Identification Of Security Threats Research Articles

Elevating Organizational Competitiveness: Deconstruction of Information System Management Models and Concepts Using Machine Learning

This article discusses the role of machine learning in addressing the challenges of Information System (IS) management in today's business environment. It highlights the importance of data analytics, predictive maintenance, and security threat identification in overcoming the complexity of IS management. The article presents a custom framework that modifies paradigms for IS management, including data collection, continuous monitoring, machine learning model selection, and seamless integration. This approach is proven effective in solving problems and boosting competitiveness. The article provides risk mitigation techniques, realistic implementation methodologies, and case studies to help organizations embrace this innovative journey. The article concludes by highlighting the importance of implementing this novel paradigm as a necessary first step towards a data-driven, globally competitive future

Recent Advances in Baggage Threat Detection: A Comprehensive and Systematic Survey

X-ray imagery systems have enabled security personnel to identify potential threats contained within the baggage and cargo since the early 1970s. However, the manual process of screening the threatening items is time-consuming and vulnerable to human error. Hence, researchers have utilized recent advancements in computer vision techniques, revolutionized by machine learning models, to aid in baggage security threat identification via 2D X-ray and 3D CT imagery. However, the performance of these approaches is severely affected by heavy occlusion, class imbalance, and limited labeled data, further complicated by ingeniously concealed emerging threats. Hence, the research community must devise suitable approaches by leveraging the findings from existing literature to move in new directions. Towards that goal, we present a structured survey providing systematic insight into state-of-the-art advances in baggage threat detection. Furthermore, we also present a comprehensible understanding of X-ray-based imaging systems and the challenges faced within the threat identification domain. We include a taxonomy to classify the approaches proposed within the context of 2D and 3D CT X-ray-based baggage security threat screening and provide a comparative analysis of the performance of the methods evaluated on four benchmarks. Besides, we also discuss current open challenges and potential future research avenues.

APPLICATIONS OF INTERNET OF MEDICAL THINGS (IOMT) IN TELEMEDICINE FOR MEDICAL AND HEALTH CARE SYSTEM

IOMT is derived from IOT and applied to all fields of knowledge, Biomedical, Artificial Intelligence, especially medical science and medicine. This paper deals with three different areas in telemedicine effectively using IOT/ IOMT. We present analysis and technique to ensure security measures adopted in telemedicine system. This paper presents applications of IOT/IOMT intelemedicine in Smart-medicine to further enhance its reliability, effectiveness and accuracy to get insurrection and revolution for improvement of developing tools to offer instant cure to patients, observers and saves pathway of fitness record for fit individuals. We include effectively areas of different medical or psychological issues. In system, the risk assessment is addressed for identification of security threats and unauthentic access to the system. Using IOT/IOMT in telemedicine ensuresorganization safety, IOT interoperability, active loading capability, protected action of the structure and united access tools, which are salient features of the paper.

An Efficient Identification of Security Threats in Requirement Engineering Methodology.

Today, we completely rely on Information Technology (IT) applications for every aspect of daily life, including business and online transactions. In addition to using these IT-enabled applications for business purposes, we also use WhatsApp, Facebook, and a variety of other IT applications to communicate with others. However, there will undoubtedly be a drawback to every benefit. Since everything is linked to the Internet, there are many opportunities for security to be compromised. To address this, we are working to identify security threats early on in the software development process, specifically during the requirements phase. During the requirement engineering process, an engineer can recognize the security specifications in a more structured manner to create threat-free software. In our research work, we suggest the Identification of Security Threats during Requirement Engineering (ISTDRE) technique for detecting security risks throughout the requirement engineering process. The four points that make up this ISTDRE technique are Hack Point (HP), Speculation Point (SP), Trust Point (TP), and Reliable Point (RP). The new ISTDRE methodology will be validated using a case study of an ERP system involving two currently used methodologies: Model Oriented Security Requirements Engineering (MOSRE) and System Quality Requirements Engineering (SQUARE).

Towards a Systematic Threat Modeling Approach for Wireless Sensor Networks

Wireless Sensor Networks (WSNs) have attracted the research fraternity due to the prevalent use of this technology in various domains such as health, automation, and the military. The WSN consists of numerous sensor nodes deployed randomly. As these networks are deployed in a real-world scenario, security and privacy are of utmost concern. Security protects the wireless network against an adversary. Firstly design the security, identification of security threats, the security design for suggestive countermeasures is designed. Threat and attack modeling are well-known techniques for designing appropriate security solutions. Threat modeling helps in the identification of dangers that might lead to security compromise. Attack modeling includes an understanding of the threat and will help in designing the proper mitigation mechanism. This article focuses on various threat modeling approaches for identifying the threat. Finally, the article concludes with the comparative analysis of various approaches such as STRIDE, DREAD, PASTA, TRIKE.

