Firewall Protection Research Articles

Automating cloud virtual machines allocation via machine learning

Automating cloud virtual machines allocation via machine learning

High Secure Data Transactions in AXI System Bus using Firewall Protection

Abstract: An open-standard, on the chip interconnection protocol called the Advance Microcontroller Bus Architecture (AMBA) is used to link and manage functional blocks in systems on chip (SoC) architectures. An interface definition called Advanced eXtensible Interface (AXI) specifies the IP block interface rather than the connection itself. The point-to-point connections between a supervisor as well as subordinate are defined by the AXI protocol in terms of their signals and time. The existing AXI protocol only has the response mechanism for the slave error and the valid transactions. In this work the high secure data transactions in AXI system bus is introduced using the firewall protection where a certain range of address are protected to access from other master peripherials

A Secured Software Defined Network Architecture for Mini Net using POX Controller

SDN (software-defined networks) is a new technology that stems from numerous network security enhancements. It handles network data in a flexible manner using highly secure frameworks. The secure SDN model's purpose is to ensure data security. The proposed idea to be executed is a robust firewall protection in a mini net employing a POX controller. In order to deal with network-induced dangers, the huge network connectivity influenced environment requires additional protection. The proposed effort focuses on creating a secure SDN simulation architecture that is managed by Open Source POX Controller. Through a POX-controlled traffic management system and a Fingerprint-enabled authentication technique, the system provides multilayer security. The enhanced security is achieved by assessing network traffic as either elephant or mouse flow and selecting the appropriate security level based on data complexity. Mininet is run in a virtual cloud, where protocols and tools are tested and supported by a virtual machine (VM). The novelty is to produce a secure SDN topology was created using a python-based POX controller in the suggested technique. It also provides a low-cost solution as well as rapid development in conjunction with industrial networks.

Climate Change and Corporate Regulation in Angola: Reforming the Regulatory Framework for Climate Change Mitigation

Angola, like many African countries, continuously suffers the deleterious impacts of climate change despite its minimal global carbon contributions. Despite this, it has not taken active steps to institute a climate change regulatory framework or established any strong regulatory regime to aid the regulation of corporate activities and participation in mitigation projects in the country. This article examines the regulatory landscape of climate change and corporations in Angola and assesses the country’s ability to tackle the challenges posed by climate change. It examines the country's position in the international climate change arena and scrutinizes the contribution of corporations to Angola's carbon emissions. The absence of legislation on climate change in Angola creates a void which allows corporations in the country to avoid any responsibility for mitigation projects and activities. This article, therefore, analyses the strengths and weaknesses of the alternative regulatory frameworks such as judicial, market, and surrogate regulation that can operate to fill this void and the extent to which they curtail corporate excesses in climate change and incentivise participation in mitigation activities. In scrutinising the deficiencies of Angola’s climate change regulatory framework, the article adopts the dilute interventionism model which employs both prescriptive and facilitative measures to regulate corporations and mitigate the impact of climate change. It highlights the structure of the legislative framework, regulator, and technical expertise necessary for the successful implementation of the said model. Additionally, the article argues in favour of adopting a veto firewall protection to maintain the independence of the proposed sole independent regulator to be responsible for regulating the climate change activities of corporations in Angola.

Climate Change Regulations of Corporations in Tanzania: A Case for Dilute Interventionism and Veto Firewall Paradigm

Corporations operating in developing countries generally adopt an obstructionist approach to climate change and environmental regulation, particularly in states with weaker economic bargaining strength. Tanzania is one of the African states suffering the disproportionate impacts of climate change but with a weak regulatory capacity to restrain adverse corporate climate change impacting activities. This article critically analyses the climate change regulatory framework of corporations in Tanzania and proposes the implementation of the Dilute Interventionism Model as an innovative solution for regulating corporate activities in climate change mitigation in the country. The model combines prescriptive and facilitative measures in regulating corporations to mitigate the effects of climate change. The article also identifies the need for Veto Firewall protection to safeguard the independence of the sole independent regulator established to regulate the climate change activities of corporations in Tanzania. This article adopts the Dilute Interventionism Pyramid which depicts the steps required to implement the Dilute Interventionism Model in Tanzania. The challenges to the implementation of the Dilute Interventionism and Veto Firewall Paradigm in Tanzania are also discussed, including resistance from corporations, inadequate funding, and lack of technical capacity and the potential solutions to these challenges are briefly highlighted.

