Handle Security Issues Research Articles

The Formation of Neighborhood Police and Its Impact on the Maintenance of Security and Public Order (Harkamtibmas) at Surabaya Metropolitan Police

This study aims to analyze the implementation of the Neighborhood Police (Polisi RW) policy in efforts to improve public security and order. The research method employed is descriptive analysis with a qualitative approach, involving data collection through interviews, observations, and document review. The findings show that the implementation stages, including planning, socialization, execution, monitoring, evaluation, and development, have had a positive impact, such as increased public awareness, active participation, and more efficient coordination in handling security issues. Another finding reveals that the Prototype model is more relevant than the Incremental model for the Neighborhood Police program, as it allows for rapid feedback and continuous improvement. This study recommends that Regional and City or Regency Police Departments adopt a Prototype-based approach and enhance community involvement in the program to achieve more effective security objectives.

Revolutionizing Cloud Security: Innovative Approaches for Safeguarding Data Integrity

Cloud computing uses third-party servers or private clouds to provide online services and on-demand enterprise resource access. Microsoft Azure, Amazon, IBM, and Google Apps allow customers to design and run cloud-based apps from anywhere. These cloud services store and retrieve data from faraway servers, highlighting the importance of security due to internet data transfer. Before using cloud computing, firms must handle security issues. Pay-per-use, self-service, and scalability make the model popular in banking, healthcare, retail, education, manufacturing, and business. Pay-per-use models let users use servers, networks, storage, services, and applications without buying them. Limited data control can result in account service issues, traffic hijacking, insecure APIs, malicious insiders, technology sharing issues, and multi-tenancy data failures. Continuous research and development improve security and user confidence. This paper provides a framework for understanding cloud computing, identifies security dangers and research issues, and emphasizes its relevance in major industries. It also recommends cloud security innovations and assesses worldwide data protection policies to improve data security and reduce risks. Cloud-stored data is vulnerable to programs with security weaknesses, notwithstanding its benefits. If the guest OS’s security is unreliable, virtualization on a hypervisor may expose data to attacks. Additionally, data security vulnerabilities in transit and at rest will be addressed.

Handling security issues by using homomorphic encryption in multi-cloud environment

Taking advantage of the high performance and powerful data processing capabilities of cloud computing technology, externalizing data to the cloud platform is considered as an inevitable trend in the digital field today. However, ensuring the security and privacy of data remains a major challenge. To overcome this drawback, a multi-cloud platform is proposed to improve privacy and high availability of data. A multi-cloud platform that integrates public, private, and managed clouds with a single user interface. Cloud-hosted data is distributed among different data centers in a multi-cloud environment based on cloud reliability and data sensitivity. In terms of security, current encryption algorithms are considered to be very efficient, but it requires a lot of resources to handle this, which is expensive and time consuming. In addition, they also make the data impossible to process without first decoding. To be specific, traditional public key encryption requires data to be decrypted before it can be analyzed or manipulated. In contrast, homomorphic encryption is an encryption method that allows data to be encrypted while it is being processed and manipulated. It allows user or a third party, which can be cloud provider, to apply functions on encrypted data without revealing the data's values. In this paper, we explore existing multi-cloud-based security solutions using homomorphic encryption to identify open issues and opportunities for further enhancement.

Injection attack detection using machine learning for smart IoT applications

Smart cities are a rapidly growing IoT application. These smart cities mainly rely on wireless sensors to connect their different components (smart devices) together. Smart cities rely on the integration of IoT and 5G technologies, and this has created a demand for a massive IoT network of connected devices. The data traffic coming from indoor wireless networks (e.g., smart homes, smart hospitals, smart factories , or smart school buildings) contributes to over 80% of the total data traffic of the current IoT network. As smart cities and their applications grow, security and privacy challenges have become a major concern for billions of IoT smart devices. One reason for this could be the oversight of handling security issues of IoT devices by their manufacturers, which enables attackers to exploit the vulnerabilities in these devices by performing different types of attacks, e.g., DDoS and injection attacks. Intrusion detection is one way to detect and mitigate the risk of such attacks. In this paper, an intrusion detection method was proposed to detect injection attacks in IoT applications (e.g. smart cities). In this method, two types of feature selection techniques (constant removal and recursive feature elimination) were used and tested by a number of machine learning classifiers (i.e., SVM, Random Forest, and Decision Tree). The T-Test was conducted to evaluate the quality of this proposed feature selection method. Using the public dataset, AWID, the evaluation results showed that the decision tree classifier can be used to detect injection attacks with an accuracy of 99% using only 8 features, which were selected using the proposed feature selection method. Also, the comparison with the most related work showed the advantages of the proposed intrusion detection method.

