Implementation Of Security Measures Research Articles

Resource Optimization of MAB-Based Reputation Management for Data Trading in Vehicular Edge Computing

Vehicles are hesitant to upload data to edge servers in vehicle edge computing (VEC) as many vehicle data collected and perceived by various on-board sensors contain sensitive and personal information and lack economic incentive. Instead of free access to shared data, encrypted data trading will alleviate security and privacy concerns and provide an incentive for vehicle owners to share their data. The edge server needs to pay the price in data trading, and reputation management is a great method to help it trade with reliable and available vehicles. In this paper, we propose a multi-armed bandit (MAB)-based reputation management scheme, so the edge servers can select the high reputation vehicles for data trading, which can ensure the credibility and reliability of the data. The encryption scheme is applied to achieve the required transmission security level and defend the rights and interests of the edge server. On the other hand, implementing security measures will consume the computation and communication resources of the vehicles. We formulate an optimization problem that maximizes the revenue of vehicles in data trading under the constraints of time delay, energy consumption, and security level. Simulation results demonstrate that the proposed scheme is effective and efficient for vehicle reputation management, data trading selection, and resource allocation.

Impacts of 5G on cyber-physical risks for interdependent connected smart critical infrastructure systems

5 G technology promises a wide range of benefits for critical infrastructure (CI), including improved reliability, increased efficiency, cost savings, and increased worker safety. However, it also brings many new risks that CI owners and operators must be prepared for to facilitate effective risk mitigation and response. These risks, however, have not been systematically assessed for CI systems. This paper investigates how the cyber-physical risk landscape will be impacted by 5 G for four major CI sectors in detail: smart transportation, smart water, smart power, and smart oil and gas networks. Compared to prior work only examining a single CI network, the authors present a comprehensive assessment of the types of threats that these sectors can expect based on past incidents, the new vulnerabilities introduced by 5 G and existing vulnerabilities exacerbated by the introduction of more connected devices, along with mitigation recommendations for each risk. Risks associated with the rollout of and transition to 5 G, risks from 5 G network disruptions, cyberattack risks, and privacy risks are included. While each of the sectors has a unique risk profile, general themes also emerged across multiple CI networks. Notably, there will be an increased number of threat vectors from smart devices reliant on the telecommunications network to provide monitoring and control of infrastructure services. Because many of these devices are accessible by the public, the risk of social engineering attacks and vulnerability to physical hacking are exacerbated. Successful risk mitigation requires collaboration among CI's many stakeholders to implement security measures at the interfaces between connected devices to limit the access to assets in case one security measure is successfully bypassed. Due to the increased interdependencies between CI networks, operators must create backup plans to keep the most essential services running on a smaller bandwidth in case of a 5 G outage or similar failure. As 5 G capabilities continue to develop and the risk landscape evolves, ongoing research is needed and CI owners and operators should be prepared to update security measures to remain ahead of identified risks and threats.

Teaching Social Science Aspects of Information Security

As information security has become increasingly crucial in our daily lives, there is a growing need to teach its social science aspects. This paper explores the challenges and best practices for teaching social science aspects of information security. It begins with the importance of information security and cyberspace and highlights the human aspects of information security. Next, it discusses the role of social science in understanding information security and how social science can help us better design and implement security measures. The paper identifies challenges in teaching social science aspects of information security, such as the interdisciplinary nature of the subject and the need for a standardised curriculum. Finally, the paper outlines best practices for teaching social science aspects of information security, such as using case studies and real-world examples, incorporating interactive and experiential learning, and leveraging existing resources. The conclusion highlights the importance of incorporating social science aspects of information security in education and suggests future research directions.