Construction of security protection system based on online security monitoring technology of acquisition terminal

With the completion of the construction goal of “full coverage, full collection and full cost control” of the power consumption information acquisition system, the power consumption field of power grid has been fully transferred into the operation and maintenance period. In the process of security detection and sampling of the acquisition terminal, it is found that there are security risks in the field operation of the acquisition terminal, lack of online security protection processing mechanism for network risks and their own vulnerabilities, and there is a risk of being vulnerable to large-scale malicious attacks. Therefore, it is urgent to study the online security monitoring technology of the acquisition terminal and strengthen the construction of online security protection system of the acquisition terminal Design. In this paper, through the construction of the security protection system based on the online security monitoring technology of the acquisition terminal, the online security monitoring system of the acquisition terminal is built to collect and analyze the security data information of the acquisition terminal in real time, and monitor the acquisition terminal uniformly, so as to realize the security situation awareness of the acquisition terminal and the region; through the security analysis, the security risks in the operation environment of the acquisition terminal are found in time, so as to realize the security Threat identification and attack traceability, improve the level of terminal security operation protection. Through the construction of the security protection system based on the online security monitoring technology of the acquisition terminal, it can effectively support the security monitoring of all kinds of terminal equipment in the power Internet of things.

Factors Affecting National Interests in the Aftermath of Post 1990 Armed Conflict in Nepal

National Interest to a particular country is often shaped and prioritized by various variables including independence, distinctiveness, territorial integrity and socio-cultural determinants. Nepal’s national interest depends on thesecurity vision in the aftermath of violent conflict, development initiatives based on utilization of available natural resources and state policies for assuring inclusiveness, social cohesion and justice. Nepal experienced a ten years long armed conflict since 1996 to 2006 that affected a range of social, political and economic dimensions along with security apparatus of the country. Though the fundamental attributes of national interest such as territorial and political sovereignty and the core values remain constant, security policy and strategies are found to be evolving in the nascent democracy often shaped by the ability to identify security threats. With the aim of developing a causal relationship between national interest and security vision, security policy, identification of security threats, quantitative analysis is conducted by adopting SPSS and Karl Pearson’s Correlation tools. Moreover, Nepal’s new security policy has been analyzed in the aftermath of violent conflict. This paper draws the conclusion that higher the ability of political leaders to identify the security vision, the achievement of national interest is higher. This also depicts if security vision is closely linked with the political values the promotion of national interest is high. Setting the context on political change and the security strategy, it is admitted that new form of government induces additional security concern which if not identified may challenge the means of ensuring national security.

Highly secure edge-intelligent electric motorcycle management system for elevators

Because of their portability, electric motorcycles are usually pushed into elevators by residents and charged in the home, which has serious safety risks. Traditional manual-based methods to manage this behavior have poor monitoring effects and high costs. As for automatic management systems using artificial intelligence (AI), the deployment method matters. Cloud-based deployment methods have the disadvantages of high latency, high risk of privacy leakage, and heavy network transmission loads. In this paper, we propose a highly secure edge-intelligent electric motorcycle management system for elevators. By using edge-based deployment method, the monitor pictures are processed locally without being uploaded to the cloud, which can effectively resist network attacks and prevent residents’ private data from being leaked. To improve the system security, we fully analyze the challenges faced in the application scenarios and introduce security threat identification (STI-1H8) model to identify the security threats. In addition, we propose several data enhancement methods to improve the system recognition accuracy. Experimental results show that our system can achieve a high recall rate of 0.82. By using data enhancement and data mixing strategies, it can reduce the misjudgment rate by 0.35. Moreover, compared to cloud computing, our edge-based method can reduce the latency by 19.6%, meeting real-time requirements.

Analyzing and Managing the Impact of Risks using Multi Fuzzy Inference System

Information technology security risk evaluations are necessary in determining measures being taken for risk analysis. Risk analysis is also significant as it predicts the loopholes in the software which can get manipulated during suspicious activities. The article has attempted to analyze the risk issue and further suggests a multi-fuzzy risk evaluation approach for the identification of security threats. This approach analyses hacker risks based on the potential ability for an assailant, their overall probability for an attacks as well as the implications of such attacks. It typically consists of 3 sub fuzzy inference structures. The 1st fuzzy inference structure assesses an assailant's total capacities. The 2nd fuzzy inference structure assesses the general probability of ambush success, whereas the 3rd fuzzy inference structure measures risk thresholds.