Climate Change and Corporate Regulation: A Critical Analysis of Egypt’s Legal and Regulatory Regime

Corporations operating in African states generally have apathy to climate change/environmental regulation, owing to their weak economic bargaining strength in these states. Egypt is one of the African states suffering the disproportionate impacts of climate change and although it has drawn up several climate policy documents, it has not yet enacted a Climate Change Act and has a weak regulatory capacity to restrain adverse corporate climate change-impacting activities. This article critically analyses the legal/ regulatory regime in Egypt for regulating corporate participation in climate change mitigation and its effectiveness in addressing climate change challenges. It critically analyses the implementation of the Dilute Interventionism Model. It evaluates the required legislative framework, regulator, and technical expertise necessary for its successful implementation. This paper also highlights the importance of the Veto Firewall protection to maintain the independence of the sole independent regulator responsible for regulating the climate change activities of corporations. This paper argues that the Dilute Interventionism Model, in conjunction with the veto firewall paradigm, provides a practical and effective approach to regulating corporations. However, successful implementation will require political will, corporate compliance, and technical capacity. This paper provides policymakers, stakeholders, and interested parties in Egypt and elsewhere with useful insights for addressing climate change challenges.

Library Network Security Measures As Determinants of Archives Preservation in Public Libraries in Rivers State, Nigeria

This study examined available library network security measures as determinants of archives preservation in public libraries in Rivers state. The descriptive survey design was adopted for this study. The target population of the study comprised 514 library staff drawn from Rivers State library board and staff from Jubilee library Port Harcourt. The sample size for this study was 399 library staff comprising 227 staff from Rivers state library board and 172 library staff from Jubilee library Port Harcourt. An instrument titled library network security measures for archives preservation questionnaire was used for data collection. Face validity of the instrument was ensured by three experts. The instrument consists of 10 items of 2 sections. The instrument yielded reliability coefficients of 0.79 with the use of Cronbach Alpha reliability method. The findings indicated that, among other things, encryption technologies such as firewall protection and secure logins are part of the library’s network security measures that are employed to preserve archives in public libraries in Rivers state, Nigeria. Based on the findings, it can be concluded that public libraries in Rivers state are not lacking security features that would help preserve archives via a networked security system. However, the security measures were not effectively employed because staff members’ security training was not sufficiently available. As a result, it was recommended that more training in security should be provided to staff in all of the public libraries in Rivers state.

Analysis of Impact of Industry 4.0 on Africa, Eastern Europe and US: A Case Study of Cyber-Security and Sociopolitical Dynamics of Nigeria, Russia and USA

This article explores the technological innovations associated with industry 4.0 and how it has altered virtually every aspect of the human life. Even though in the process of redefining technology, the insatiable and complex needs of man can be met quite considerably, there are various challenges observed with its usage by individuals, groups, business organizations and countries. Some of the consequences highlighted in this study include cyber-threat or attacks against businesses and individuals, political figures and government. Therefore the author examines critical cases and problems which are not just socioeconomic but also sociopolitical. The qualitative method and NCSI Index were used to analyze the cases in this study. In addition, the solutions proposed in this study includes that top technological figures, institutions and companies in Nigeria, Russia and the US need to put their cyber differences aside, move beyond the firewall protection approach and critically assess how data breach can be massively reduced if not avoided in its entirety.

Effectiveness of Forensic Firewall in Protection of Devices from Cyberattacks

Computers and networks serve a host of functions. As they provide the much-needed services, unscrupulous parties also make work difficult by promoting cyberattacks that could lead to sensitive data loss and inability to access a personal computer. The submission explores the use of firewalls in protecting users against network-driven attacks. Firewalls intercept malware attacks, phishing, and identity theft by denying access to certain suspicious sites. However, users must realize that some hardware firewalls cannot protect them from certain web attacks and software firewalls that are in-built fail to detect malicious attacks on some occasions. Therefore, some entities are forced to incorporate both hardware and software to get the desired level of protection. Using an experimental research method, the study explores the effectiveness of firewall protection by presenting more gains that demerits.