0302 Impact of the COVID-19 pandemic on the sleep pattern of a Brazilian population sample

Abstract Introduction As of late 2019, a new viral variant that causes respiratory infection has concerned humanity: SARS-CoV-2. The following year, the COVID-19 pandemic was declared by the World Health Organization. The spread of the virus across country borders led to the implementation of security measures to contain new infections. The confinement during the pandemic helped to minimize new infections, but it affected people's mental health, including sleep parameters. This study evaluated the impact of the pandemic and social isolation on sleep parameters, including sleep quality and hygiene, in a sample of the Brazilian population. Methods An online questionnaire on the Google Docs platform was sent to all participants who agreed to contribute to the study, constituting a convenience sample. The questionnaire consisted of 8 parts: written consent; socio-demographic characteristics; assessment of quarantine status, COVID-19 infection, and other health complaints; general sleep evaluation; Pittsburgh Sleep Quality Index (PSQI); Insomnia Severity Index (ISI); Sleep Hygiene Index (SHI); closing remarks. All questions were presented in Portuguese and participants had to answer them considering 2 different contexts: before and during the pandemic. PSQI and ISI categorical data from the two periods were evaluated using the McNemar-Bowker test. To evaluate the effects of the pandemic on questionnaire scores, sleep efficiency and total sleep duration (TSD), generalized estimating equations models were used. Age and quarantine time were covariates in the model. Results The final sample comprised 1,109 individuals. During the pandemic, it was observed an increase in sleep efficiency (β=3.537; p=0.002) and in the TSD (β=29.212; p=0.002). Yet, during the pandemic there was an elevation in the PSQI score (β=4.196; p< 0.001) and in the ISI score (β=–6.952; p< 0.001). For this last, there was a statistical significance when considering the interaction between life context and gender, in which women during the pandemic had higher ISI scores than men before the pandemic (β=–1.877; p< 0.001). A decrease in the SHI score was reported during the pandemic (β=–6.768; p< 0.001). Conclusion An increase in sleep efficiency, total sleep time and SHI score was reported in the sample during the pandemic, although insomnia symptoms and sleep quality worsened. Support (if any)

Evaluation of Hospital Information Management System (HIMS) by using the method Coping Model of User Adaption (CMUA) at the Siti Khodijah Sepanjang Hospital

The Siti Khodijah Muhammdiyah Sepanjang Hospital uses EHOS as a means of providing HIMS. Preliminary study found that in outpatient units consisting of 30 clinics, 1 clinic did not record on the EHOS application, namely home care in filling out data, it was known that filling was still incomplete on patient identity sheets, general consent, initial assessment, and special examinations. The porposed this study to improve the utilization of HISM technology at siti khodijah sepanjang hospital based on the CMUA method using a sample of 135 respondents determination of the number of samples used the formula estimate a proportional in finite population with minimal 117 samples. Simple random sampling was used. This study was conducted from September to December 2022 at Siti Khodijah Sepanjang Hospital. The results of this study are 8 hypotheses, most of which have significant value, including H1: the perception of using HIMS as an opportunity (PO) will positively influence the adoption of a benefit-maximizing strategy (BM) of significant value (sig.0.007). H2: the perception of using HIMS as an opportunity (PO) will positively influence the adoption of a benefit satisfaction strategy (BS) with significant value (sig. 0.00). H3: The manager's perception of the use of HIMS as a threat (PT) will positively influence the disturbance management strategy (DH), with a significant value (sig. 0.000). H5: when managers perceive a situation as an opportunity, the more control they feel over the benefits of HIMS, the more likely they are to adopt a benefit maximizing (BM) strategy of significant value (sig. 0.000). H6: When managers perceive a situation as an opportunity, the more control they feel over the benefits of HIMS, the more likely they are to adopt a significant value benefit satisfaction (BS) strategy (sig. 0.016). H7: when a manager perceives the use of HIMS as a threat, the greater the perceived control over the implementation of security measures, the more he or she will adopt an intrusion management strategy (SP) of significant value (sig. 0.004). It was concluded that in using HIMS to optimize its use from the perspective of threats and opportunities, managers can adopt benefit maximizing strategies, benefit satisficing strategies, and disturbance handling strategies.