Chaotic Pigeon Inspired Optimization Technique for Clustered Wireless Sensor Networks

Wireless Sensor Networks (WSN) interlink numerous Sensor Nodes (SN) to support Internet of Things (loT) services. But the data gathered from SNs can be divulged, tempered, and forged. Conventional WSN data processes manage the data in a centralized format at terminal gadgets. These devices are prone to attacks and the security of systems can get compromised. Blockchain is a distributed and decentralized technique that has the ability to handle security issues in WSN. The security issues include transactions that may be copied and spread across numerous nodes in a peer-peer network system. This breaches the mutual trust and allows data immutability which in turn permits the network to go on. At some instances, few nodes die or get compromised due to heavy power utilization. The current article develops an Energy Aware Chaotic Pigeon Inspired Optimization based Clustering scheme for Blockchain assisted WSN technique abbreviated as EACPIO-CB technique. The primary objective of the proposed EACPIO-CB model is to proficiently group the sensor nodes into clusters and exploit Blockchain (BC) for inter-cluster communication in the network. To select Cluster Heads (CHs) and organize the clusters, the presented EACPIO-CB model designs a fitness function that involves distinct input parameters. Further, BC technology enables the communication between one CH and the other and with the Base Station (BS) in the network. The authors conducted comprehensive set of simulations and the outcomes were investigated under different aspects. The simulation results confirmed the better performance of EACPIO-CB method over recent methodologies.

New concept for cryptographic construction design based on noniterative behavior

<span>Nowadays, cryptography especially hash functions require to move from classical paradigms to an original concept able to handle security issues and new hardware architecture challenges as in distributed systems. In fact, most of current hash functions apply the same design pattern that was proved vulnerable against security threats; hence the impact of a potential weakness can be costly. Thus, the solution begins with a deep analysis of divers attack strategies; this way can lead to finding a new approach that enables new innovative and reliable candidates as alternative hash functions. So to achieve this goal, in this article we introduce a new construction design that consists of a non-iterative behavior by combining a parallel block processing and a sequential xor addition process, in order to provide a secure design without changing the expected goal of a hash function, at the same time avoid the use of vulnerable structures.</span>

The Behaviours and Roles of School Principals in Tackling Security Challenges in Nigeria: A Context-Responsive Leadership Perspective

Principals are at the apex of all activities in the day-to-day life of secondary schools. Their function goes beyond mere guaranteeing effective teaching and learning, as well as the smooth running of secondary schools, they are entrusted with the responsibility of ensuring an enabling environment that is composite of security and safety for both learners and teachers. However, in recent times, Nigeria has witnessed insecurity and safety challenges to unprecedented heights with students in secondary schools also at the receiving end of these unfortunate realities. Going by the current torrent of insecurity and its obvious engulfment of the Nigerian State, there is a need for principals to build bridges and galvanise their schools against the debacle of insecurity that is ravaging this nation. This paper seeks to propose the context leadership theory as the means to address this menace. The paper provided a detailed explication of insecurity issues in Nigeria, its impacts on secondary education and the implication of principals’ behaviours and roles in effectively combatting insecurities. The engagement of this theory unravels the emergence of roles that the principals can take to nip the problem in the bud. Such roles include: managing the school’s vision and mission, ensuring teachers' professional development in handling security issues, fostering normative relationships across the entire school community, dealing with internal and external influences, and manage the school’s resources. Thus, we recommend that principals need to take on the roles as mentioned above in order to ensure that the current spate of insecurity in the country does not shut the gates of their schools.

Named Data Networking (NDN), Internet Architecture Design and Security Attacks

In Internet over established communication medium a packet in a network transmit data where users and data server with specific IP addresses interacted each other. Recent years, this peer to peer data communication also called as client – server data communication. Modern applications like YouTube, Social Networks and Bit Torrent have revolutionized the idea of user generated contents. The end users care only for precise data items irrespective of their sources. So, the importance is based on precise data called as named data rather than using IP addresses to recognize servers hosting a meticulous content. Likewise, necessity of IP addresses is a demanding issue persistent the Internet community. Due to content-centric networking platform, in which data has less importance, and proposed new terminology called Named Data Networking. NDN allows end users to float a new data request without any awareness about the end user host. Compare to Internet services NDN can handle security issues and user mobility, more efficiently. In this paper, we surveyed different network issues and security attacks in Named Data Networks and its counter measures and also we identified a set of current challenges in NDN for budding researchers in due course.

Lightweight Authentication Scheme for Live Video Streaming Security

The majority of the traffic in the internet is dedicated to video streaming and its applications. Content Network Networks are good enough in live video streaming. But, implementing live video streaming is not an easy task. Delivery of live video streams can be complicated because of the variety of platforms, network types and streaming formats competing in today's online media services. Every user’s expecting reliable high quality performance with data availability using heterogeneous choices. And it is now tougher than ever to ensure an agreeable, problem less viewing experience on live streaming. Another problem of video streaming is handling security issues, which need fast verification and effective attack resistance. CDN suffers from various security issues, here, a new prototype to perform secure content delivery especially on live video streaming. A lightweight video streaming authentication technique is developed, this authenticates and transmits the data and eliminates the unauthorized access.