Integration of IoT technologies in construction supply chain networks; CPEC a case in point

China Pakistan Economic Corridor (CPEC) is a flagship project of China's Belt and Road (BRI) Initiative. Under the banner of CPEC, enormous developmental and infrastructure up-gradation projects are planned to be executed. These projects vary in their range and diversity from the development of a network of highways to up-gradation of electrical energy powerplants. Thus, the construction of these projects requires an operational and dedicated supply chain. This research study focuses on the identification of different internet of things (IoT) strategies that can be incorporated for increasing the efficiency of these supply chains. Fuzzy VIKOR, a multi-criteria decision-making technique (MCDM), has been employed for the prioritization of these strategies. These strategies are ranked on the basis of their cost-effectiveness, benefit to operational firms and partners, and social and environmental value. A total of twelve strategies are evaluated on the basis of the aforementioned criteria. The results of fuzzy VIKOR analysis prioritised the incorporation of IoT in equipment monitoring, reduction of environmental emissions, identification of security threats, augmented reality and inventory management as the most essential and effective strategies. Therefore, this study recommends the adoption of these strategies in CPEC projects on a priority basis.

Methods, methodologies, and tools for threat modeling with case study

The security of each system is essential for its use. In order to make this process as successful as possible, it is advisable to develop a threat model for the system under consideration at the design stage. The purpose of the threat model is to enable the identification of security threats, by whose further analysis we can conclude which are the greatest vulnerabilities of the system and which pose the greatest risk. There exist many different approaches to threat modeling in terms of methods, methodologies, and tools. In this paper, we give an overview of those approaches and apply one of them, i.e., the most represented and mature to a specific system. A STRIDE-based methodology, software-centric method, and Microsoft Threat Modeling Tool (MTMT) mixture has been used to threat model the Web of Things (WoT)-based temperature management system which is in the design phase.

Identification of Security Threats and Proposed Security Mechanisms for Wireless Sensor Networks

The serious constraints and requiring deployment atmospheres of wireless sensor networks make safety for these systems extra difficult than for traditional networks Nevertheless, a number of residential or commercial properties of sensor networks may help address the challenge of building safe and secure networks. The distinct aspects of sensor networks may enable novel defenses not available in traditional networks.In this paper, we examine the security related concerns and also obstacles in wireless sensor networks. We identify the safety and security threats, testimonial suggested protection devices for wireless sensor networks.

A novel kill-chain framework for remote security log analysis with SIEM software

Network security investigations pose many challenges to security analysts attempting to identify the root cause of security alarms or incidents. Analysts are often presented with cases where either incomplete information is present, or an overwhelming amount of information is presented in a disorganized manner. Either scenario greatly impacts the ability for incident responders to properly identify and react to security incidents when they occur. The framework presented in this paper draws upon previous research pertaining to cyber threat modeling with kill-chains, as well as the practical application of threat modeling to forensic. Modifications were made to conventional kill-chain models to facilitate logical data aggregation within a relational database collecting data across disparate remote sensors resulting in more detailed alarms to security analysts. The framework developed in this paper proved effective in identifying the relationship of security alarms along a continuum of expected behaviors conducive to executing security investigations in a methodical manner. This framework effectively addressed incomplete or inadequate alarm information through aggregation, and provided a methodology for organizing related data and conducting standard investigations. Both improvements proved instrumental in the effective identification of security threats in a more expeditious manner.

MODEL SECURITY THREATS VIDEO INFORMATION RESOURCES SYSTEMS OF VIDEOCONFERENCING

This article is devoted to assessing the security video information resource videoconferencing specialized control systems. The video data used to control processes and decision-making in the operation of public authorities; acquires the status of state informative resources. To analyze the security of this information resource are encouraged to apply security features model CIA (confidentiality; integrity and availability). To assess the formation and approaches to ensure information security video information resource videoconferencing requires to analyze possible violations of video sources with mandatory identification of security threats; the factors contributing to their manifestation and vulnerabilities. The basis of the analysis of information security threats is the development of threat models. The purpose of this paper is the formation of a model of security threats video information resource with video conferencing for core government. It is shown that the modeling of security breach is advantageously carried out by analyzing the interaction of a logical chain "threat - a threat - the method of implementation - vulnerability - consequences"; followed by classification; analysis and evaluation of sources of threats; vulnerabilities (factors) for each category of information security. Formed a generalized threat model video information resource videoconferencing. All security threats classified into three main groups according to their origin: threats of actions subject access; threats of technical means; threats resulting from natural sources. The developed model of video information resource security threats videoconferencing enables analysis of vulnerabilities and security threats in the implementation of relevant control systems under various conditions and modes of operation of video conferencing for a specific category of information security - confidentiality; integrity; availability; followed by identifying the most significant (actual) threats.