Evaluation of the registry DIALYREG for the assessment of continuous renal replacement techniques in the critically ill patient

Continuous renal replacement techniques (CRRT) can induce complications and monitoring is crucial to ensure patient safety. We designed a prospective multicenter observational and descriptive study using the DIALYREG registry, an online database located on a REDCap web-based platform that allows real-time data analysis. Our main objective was to identify CRRT-related complications in our intensive care units (ICUs) and implement security measures accordingly. From January 2019 to December 2020, we included 323 patients with admission diagnoses of medical illness (54%), sepsis (24%), postoperative care (20%), and trauma (2%). CRRT indications were homeostasis (42%), oliguria (26%), fluid overload (15%), and hemodynamic optimization (13%). The median initial therapy dose was 30 ml/kg/h (IQR 25–40), and dynamic adjustment was performed in 61% of the treatments. Sets were anticoagulated with heparin (40%), citrate (38%) or no anticoagulation (22%). Citrate anticoagulation had several advantages: more frequent dynamic CRRT dose adjustment (77% vs. 58% with heparin and 56% without anticoagulation, p < 0.05), longer duration of set (median of 55 h, IQR 24–72 vs. 23 h, IQR 12–48 with heparin and 12 h, IQR 12–31 without anticoagulation, p < 0.05), less clotting of the set (26% vs. 46.7% with heparin, p < 0.05), and lower incidence of hypophosphatemia (1% citrate vs. 6% with heparin and 5% without anticoagulation). It was also safe and effective in subgroup analysis of patients with liver disease or sepsis. The main global complications were hypothermia (16%), hypophosphatemia (13%) and metabolic acidosis (10%). Weaning of the therapy was achieved through early discontinuation (56%), nocturnal therapy transition (26%) and progressive SLED (18%). 52% of the patients were discharged from the hospital, while 43% died in the ICU and 5% died during hospitalization. We can conclude that the DIALYREG registry is a feasible tool for real-time control of CRRT in our ICU.

A Critical Cybersecurity Analysis and Future Research Directions for the Internet of Things: A Comprehensive Review.

The emergence of the Internet of Things (IoT) technology has brought about tremendous possibilities, but at the same time, it has opened up new vulnerabilities and attack vectors that could compromise the confidentiality, integrity, and availability of connected systems. Developing a secure IoT ecosystem is a daunting challenge that requires a systematic and holistic approach to identify and mitigate potential security threats. Cybersecurity research considerations play a critical role in this regard, as they provide the foundation for designing and implementing security measures that can address emerging risks. To achieve a secure IoT ecosystem, scientists and engineers must first define rigorous security specifications that serve as the foundation for developing secure devices, chipsets, and networks. Developing such specifications requires an interdisciplinary approach that involves multiple stakeholders, including cybersecurity experts, network architects, system designers, and domain experts. The primary challenge in IoT security is ensuring the system can defend against both known and unknown attacks. To date, the IoT research community has identified several key security concerns related to the architecture of IoT systems. These concerns include issues related to connectivity, communication, and management protocols. This research paper provides an all-inclusive and lucid review of the current state of anomalies and security concepts related to the IoT. We classify and analyze prevalent security distresses regarding IoT's layered architecture, including connectivity, communication, and management protocols. We establish the foundation of IoT security by examining the current attacks, threats, and cutting-edge solutions. Furthermore, we set security goals that will serve as the benchmark for assessing whether a solution satisfies the specific IoT use cases.

The Planning Process of the Online Transaction Fraud Detection Using Backlogging on an E-Commerce Website

E-commerce is defined as the selling and purchasing of products, as well as the transmission of data or payments, through an electronic network. E-commerce is driven by the internet, where customers can browse through an online store and place orders for items or services using their own devices. Online transactions are used by e-commerce businesses to charge customers for goods and services. The rising number of online transactions has increased the number of payment frauds. Payment fraud refers to any type of fraudulent or illegal transaction carried out by a cybercriminal. The criminal utilizes the internet to deprive the victim of money, personal property, or sensitive information. The objective of this research is to investigate the gaps in the existing online transaction fraud detection on e-commerce websites, to propose and develop an online transaction fraud detection using backlogging on e-commerce websites that is safe against fraud and enables simple and efficient transactions and implement security measures to prevent a breach of the proposed system. The method for this research is using the Waterfall methodology as a Software Development Life Cycle.