Misconfiguration in Firewalls and Network Access Controls: Literature Review

Firewalls and network access controls play important roles in security control and protection. Those firewalls may create an incorrect sense or state of protection if they are improperly configured. One of the major configuration problems in firewalls is related to misconfiguration in the access control roles added to the firewall that will control network traffic. In this paper, we evaluated recent research trends and open challenges related to firewalls and access controls in general and misconfiguration problems in particular. With the recent advances in next-generation (NG) firewalls, firewall roles can be auto-generated based on networks and threats. Nonetheless, and due to the large number of roles in any medium to large networks, roles’ misconfiguration may occur for several reasons and will impact the performance of the firewall and overall network and protection efficiency.

Digital security vulnerabilities and threats implications for financial institutions deploying digital technology platforms and application: FMEA and FTOPSIS analysis.

Digital disruptions have led to the integration of applications, platforms, and infrastructure. They assist in business operations, promoting open digital collaborations, and perhaps even the integration of the Internet of Things (IoTs), Big Data Analytics, and Cloud Computing to support data sourcing, data analytics, and storage synchronously on a single platform. Notwithstanding the benefits derived from digital technology integration (including IoTs, Big Data Analytics, and Cloud Computing), digital vulnerabilities and threats have become a more significant concern for users. We addressed these challenges from an information systems perspective and have noted that more research is needed identifying potential vulnerabilities and threats affecting the integration of IoTs, BDA and CC for data management. We conducted a step-by-step analysis of the potential vulnerabilities and threats affecting the integration of IoTs, Big Data Analytics, and Cloud Computing for data management. We combined multi-dimensional analysis, Failure Mode Effect Analysis, and Fuzzy Technique for Order of Preference by Similarity for Ideal Solution to evaluate and rank the potential vulnerabilities and threats. We surveyed 234 security experts from the banking industry with adequate knowledge in IoTs, Big Data Analytics, and Cloud Computing. Based on the closeness of the coefficients, we determined that insufficient use of backup electric generators, firewall protection failures, and no information security audits are high-ranking vulnerabilities and threats affecting integration. This study is an extension of discussions on the integration of digital applications and platforms for data management and the pervasive vulnerabilities and threats arising from that. A detailed review and classification of these threats and vulnerabilities are vital for sustaining businesses’ digital integration.

Secure Cloud Data Storage System using Hybrid Paillier-Blowfish Algorithm

Cloud computing utilizes enormous clusters of serviceable and manageable resources that can be virtually and dynamically reconfigured in order to deliver optimum resource utilization by exploiting the pay-per-use model. However, concerns around security have been an impediment in the extensive adoption of the cloud computing model. In this regard, advancements in cryptography, accelerated by the wide usage of the internet worldwide, has emerged as a key area in addressing some of these security concerns. In this document, a hybrid cryptographic protocol deploying Blowfish and Paillier encryption algorithms has been presented and its strength compared with the existing hybrid Advanced Encryption Standard (AES) and Rivest Shamir Adleman (RSA) techniques. Algorithms for secure data storage protocol in two phases have been presented. The proposed hybrid protocol endeavors to improve the power of cloud storage through a decrease in computation time and cipher-text size. Simulations have been carried out with Oracle Virtual Box and Fog server used on an Ubuntu 16.04 platform. This grouping of asymmetric and homomorphic procedures has demonstrated enhanced security. Compression usage has helped in decreasing the storage space and computation time. Performance analysis in terms of computation overhead and quality of service parameters like loads of parameters with and without attacks, throughput, and stream length for different modes of block cipher mode has been carried out. Security analysis has been carried out by utilizing the Hardening Index as an audit parameter using Lynis 2.7.1. Similarly, for halting the aforementioned approaches and for regulating traffic, firewall protection has been generated in the chosen hybrid algorithms. Finally, enhancements in the performance of the Paillier and Blowfish hybrid scheme with and without compression compared to the existing schemes using RSA and AES procedures have been demonstrated.

Bunker jails: Providing application level firewall protection for Bank IT infrastructure security

Bunker jails: Providing application level firewall protection for Bank IT infrastructure security

‘Free In, Free Out’: Exploring Dutch Firewall Protections for Irregular Migrant Victims of Crime

Abstract Real and perceived risks of deportation may compromise the effective right of irregular migrants to report to the police if they have been a victim of crime. Some localities have therefore introduced so-called ‘firewall protection’, providing a clear separation between the provision of public services and immigration enforcement. This article explores one such policy in the Netherlands: ‘free in, free out’. While the policy began as a local pilot project, in 2015 it was introduced at the national-level alongside implementation of EU Victim’s Rights Directive, and currently represents the only national-level example of ‘firewall protection’ for victims of crime in Europe. This article is based on a socio-legal study that included interviews with informants from governmental and non-governmental organisations. It documents the legal and social reasons for instituting the policy, while critically assessing the challenges in implementation. Finally, it discusses the lessons and opportunities for expanding firewall protection more broadly in a European context.