Comparative study of game theoretic approaches to mitigate network layer attacks in VANETs

Abstract For the past few years, number of accidents have occurred due to the rapid usage of vehicles in the road and the lack of emergency alerts provisioning to the vehicle user during natural disasters. VANETs provide an environment to communicate between vehicles to avoid such accidents. Vulnerabilities in the network layer of VANET delays timely traffic data dissemination to the vehicle user. Ensuring security in VANET is very essential for the construction of a robust network for transmission of data. In this paper the game theoretic approaches like co-operative and non-cooperative games for handling security issues in VANET are discussed.

Measuring Security

The researchers have been focusing on embedding security from the early phases of software development lifecycle. They have researched and innovated a field of Security Engineering where security concerns are embedded during requirement, design, and testing phases of software development. Efforts were made in developing methods, methodologies, and tools to handle security issues. Various methods are present in the literature for eliciting, analyzing and prioritizing the security requirements. During the design phase based on prioritized requirements, environment parameters and attribute a suitable security algorithm mainly cryptography algorithms are identified. Then a question arises how to test the effectiveness of chosen algorithm? Therefore, as an answer to the issue in this paper, a process for Security Testing is presented that evaluates the selected security algorithms. Evaluation is done by generating the test scenarios for functionalities using sequence diagram representing the threats at vulnerable points. Then, checking the mitigation of potential threats at identified vulnerable points. A security index is generated which shows the effectiveness of deployed/ chosen security algorithm. The process ends with the generation of a test report depicting the testing summary. For a clear understanding of the process, the proposal is illustrated with a case study of the cloud storage as a service model.

Improving SIEM capabilities through an enhanced probe for encrypted Skype traffic detection

Nowadays, the Security Information and Event Management (SIEM) systems take on great relevance in handling security issues for critical infrastructures as Internet Service Providers. Basically, a SIEM has two main functions: ((i) the collection and the aggregation of log data and security information from disparate network devices (routers, firewalls, intrusion detection systems, ad hoc probes and others) and ((ii) the analysis of the gathered data by implementing a set of correlation rules aimed at detecting potential suspicious events as the presence of encrypted real-time traffic. In the present work, the authors propose an enhanced implementation of a SIEM where a particular focus is given to the detection of encrypted Skype traffic by using an ad-hoc developed enhanced probe (ESkyPRO) conveniently governed by the SIEM itself. Such enhanced probe, able to interact with an agent counterpart deployed into the SIEM platform, is designed by exploiting some machine learning concepts. The main purpose of the proposed ad-hoc SIEM is to correlate the information received by ESkyPRO and other types of data obtained by an Intrusion Detection System (IDS) probe in order to make the encrypted Skype traffic detection as accurate as possible.

Security in IoT network based on stochastic game net model

SummaryThe growing prevalence of Internet of Things (IoT) ushers itself with various security concerns. Being complex in nature, traditional security countermeasures cannot be applied directly to IoT networks. Addressing this problem, this paper aims to combine the capabilities of 2 traditional methods namely, game theory (GT) and stochastic Petri nets (SPN), such that the resultant model is compatible for complex IoT networks. Game theory does not have enough modeling capability to cope up with complexity of IoT networks. However, it has an advantage of providing a priori idea of attacker's actions and strategies with the help of Nash equilibrium. This information is used by administrators to devise appropriate action plan to detect and prevent attacks on network. On the other hand, SPN is a dynamic, scalable and probabilistic model, which overcomes the limitations of GT. Nevertheless, it is not able to compute best strategies (Nash equilibrium) of attacker. Therefore, this paper proposes stochastic game net (SGN)–based model for security in IoT, which combines the advantages of SPN and GT. The novelty of the work lies in the fact that this is the first attempt to define SGN for handling security issues in IoT. Simulations performed using OPNET tool show that SGN shows 5.94% and 5.91% improvement in terms of confidentiality, 6.4% and 8% improvement in terms of integrity, and 6.7% and 8.9% improvement in terms of availability over SPN and GT, respectively.

Toward Securing Cyber-Physical Systems Using Exact Cover Set

Cyber physical systems (CPS) are computer systems that integrate computing, coordination and communication systems in order to monitor physical entities in the physical world. As they interact with the critical systems and infrastructure that may impact real life. There are many issues in design and constructions of these types of systems. One of the key issue that receives so many attention is the security of such systems. Although security solutions for Information Systems handle the security issues associated with Traditional IT security, but the impact of a failure in a cyber-physical system demands a different approach to handle security issues related to the cyber world. In this work, we focus on using a key agreement technique known as Physical Signal Key Agreement (PSKA) technique using the Exact Cover method to generate the random key which will be embedded into an access control model known as the Modified Context-Aware Security The feasibility of our framework (MCASF) to handle both normal and critical situation on demand is demonstrated via a Pervasive Health Monitoring Systems (PHMS).