Концептуальні положення забезпечення кібербезпеки енергетичної галузі України

The spheres of cybersecurity (ensuring cybersecurity), as well as the functioning and protection of critical infrastructure and its objects in Ukraine, are defined by the Cybersecurity Strategy of Ukraine (2016), the laws of Ukraine "On the Basic Principles of Cybersecurity of Ukraine" (2017) and "About Critical Infrastructure" (2021). The formation and implementation of state policy in the mentioned spheres, and planning and execution of related measures by cybersecurity entities and critical infrastructure facilities take place at the regulatory, organizational, and technical levels. The work is devoted to the analysis of the state of regulatory provision of information security, cybersecurity, cyber protection, the creation and functioning of the national system of critical infrastructure in Ukraine, the practice of applying the provisions of the relevant regulatory and administrative documents by the subjects of cybersecurity, as well as the development of the main conceptual provisions of cybersecurity, which systematize the use of forces (means) and the implementation of security measures at the regulatory, organizational and technical levels, in energy (fuel and energy) sector of the state’s critical infrastructure for 3 years and determining the principles of forming priority approaches and measures to increase the level of cybersecurity of the energy industry.

The Gas and Brake Policy: Indonesia's COVID-19 Securitization Dilemmas

AbstractIndonesia, like many other countries, has encountered a slew of social, political, economic, and public health challenges in the aftermath of the COVID-19 pandemic. In response to these challenges, the Indonesian government implemented security measures by instituting large-scale social restrictions (Indonesian: Pembatasan Sosial Berskala Besar) and, later, micro-scale social restrictions (Pemberlakukan Pembatasan Kegiatan Masyarakat) to restrict people's mobility and virus transmission. Using securitisation theory as a framework, this article examines how the nationwide dilemma between public health and economic security arose. Based on official documents, government papers, and political speeches, this study reveals how the country's COVID-19 responses were largely defined by carefully constructed and flexible measures known as the ‘gas and brake’ policy (Kebijakan Gas dan Rem), which were aimed at resolving the health-economic dilemma. This policy is deemed appropriate given the country's limited public health and economic resources, despite the fact that many argue that such an approach reflects indecisiveness and a lack of coordination among the country's authorities. This article also demonstrates that policymakers in Indonesia use this policy to resolve the securitisation dilemma by reinforcing the hierarchical ordering of security sectors as a readjustment strategy. The policy is used to justify tightening or easing social restrictions by changing the security narrative throughout the pandemic.

BLOKÇEYN ŞӘBӘKӘSİNİN KOMPONENTLӘRİNİN İŞLӘNMӘSİ İLӘ İNFORMASİYA MÜBADİLӘSİNİN TӘHLÜKӘSİZLİYİ

Blockchain technology is an emerging technology that has the potential to change the way information is stored and transmitted. Its main components are the concepts of decentralization, transparency and distribution, which, in short, are the absence of any central control system between the source and the destination, the interdependence of the blocks used by the participating parties as a chain, and continuously, the registration and storage, and finally, authorization processes after authentication of the information it needs by means of a key belonging to the original owner, as in asymmetric encryption, with the possibility of any loss and at the time of need, stored at millions of points. The purpose of this summary is to discuss the application of information security for data transmission against cyber attacks in blockchain technology. Different methods of implementing security measures such as encryption, digital signatures and multi-signature transactions, different types of cyber-attacks that blockchain technology is vulnerable to and how to prevent these attacks has also been discussed. Also, the role of smart contracts in ensuring secure data transfer and the importance of developing secure protocols has been emphasized. In terms of security, it has also considered the future of blockchain technology and how it can be used to further increase the security of data transmission.

A Critical Review on Learning Behavior for Protection of User's Privacy using IOT

Changes and improvements to human existence have been made possible by recent advancements in communication and information technology, notably the internet of things (IoT). The IoT system is vulnerable to cyber-physical security and privacy assaults such denial of service, spoofing, phishing, obfuscations, and jamming because of the widespread availability and rising demand for smart devices. Cyber dangers to IoT systems, such as eavesdropping, attacks, and more. The new threats to cyber-physical security cannot be effectively avoided or mitigated using the same old methods. Keeping IoT systems safe calls on security measures that are not only effective, but also flexible and up-to-date. Among the various approaches to cyber-physical system security, machine learning (ML) is widely regarded as the most cutting-edge and promising since it has spawned several new lines of inquiry into the problem (CPS). This literature study provides an overview of the structure of Internet of Things (IoT) systems, explores the many attacks that may be launched against them, and discusses the current thinking on how to best use machine learning to ensure the security and safety of IoT infrastructure. It also covers the probable future research obstacles that may arise while implementing security measures in IoT systems.