Possible Cisco-based Fire Protection Solutions in Education Institutions

Abstract Solutions based on Cisco firewall protection provide numerous possibilities for more efficient protection of the abundant quantity of data that is necessary for the operation of an educational institution. Firstly, data phishing can be complicated by the constitution of a virtual network. The IDPS-based access system enables the management center to identify a potential threat in a timely manner. Furthermore, the Cisco-type firewall of a new generation is able to verify the encrypted data in a way that avoids decoding and listening the communication itself. The AAA framework is also an imperative, as in case of a network, control of access is of the utmost importance.

Protection of Database in Machine Industry and Defense of Cyber Attack with Antivirus and Firewall Protection

Protection of Database in Machine Industry and Defense of Cyber Attack with Antivirus and Firewall Protection

IoT as a Land of Opportunity for DDoS Hackers

In 2016, Mirai showed the destructive potential of a botnet composed exclusively of Internet of Things devices. To evaluate the current state of anti-DDoS (distributed denial-of-service) protection for such devices, the authors studied webcams—discovered by Shodan—and found that most have little to no firewall protection and, as such, are vulnerable to future direct and reflective DDoS attacks.

The Case for ‘Firewall’ Protections for Irregular Migrants

The issue of irregular migration is experiencing heightened attention in political, social and legal arenas. While deterrence and crime-control discourse and practices dominate current approaches to irregular migration, this article seeks to focus on the problematic neglect of the treatment of irregular migrants in destination countries, in relation to their ability to access fundamental rights and basic public services. This article will put forth an argument for the establishment of firewalls – a separation between immigration enforcement activities and public service provision. This article will canvass existing trends and practices that have both contributed to the erosion of firewall protections, and have built and maintained meaningful firewalls between immigration and public service provision.

Technology in Counselor Education: HIPAA and HITECH as Best Practice

The use of technology in counseling is expanding. Ethical use of technology in counseling practice is now a stand-alone section in the 2014 American Counseling Association Code of Ethics. The Health Insurance Portability and Accountability Act (HIPAA) and the Health Information Technology for Economic and Clinical Health (HITECH) Act provide a framework for best practices that counselor educators can utilize when incorporating the use of technology into counselor education programs. This article discusses recommended guidelines, standards, and regulations of HIPAA and HITECH that can provide a framework through which counselor educators can work to design policies and procedures to guide the ethical use of technology in programs that prepare and train future counselors.Keywords: counselor education, technology, best practice, HIPAA, HITECHThe enactment of the Health Insurance Portability and Accountability Act of 1996 (HIPAA) brought forth a variety of standards addressing the privacy, security and transaction of individual protected health (PHI; Wheeler & Bertram, 2012). According to the language of HIPAA (2013, §160.103), PHI is defined as individually identifiable health information (p. 983) that is transmitted by or maintained in electronic media or any other medium, with the exception of educational or employment records. identifiable health information is specified as follows:Information, including demographic data, that relates to:* the individual's past, present or future physical or mental health or condition,* the provision of health care to the individual, or* the past, present, or future payment for the provision of health care to the individual, and that identifies the individual for which there is a reasonable basis to believe can be used to identify the individual. Individually identifiable health includes many common identifiers. (U.S. Department of Health and Human Services [HHS], n.d.-b, p. 4)The HIPAA standards identify 18 different elements that are considered to be part of one's PHI. These include basic demographic data such as names, street addresses, elements of dates (e.g., birth dates, admission dates, discharge dates) and phone numbers. It also includes such as vehicle identifiers, Internet protocol address numbers, biometric identifiers and photographic images (HIPAA, 2013, § 164.514, b.2.i).According to language in HIPAA, the applicability of its standards, requirements and implementation only apply to entities, which are (1) a health plan (2) a health care clearinghouse (3) a health care provider who transmits any health in electronic form in connection with [HIPAA standards and policies] (HIPAA, 2013, § 160.102). Covered entities have an array of required and suggested privacy and security measures that they must take into consideration in order to protect individuals' PHI; failure to protect individuals' could result in serious fines. For example, one recent ruling found a university medical training clinic to be in violation of HIPAA statutes when network firewall protection had been disabled. The oversight resulted in a $400,000 penalty (Yu, 2013). Moreover, the recent implementation of the Health Information Technology for Economic and Clinical Health (HITECH) Act in 2009 increased the fines resulting from failure to comply with HIPAA, including fines for individuals claiming they did not know that can range from $100-$50,000 (Modifications to the HIPAA Privacy, 2013, p. 5583). The final omnibus ruling of HIPAA-HITECH, enforcing these violations, went into effect on March 26, 2013 (Modifications to the HIPAA Privacy, 2013; Ostrowski, 2014). Enforcement of the changes from the HITECH Act on HIPAA standards began on September 23, 2013, for covered entities (Modifications to the HIPAA Privacy, 2013).Academic departments and universities must understand the importance of HIPAA and HITECH regulations in order to determine whether the department or university is considered a covered entity. …