Security Enhancement Architectural Model for IMS based Networks

Objectives: The IP Multimedia Subsystem (IMS) is an architectural framework for delivering protocol-based services that enables an easy deployment of new rich multimedia services mixing voice and data. In fact, the IMS is vulnerable to several malicious uses that can be conducted by its users. We propose in this paper, a security enhancement architectural model to monitor the system and build a rapid and normal functioning retrieval after failing. Methods/Statistical Analysis: The weakness of the IMS network topology structure makes it a target for both normal cellular threats and IP-related threats. We propose a model that consists of dividing a complex set of end-of-end (IMS-based) network security related features into separate architectural components, layers and tiers in order to divide the system and to be more precise in the problems’ detection phase. Findings: Using the proposed approach, an effective evaluation study is investigated. The simulated network adopting our model showed an excellent behavior. The quality metric measuring call quality showed some excellent results. In other words, the adoption of the proposed model does not affect the normal frame delays, packet arrival durations and packet loss rates. The results showed how our proposed model is lightweight and effective in handling security issues. Application/Improvements: This paper fulfills a huge need of handling security using an effective lightweight architectural model adopting the proposed approach. Our methodology ensures designing a secure, flexible and easily monitored network with a rapid location of the affected areas and effective security supervision.

EXPERIMENTAL SUBSTANTIATION OF ATTRIBUTIONAL STYLE IN TRAFFIC POLICE OFFICERS’ BEHAVIOR

Данная статья, подготовленная в рамках научной школы «Психолого-педагогическая система профессионального становления кадров в органах внутренних дел Российской Федерации», отражает прикладной аспект исследования проблемы обеспечения безопасности сотрудниками полиции на транспорте. В ней содержаться материалы проведенного эмпирического исследования психологических характеристик сотрудников в рамках обоснования атрибутивного стиля деятельности, определяющего специ- фику, качество и надежность деятельности сотрудников полиции на транспорте. Атрибутивный стиль деятельности сотрудников полиции на транспорте рассматривается в рамках концепции атрибутивных технологий познания опасных явлений, в основе которых заложены технологии оперативной диагностики, техники социальной перцепции и атрибуции и понимается как наиболее устойчивое образование, выражающее уровень субъектности и профессиональной направленности сотрудника. Цель: эмпирическое обоснование атрибутивного стиля деятельности сотрудников полиции на транспорте как интегративного качества, обеспечивающего надежность деятельности по распознаванию опасных явлений.

Securing the Application Layer in eCommerce

As e-commerce transaction is evolving, security is becoming a paramount issue since a great deal of credit cards, fund transfer, web shopping and public retirements are involved. Therefore, an appropriate development process is necessary for such security critical application. Also, handling security issues at early stage of software development is paramount to avoiding vulnerabilities from scaling through production environment unnoticed. This paper proposes a comprehensive security requirements and security design within the development phase of an e-commerce application as a security control to identify security flaws at early stage of web application development which might prevent re-architecture when discovered at a later stage.

Knowledge acquisition, semantic text mining, and security risks in health and biomedical informatics

Computational techniques have been adopted in medical and biological systems for a long time. There is no doubt that the development and application of computational methods will render great help in better understanding biomedical and biological functions. Large amounts of datasets have been produced by biomedical and biological experiments and simulations. In order for researchers to gain knowledge from original data, nontrivial transformation is necessary, which is regarded as a critical link in the chain of knowledge acquisition, sharing, and reuse. Challenges that have been encountered include: how to efficiently and effectively represent human knowledge in formal computing models, how to take advantage of semantic text mining techniques rather than traditional syntactic text mining, and how to handle security issues during the knowledge sharing and reuse. This paper summarizes the state-of-the-art in these research directions. We aim to provide readers with an introduction of major computing themes to be applied to the medical and biological research.

Security in Collaborative Multimedia Web-based Art Projects

We propose a web-based system for organizing the creation and the interaction in multimedia web-based environments that permit the collaboration among artists, audience, curators and publishers. This system uses a threelevel approach for handling security issues in multimedia projects. Especially, it applies authorization, digital certification and watermarking mechanisms on multimedia content. Authorization mechanism controls users operations in multimedia files based on a set of actions imposed on reallife scenarios. Digital certification mechanism ensures the secure content transfers among users and multimedia content server through Web. Digital watermarking mechanism handles copyright-protection and authentication issues that appear in multimedia systems applying a semantically secure watermark. The strength of our system considers multimedia content not as an atomic digital entity, but as a part of a project with a specific workflow that applies watermarking techniques in all its parts.