Proces prioritizace hrozeb pro tvorbu Bezpečnostní strategie České republiky

This article offers systematic view of a process of identification of security threats and, subsequently, their use in the making of strategic documents, notably the Security Strategy of the Czech Republic. It is not the aim of the authors to name or define such threats, but to present the process itself. It is paramount to any credible security strategy that it deals with the threat identification in the most precise fashion. The authors take reservations against the "catalogue" approach and claim the processes of prioritization and categorization to be essential for any policies derived from the security strategy, especially in times of economic need. It is also the 2011 final paper of the project "Trends, Risks, and Scenarios of the Security Developments in the World, Europe, and the Czech Republic - Impacts on the Policy and Security System of the Czech Republic" (TRS / VG20102013009).

Identification of vapor-phase chemical warfare agent simulants and rocket fuels using laser-induced breakdown spectroscopy

Application of laser-induced breakdown spectroscopy (LIBS) to the identification of security threats is a growing area of research. This work presents LIBS spectra of vapor-phase chemical warfare agent simulants and typical rocket fuels. A large dataset of spectra was acquired using a variety of gas mixtures and background pressures and processed using partial least squares analysis. The five compounds studied were identified with a 99% success rate by the best method. The temporal behavior of the emission lines as a function of chamber pressure and gas mixture was also investigated, revealing some interesting trends that merit further study.

Experimental comparison of attack trees and misuse cases for security threat identification

A number of methods have been proposed or adapted to include security in the requirements analysis stage, but the industrial take-up has been limited and there are few empirical and comparative evaluations. This paper reports on a pair of controlled experiments that compared two methods for early elicitation of security threats, namely attack trees and misuse cases. The 28 and 35 participants in the two experiments solved two threat identification tasks individually by means of the two techniques, using a Latin-Squares design to control for technique and task order. The dependent variables were effectiveness of the techniques measured as the number of threats found, coverage of the techniques measured in terms of the types of threats found and perceptions of the techniques measured through a post-task questionnaire based on the Technology Acceptance Model. The only difference was that, in the second experiment, the participants were given a pre-drawn use-case diagram to use as a starting point for solving the tasks. In the first experiment, no pre-drawn use-case diagram was provided. The main finding was that attack trees were more effective for finding threats, in particular when there was no pre-drawn use-case diagram. However, the participants had similar opinions of the two techniques, and perception of a technique was not correlated with performance with that technique. The study underlines the need for further comparisons in a broader range of settings involving additional techniques, and it suggests several concrete experiments and other paths for further work.

Aspect-oriented specification of threat-driven security requirements

This paper presents an aspect-oriented approach to integrated specification of functional and security requirements based on use-case-driven software development. It relies on explicit identification of security threats and threat mitigations. We first identify security threats with respect to use-case based functional requirements in terms of security goals and the STRIDE category. Then, we suggest threat mitigations for preventing or reducing security threats. To capture the crosscutting nature of threats and mitigations, we specify them as aspects that encapsulate pointcuts and advice. This provides a structured way for separating functional and security concerns and for analysing the interaction between them.

SECURE SOFTWARE DEVELOPMENT USING USE CASES AND MISUSE CASES

There is a need to inculcate in students the idea of secure system development. This paper investigates the application of use cases to the identification of security threats and security requirements; these can then be incorporated into the software design and implementation and used as a basis for testing. The method is easy to teach and easy to use. It provides a highly organized way of thinking about security early in the software life cycle. It can be a tool to inculcate secure software development among students.

Into Cerberus' Lair: Bringing the Idea of Security to Light

Using the motif of Cerberus, the three-headed monster watchdog of Hades, this article attempts to bring ‘security’ to light. Specifically, it addresses two related questions. The primary question is: What does ‘security’ mean?. Here it is argued that ‘security’ is related to ‘order’ and is a reflection not of a positive value in and of itself, but the relative success of any given order to realise its core values in relation to other orders. Therefore, ‘security’ is found to be like Cerberus insofar as it exists not as an independent value or being, but only in relation between two orders. Having located ‘security’ within this conceptual framework, the article then addresses its second question: What are the effects of security?. The motif of Cerberus suggests that security ‘bites' in three ways: first, that specific measures of security control the members of an order; second, that the identification of security threats reinforce certain persons and structures of the order as being the definers of the order; and finally, that the implementation of certain security measures can change and transform the order itself. In this way the analysis offered here brings ‘security’ to light not only as an inherently political term connected to political values, but to provide foundations for critiquing the rhetorical use of ‘security’ in contemporary political discourse and thought.