Security of the participants in the criminal process: procedural and criminological aspects

This article is devoted to the study of procedural and criminological aspects of ensuring the safety of participants in criminal proceedings. The problems of legal regulation of ensuring the safety of participants in these proceedings are also considered. The legal status of the subjects of relevant decisions is analyzed and the international and Ukrainian experience in regulating these issues is studied. The methods of dialectical, formal-logical, historical, structural-functional, institutional analysis, content analysis of laws and regulations and the method of evaluation of scientific positions were used. Among the relevant results of the research, the necessity of implementing security measures for participants of criminal proceedings in the Criminal Procedure Code of Ukraine in a separate section was demonstrated. Similarly, the expediency of creating in Ukraine a specialized independent structural unit for the implementation of measures to protect persons involved in criminal proceedings is discussed. In the main conclusions the need for the introduction in Ukraine of corresponding programs for the protection of participants in criminal proceedings is argued.

A Prosumer-Oriented, Interoperable, Modular and Secure Smart Home Energy Management System Architecture

As prices on renewable energy electricity generation and storage technologies decrease, previous standard home energy end-users are also becoming producers (prosumers). Together with the increase of Smart Home automation and the need to manage the energy-related interaction between home energy consumers and Smart Grid through different Demand Response approaches, home energy management becomes a complex and multi-faceted problem, calling for an extensible, interoperable and secure solution. This work proposes a modular architecture for building a Smart Home Energy Management System, integrable with existing Home Automation Systems, that considers the use of standard interfaces for data communication, the implementation of security measures for the integration of the different components, as well as the use of semantic web technologies to integrate knowledge and build on it. Our proposal is finally validated through implementation in one real smart home test-bed, evaluating the system from a functional standpoint to demonstrate its ability to support our goals.

"Comparative Analysis of Energy Cost of Sequential and Parallel Cryptographic Algorithms on Different Platforms"

Cell phones, smart cards, and health monitoring gadgets are just a few examples of the numerous battery-powered embedded systems utilized to access, alter, and store sensitive and complicated data today. Users are concerned about the protection of their identity credentials, their software packages, and their information. These systems make considerable use of cryptographic algorithms to implement security measures. Many cryptographic algorithms do calculations that are hard to compute and waste a huge amount of energy as a result. In this study, the energy consumption of serial and parallel cryptography algorithms is analyzed. Using an eight-core parallel system and Joule metre (Microsoft's Research Tool), we were able to reduce energy consumption in comparison to sequential algorithms with promising results. The study says that low-frequency symmetric multiprocessors have shown promising results and can make a big difference in green computing, which would be good for society as a whole.

Worker Characteristics and Measures Associated With Patient and Visitor Violence in the COVID-19 Pandemic: A Multilevel Regression Analysis From China.

ObjectiveTo analyze the patient and visitor workplace violence (PVV) toward health workers (HWs) and identify correlations between worker characteristics, measures against violence and exposure to PVV in COVID-19 pandemic.MethodsA cross-sectional survey utilizing the international questionnaires in six public tertiary hospitals from Beijing in 2020 was conducted, and valid data from 754 respondents were collected. Multilevel logistic regression models were used to determine the association between independents and exposure to PVV.ResultsDuring COVID-19 pandemic and regular epidemic prevention and control, doctors were 5.3 times (95% CI = 1.59~17.90) more likely to suffer from physical PVV than nurses. HWs most frequently work with infants were 7.2 times (95% CI = 2.24~23.19) more likely to suffer from psychological PVV. More than four-fifth of HWs reported that their workplace had implemented security measures in 2020, and the cross-level interactions between the security measures and profession variable indicates that doctors in the workplace without security measures were 11.3 times (95% CI = 1.09~116.39) more likely to suffer from physical PVV compared to nurses in the workplace with security measures.ConclusionDoctors have higher risk of physical PVV in COVID-19 containment, and the security measures are very important and effective to fight against the physical PVV. Comprehensive measures should be implemented to mitigate hazards and protect the health, safety, and well-being of health workers.

