advancing the field of information security.

Application of Multimedia Watermarking Technology in the Field of Information Security

This paper aims at comprehensively discussing the principle, methods, applications, challenges and future development of multimedia watermarking technology. In order to achieve this goal, this paper first introduces the basic concept and classification of multimedia watermarking technology, and then expounds in detail the core principles of spatial domain, frequency domain and mixed domain watermarking technology and the methods of watermark embedding and extraction. In terms of methods, this paper reveals their technical differences in robustness, invisibility and capacity through in-depth analysis of the characteristics of watermarking technology in different domains. In terms of application, the article shows the extensive application of multimedia watermarking technology in copyright protection, content authentication, covert communication and multimedia data integrity and authenticity verification through specific case analysis, highlighting its important value in the field of information security. Generally speaking, this paper systematically analyzes the principle, method and application of multimedia watermarking technology, which provides an important theoretical basis and practical guidance for further research and development in this field.

Organizational and legal principles of information security of enterprises in the conditions of martial law in Ukraine

Purpose. To investigate the peculiarities of organizational and legal provision of information security (IS) in the conditions of martial law (ML). To propose changes to legislative provisions to improve legal regulation in this area. To develop systematic measures to balance the rights and obligations of individuals and legal entities in the field of IS in the conditions of ML. Methodology. The general scientific and special legal methods of cognition are used: hermeneutic method allowed us to substantiate expansion of IS field; content analysis – to determine organizational principles of IS of enterprises in conditions of ML; structural and legal – to propose indicator conditions for legal norms; special-legal – to propose system of local regulatory acts for the legal provision of IS; comparative legal – to propose special legal regime for IS of enterprises. Findings. It is indicated that during the state of war, the IS field of enterprise expands significantly and becomes an element of the national security system. The peculiarities of organizational and legal support and the basic organizational principles of IS of enterprises in the conditions of ML are determined. It is proposed to introduce a special legal regime for implementation of IS of enterprises in conditions of ML and use of the state’s capabilities in this area under specified legal regime. Amendments to the articles of Special Part of Code of Ukraine on administrative offenses are proposed for effective regulatory support of the special legal regime for implementation of IS of enterprises Originality. A legal tool is proposed to limit dissemination of information about a company’s activities – the introduction of local law documents to classify information about the company’s activities during ML into category “with limited access”. Indicator conditions and additions to legislative norms are proposed. Practical value. The developed proposals, indicator conditions and additions to legislative norms will contribute to strengthening the IS of enterprises.

Model of current threats to security of confiden-tial data in divisional information systems

The paper proposes a model for determining actual threats to the information security of distributed information systems, based on algorithms of fuzzy inference and the theory of fuzzy neural systems, unlike known ones, uses sufficient and necessary indicators, excludes expert errors, increases the detection of the number of actual threats to information security of distributed systems by 5 %, reduces the cost of purchasing information protection equipment from 15 to 30%. It takes into account the following factors: the IT infrastructure of the distributed information system, the capabilities of attackers and their level of motivation in the distributed information system, the list of existing protection tools in the distributed information system.
 The proposed approach differs from existing ones in the following: lack of involvement of highly qualified specialists in the field of information security; the process is automated, has a low computational complexity; absence of deficiencies in expert assessments; allows you to determine the list of current information security threats in information systems of various classes and types.
 The task of ensuring the security of confidential information becomes the most urgent, which is due to the growth of computer attacks and leaks of information, which are reflected in the statistical data on the commission of crimes in the field of high technologies, the growth of criminal activity using modern communication devices and the Internet.
 Existing methods of modeling current threats to information security and assessing the effectiveness of the information protection system cannot be used at all stages of the life cycle of distributed information systems - they do not take into account the following indicators in the complex: IT infrastructure of distributed information systems, current threats to information security, security requirements for confidential information, a list of means of protecting confidential information and their value as important indicators when solving these problems.
 In order to achieve the goals of ensuring the security of confidential information, it is necessary to: organize the effective creation of an information protection system (information security system), effective modeling (identification of the list) of current threats to information security, identification of the current violator, and also provide the opportunity to conduct a qualitative assessment of the effectiveness of the information security (protection) system.
 One of the most important tasks of ensuring the security of confidential information is the assessment of the effectiveness of the protection (security) system. In this regard, the goal of the work (research) is to improve the quality of the evaluation of the effectiveness of the protection (security) systems of distributed information systems by determining sufficient and necessary evaluation indicators using modern (promising) information technologies that allow the most effective solution of the following tasks: determination operating parameters of adaptive production fuzzy neural systems, which are most suitable for solving the tasks, application of Data Science technologies in data processing, fuzzy output algorithms.

Basic Security Mechanisms in Linux

The article provides an overview of the key security aspects of the Linux operating system. The relevance of this work lies in the fact that in light of the rapid development of technology and increased threats in the field of information security, special attention is paid to mechanisms that ensure stable protection of data and system resources. The article begins by reviewing basic security principles such as the principle of least privilege and need-based access. Next, we look at modern authentication and authorization mechanisms, including the role of Pluggable Authentication Modules (PAM) and Security-Enhanced Linux (SELinux) multi-user rules. Particular attention is paid to access control systems, including mechanisms for managing access rights to files through the Discretionary Access Control (DAC) and Mandatory Access Control (MAC). The iptables and firewalld firewalls are analyzed as key tools for ensuring the security of network interactions. The article also covers current Linux security trends and challenges, as well as an overview of the latest kernel and software updates. Ultimately, the reader will gain a comprehensive understanding of Linux security mechanisms, allowing him to make informed decisions to effectively protect his systems and data.

Dynamic Optical Encryption Fueled via Tunable Mechanical Composite Micrograting Systems.

Optical grating devices based on micro/nanostructured functional surfaces are widely employed to precisely manipulate light propagation, which is significant for information technologies, optical data storage, and light sensors. However, the parameters of rigid periodic structures are difficult to tune after manufacturing, which seriously limits their capacity for in situ light manipulation. Here, a novel anti-eavesdropping, anti-damage, and anti-tamper dynamic optical encryption strategy are reported via tunable mechanical composite wrinkle micrograting encryption systems (MCWGES). By mechanically composing multiple in-situ tunable ordered wrinkle gratings, the dynamic keys with large space capacity are generated to obtain encrypted diffraction patterns, which can provide a higher level of security for the encrypted systems. Furthermore, a multiple grating cone diffraction model is proposed to reveal the dynamic optical encryption principle of MCWGES. Optical encryption communication using dynamic keys has the effect of preventing eavesdropping, damage, and tampering. This dynamic encryption method based on optical manipulation of wrinkle grating demonstrates the potential applications of micro/nanostructured functional surfaces in the field of information security.