A Fixer-Upper for Finance

Three facts bear notice in connection with our current financial troubles. The first is that First World War, before Second began, was known as the Great War. The second is that global Depression that struck between those two wars, which for now we can still label Great, commenced with burst of a multiyear real estate price bubble prior to 1929 stock market crash. The third is that U.S. accordingly addressed that depression through mutually reinforcing new regimes not only of financial regulation, but also of home mortgage finance - very reforms that brought us securitization and familiar 30 year, fixed rate mortgage. Our present difficulties, moreover, stem directly from recent departures from that originally bipartisan package of mutually reinforcing mortgage and finance-regulatory innovations. Approaches to today's financial crisis have been strangely unmindful of history, innovations, and bipartisanship just mentioned. They have also been inattentive to well established historical linkage between protracted economic contractions on one hand, and paired stock and real estate crashes on other. That is surprising not only because these matters are so salient right now. It is surprising also because reason for historical link between real estate slumps and broader economic contractions is not hard to find: For overwhelming majority of Americans, homes are by far most valuable assets they own. When their values plummet, wealth, credit, consumer confidence, and spending soon follow. The lesson for today is quite clear: No approach to our present financial crisis that does not address mortgage crisis at its core can succeed in long run, or even short run. This Article prescribes means of addressing our current financial crisis by addressing mortgage crisis at its core. It targets both short and long term. In a manner that is sensitive both to historical roots and to still operative etiology of current crisis, it develops a fully integrated, systematic protocol for treating our present financial ills. The Article first structurally characterizes nature of credit-fueled asset price bubbles and financial pathologies to which they give rise. It emphasizes that this structure is compatible both with long-term informational efficiency on part of asset markets, and with individual rationality on part of market participants. The challenge presented by asset bubbles, Article argues, is not individual irrationality or informational inefficiency, but a classic coordination problem. Mistaken assumptions to contrary account in large measure for our failure to have prevented, and for our ineffectiveness thus far in addressing, present crisis. Coordination problems require coordinative responses. Absent such responses to credit cycles and financial systems conceived as wholes, piecemeal regulatory measures cannot properly discharge their functions. The Article next shows our current difficulties indeed to have stemmed from a classic credit-fueled asset price bubble first in stock, then in housing markets over decade ending in 2006. This bubble was strikingly reminiscent both of that which preceded 1928-29 American real estate and stock market crashes and ensuing deflation, and of more recent such stories in Asia. The Article then lays out responsive near-term solutions to present crisis as thus characterized, followed by longer-term measures that will maintain health both in real estate finance and in financial system more generally. The key to a short term solution lies in employing those institutions we first put into place to deal with our last great real estate bubble and burst, that of 1928. Those institutions are Federal Housing Administration and its recently renationalized GSE siblings, Fannie Mae and Freddie Mac. The key to longer term maintenance, Article then argues, is two-fold. Above all, we must restore Federal Reserve's original role as bubble-preventive credit-regulator - what Article calls regulation as modulation. Complementary to this task will be development of more effective bubble-detection methodologies, which can be developed but, as public goods, are currently underprovided. Likewise complementary to credit modulation will be extension of familiar disclosure and firewall protections from those older fields of finance where they have been operative since 1930s, to new fields of finance that have developed more recently in shadows. Getting finance and credit-debt cycle right, Article concludes, will get business cycle and stable growth right as well. Stop bubbles, and we will stop bursts and deflations alike.