Securing a Safe City

While contemporary ethnographies on “security” focus on abstract notions of safety or the active implementation of security measures, this paper dives into the passive, subconscious structures shaping the labor conditions of residential security guards in Hong Kong. Private security forces have been around since ancient civilization and are so familiar that they have become vastly overlooked in modern society, camouflaging within the social landscape. However, private security forces are everywhere in Hong Kong, crucial to the high levels of safety and convenience of the city’s residents. Security companies display consistent employment practices showing the intrinsic nature of how companies manage their labor in a capitalist economy. This paper depicts how divides between socio-economic groups and security perceptions channel middle-aged or elderly sectors towards residential security guard employment. Additionally, labor management strategies and relationships between residents and security guards further reinforce the structure of dominance, maintaining the status quo while preventing the security guards from unionizing and creating change.

TD-RA policy-enforcement framework for an SDN-based IoT architecture

Internet of Things (IoT) has been suffering from increasing security threats since many years which compromise the whole network security. Automating the management of IoT devices helps in implementing security measures within communication systems. Software Defined Networking (SDN) has been introduced as a new networking approach that enables this automation. Many approaches were developed to mitigate IoT attacks in SDN-based IoT networks. Some studies investigated the prevention of flooding attacks, while others tried to cover broader attack surfaces. However, their proposed methods are time consuming and resource-exhausting as they use complex algorithms. In this paper, we propose a lightweight secure Threat Detection (TD) and Rule Automation (RA) framework namely “TD-RA” to effectively detect and mitigate different cyber-security threats in an SDN-based IoT environment. The proposed solution is composed of a Binary and Multi-class Classification Modules (BCM/MCM) for IoT threat detection and a Policy-Enforcement Module (PEM) for attack mitigation. Different machine learning methods have been implemented and compared to solve the classification problems. It is shown that for binary classification, the Decision Tree method achieves the highest accuracy which is around 98.7%, while for multi-class classification, Random Forest achieves the highest accuracy which is around 91.1%. The experimental results show that the proposed framework can successfully detect abnormal traffic and prevent IoT threats through SDN with smaller network overhead and high performance. Moreover, the overall processing time of our security modules is significantly smaller than that of existing solutions by reaching a mean value of 6 ms. This paper also introduces a large-scale architecture that comprises clusters of controllers to maintain high availability of network services. Such an integrated security approach, including detection and mitigation techniques, provides IT industries with reliable security measures that can be implemented to increase SDN-based IoT system responsiveness to different IoT attacks.

Effect of implementing security measures on fear of crime

ABSTRACT Several studies have explored the relationship between the implementation of security measures and people’s fear of crime. However, most were cross-sectional studies, and the causality between two variables is not clear. This study examined the relevant causal relationships using scenario-based experiments. In Study 1, Japanese university students (N = 180) read one of the two messages, and the fear of crime was found to be decreased in participants who received a message about guards patrolling. This result was inconsistent with previous research reported that the perception of security measures positively correlates with fear of crime, and inspired Study 2. In Study 2, Japanese participants (N = 105) read one of three scenarios that involved security measures against serious crime (the serious condition), security measures against minor crime (the minor condition), or no security measures (the control condition). The results showed that fear of crime was increased more in participants in the serious condition than in the other two conditions; fear of crime in the minor condition remained around the same level with that in the control condition. These results support the hypothesis that implementing security measures increases fear of crime only when security measures are suggestive of serious crimes.

(Do not) remember my face: uses of facial recognition technology in light of the general data protection regulation

ABSTRACT Facial recognition technology is a state-of-the-art digital tool widely used by private and public entities. Its benefits are notable, but the challenges that it presents cannot be overlooked, as this paper will expose. In Europe, a major challenge is ensuring compliance with the General Data Protection Regulation, starting with the search of a proper legal ground for data processing and the identification of an adequate exception to allow the processing of biometric data. The implementation of security measures and the risks associated with data transfer to third countries must also be considered. A further issue is the reliability of facial recognition technology, which relates to data accuracy. These challenges are substantial, but they are not insurmountable. More comprehensive and in-depth knowledge of the legal intricacies of the General Data Protection Regulation, more secure and transparent data-processing procedures, and full acknowledgement of the technology’s limitations might provide a liability shield.